Data Deletion Instructions

Merchants

• Download your data first (optional): the store owner can download the store’s data in Settings → Export store data.
• Disconnect WhatsApp: in Settings → Channels, disconnect the number. Our access to your WhatsApp Business Account stops at once and the integration token is wiped.
• Delete single items: delete products, images and other data in the app, on the pages that offer it. To delete one buyer’s personal data, open the customer’s page and use Privacy requests → Delete personal data.
• Delete your own user account: in Settings → Your account → Delete account on the web, or More → Account in the mobile app. You confirm with your password or passkey, and the account is deleted at once. The store stays: if you are its only owner, first make another team member an owner or close the store.
• Delete the whole store: the store owner emails privacy@whatcart.net from the owner’s email address, with the store name and the words “Delete my store”. We confirm the request within 7 days and delete the store and all its data within 30 days of confirming.
• A store with no activity for 12 months (no sign-in or use of the app, no order and no unused paid credits) is deleted automatically, after reminders 30, 7 and 1 day before.

Buyers

If you messaged or ordered from a store that uses WhatCart, that store is responsible for your data. Ask the store to delete it: the merchant can delete your personal data from their WhatCart dashboard at any time. To stop marketing messages only, reply STOP (or إيقاف, or DUR in Turkish) in the chat.

You can also email privacy@whatcart.net with the store name and your WhatsApp number. We forward your request to the store within 7 days, tell you that we have done so, and help the store carry it out. If the store has left WhatCart, its data has already been deleted or will be deleted on the schedule in our Privacy Policy.

Facebook and Meta users

To remove WhatCart’s access: in Meta Business Suite, open Business settings, select your WhatsApp account and remove WhatCart from its partners or connected apps. You can also remove it from Facebook Settings → Business Integrations. Removing it disconnects WhatCart automatically and wipes the integration token.

To ask us to delete the data we received from Meta about you or your business, email privacy@whatcart.net with the subject “Data deletion request”, your business name and the WhatsApp number or account concerned. We reply with a reference for your request, and tell you when the deletion is done, or explain why any part of the data must be kept.

What is deleted and what is kept

• Deleted with a store: account and store data, products and images, orders and customer data, conversations and their media, usage milestones and integration tokens. We also unsubscribe WhatCart from the store’s WhatsApp Business Account.
• Deleting a user account: sessions, passkeys and pending links are deleted, and the person’s name and email are replaced with “Deleted user” on the records the store keeps (such as orders they handled).
• Kept for a time: the audit log (12 months), server logs and copies of event notifications (up to 12 months), backups until they expire (up to 12 months), and records the law requires us to keep (such as financial records, including order pack purchases).
• Kept after deletion: a one-way hash of the business phone number, to stop repeated free trials, and a short deletion record with the store reference and dates, as explained in the Privacy Policy.
• Messages already delivered to a buyer’s phone stay on their device, and Meta keeps its own copies under its own policies; we cannot delete those.

Questions: privacy@whatcart.net. Full Privacy Policy: https://whatcart.net/privacy