User Data Deletion

1. Your Right to Data Deletion

SynvaxisApp is operated by Synvaxis LLC, a company organized under the laws of the State of Wyoming, United States of America, with address at 30 N Gould St Ste N, Sheridan, WY 82801, USA. We respect your right to control your personal data. In accordance with the California Consumer Privacy Act (CCPA/CPRA), the General Data Protection Regulation (GDPR) of the European Union, the UK GDPR, the LGPD of Brazil, the Organic Law on Personal Data Protection (Ecuador), the Federal Law on the Protection of Personal Data Held by Private Parties (Mexico) and Meta's Platform Policy, you may request the complete deletion of your personal data from our systems at any time, free of charge and without suffering discriminatory treatment for exercising this right.

2. Data That Will Be Deleted

Upon requesting the deletion of your account and data, the following items will be permanently deleted:

• Account data: Name, email, authentication credentials and session metadata.
• Conversations: All messages exchanged through the platform, including text, images, audio and multimedia files.
• Contacts: Complete directory of managed contacts, including names, phone numbers and metadata.
• Orders: Order history, associated products, statuses and shipping data.
• Products: Product catalog, descriptions, prices, images and multimedia configurations.
• AI configurations: Custom prompts, sales-agent settings, voice personality and any stored training or context data.
• Integration credentials: WhatsApp Business API tokens, AI provider API keys (OpenAI, Google, Deepseek), ElevenLabs and Vapi credentials, and any other configured integration.
• Campaigns: Marketing campaign data, performance metrics and attribution settings.
• Notifications: History of system notifications and actions performed.
• Multimedia files: All images, audio, videos and documents stored on our storage platform.

3. How to Request Deletion

You may request the deletion of your data using any of the following methods:

3.1 From Your Account (Preferred Method)

If you still have access to your account, you can initiate deletion directly:

1. Sign in to your SynvaxisApp account.
2. Go to My Profile (user icon in the top-right corner).
3. Contact our support team using the email below to start the deletion process.

3.2 By Email

Send an email to gerencia@synvaxis.com with the subject "Data Deletion Request" including:

• Your full name as registered on the platform.
• The email address associated with your account.
• An explicit statement that you wish to delete all of your personal data.
• If the request relates to an end user whose data you administer as a Synvaxis customer, indicate this explicitly.

3.3 Meta (Facebook / WhatsApp Business) Users

If you use SynvaxisApp in connection with Meta's WhatsApp Business API or other Meta integrations, you may request the deletion of data obtained through those platforms via any of the following paths:

• By email: Send your request to gerencia@synvaxis.com with subject "Data Deletion Request — Meta" following the instructions in section 3.2. We will process your request within the timeframes described in section 4.
• Revoke access in Meta: You may revoke the application's permissions from your Facebook/Meta account settings. This will stop SynvaxisApp's future access to your data on Meta but does not automatically delete data already received; for full deletion you must submit the request by email as described above.
• Confirmation of the request: Upon receiving your request we will send an acknowledgment by email with a tracking number, and a final confirmation once the deletion has been completed.

4. Process and Timeframes

Once your deletion request is received:

• Identity verification: We will confirm your identity within 48 hours of receipt of the request.
• Grace period: After confirmation, your data will be marked for deletion. You will have a 14-day period to cancel the request if you change your mind.
• Deletion of active data: Data will be deleted from our active servers within 30 days after confirmation.
• Backup deletion: Data will be purged from our backup systems within 90 days after deletion from active servers.
• Confirmation: You will receive an email confirmation once deletion has been completed.

5. Data That May Be Retained

In certain limited cases, we may retain some data even after a deletion request, as required by law:

• Tax and accounting records: Transaction information necessary to comply with tax and accounting obligations, retained for the legally established period.
• Legal records: Data necessary to comply with legal obligations, resolve disputes or enforce agreements.
• Anonymized data: Aggregated, anonymized statistical data that does not allow user identification may be retained for analytical purposes.

6. Effects of Deletion

It is important that you understand the consequences of data deletion:

• Your account will be deactivated and you will not be able to access the platform.
• All active WhatsApp conversations managed by the AI will be disconnected.
• Tokens and integrations with third-party services will be revoked.
• Deletion is permanent and irreversible once completed.
• If you wish to use SynvaxisApp in the future, you will need to create a new account from scratch.

7. Partial Deletion

If you do not wish to delete your entire account, you may also request the partial deletion of specific data:

• Deletion of specific conversations or a date range.
• Deletion of specific contacts.
• Deletion of stored multimedia files.
• Disconnection and deletion of credentials of specific integrations.

For partial-deletion requests, please specify in your email exactly which data you wish to delete.

8. Contact

For any question or request related to the deletion of your data:

• Legal name: Synvaxis LLC
• Address: 30 N Gould St Ste N, Sheridan, WY 82801, USA
• Email: gerencia@synvaxis.com
• Suggested subject line: "Data Deletion Request"
• Response time: Acknowledgment within a maximum of 48 business hours; resolution in accordance with applicable legal timeframes (30 days under GDPR; up to 45 days under CCPA/CPRA, extendable once for a further 45 days upon prior notice).

We are committed to handling all requests in a timely and transparent manner, keeping the user informed throughout the process. If your request is denied, we will explain the reasons and inform you of your right to lodge a complaint with the data-protection authority competent in your jurisdiction.