Data Deletion

You can request deletion of your personal data at any time. We process every request under Article 17 of the GDPR (the "right to erasure"), and we respond within 30 days.

If you operate a business that uses Työ

Email [email protected] from the email address tied to your operator account, with the subject line "Data deletion request". Tell us:

• The business (workspace slug or business name).
• Whether you want to delete only your operator profile, or also request the business's controller to delete customer records (only the business can authorise the latter).

We confirm receipt within 3 business days and complete deletion within 30 days. Audit-log entries are retained for legal compliance but separated from your identity where possible.

If you are a customer who messaged a business

The business you messaged is the data controller of your conversation data. Two paths:

• Direct request to the business: contact them via WhatsApp or the channel they normally publish. Tell them you want your conversation history deleted from their Työ workspace.
• Request to us: email [email protected] with the WhatsApp number you used and the business's name. We forward the request to the business's controller and confirm completion to you.

If you came here from Facebook

When you revoke the Työ app's access via Facebook Settings → Apps and Websites, Meta notifies us via the data-deletion callback. We process the request automatically, audit it, and give you a confirmation code. You can look up the status of any deletion request at:

/en/data-deletion/<your-confirmation-code>

What we delete

• Account credentials and session tokens.
• Profile data (name, email, phone, preferences).
• Message content and inferred attributes (preferences, interests, prior purchases or bookings) from semantic memory.
• Transaction history we hold (an integration partner — booking system, POS, etc. — may retain its own copies).

What we keep, and why

• Audit-log entries: retained for the lifetime of the customer relationship plus 12 months. Required for legal compliance, fraud and abuse forensics, and Meta's platform policy. Where possible we replace personal identifiers in the audit row with anonymised references.
• Invoicing records (operators only): retained under Finnish accounting law for the periods required by Kirjanpitolaki (typically 6 years).

Right to complain

If you believe we have not handled your deletion request properly, you may lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutettu) at tietosuoja.fi.

Contact

[email protected] — Innovategy Oy, Finland.