StrixInbox Data Deletion

StrixApps is a modular ecosystem of business applications operated by OPRA Sociedad Anónima, corporate ID (cédula jurídica) 3-101-248847, under the Hivestrix brand. This page explains how to request and how we process the deletion of data processed through the platform, in particular through the StrixInbox module and its integration with Meta's WhatsApp Cloud API.

It should be read together with the Privacy Policy and the Terms of Use.

• Customer companies: may request the deletion or export of the data they manage on the platform in accordance with the terms of the contracted service.
• End users: individuals whose data is processed by a customer company (for example, contacts who chat over WhatsApp) may request the deletion of their personal data. Since the customer company is directly responsible for that relationship, we may forward the request to it for handling, notifying the requester accordingly.
• Meta / WhatsApp administrators: when a company connects its number through Meta's Embedded Signup, the administrator who authorized the App may request the deletion of the data associated with that connection.
• Website visitors: those who have submitted a contact form or demo request may ask for the deletion of the data provided in it.

When a valid deletion request is processed, the following are permanently deleted for the affected account(s):

• Conversations and their messages (text and media), including the history, contacts and messages synchronized from the WhatsApp Business app when the number was connected through coexistence.
• Contacts that are no longer referenced by any other conversation.
• Associated automated customer service opportunities / leads.
• Stored media files (images, audio, video, documents).
• The account's connection credentials (access tokens, App Secret and verify token), which are stored encrypted at rest.
• Contact form and demo request data, when the request comes from the person who submitted it.

Data we must retain due to a legal, contractual or security obligation will be retained only for the strictly necessary time and then deleted or anonymized.

Deletion in StrixApps does not erase anything from the phone: the conversations in the WhatsApp Business app remain in the app, under the control of the business customer.

When the business customer operates under the own infrastructure arrangement (its data resides on its own servers), the actual deletion is the responsibility of the business customer. Opra will provide reasonable technical assistance to carry it out.

You have three equivalent options:

• Remove the App from Meta. If you connected your number through Embedded Signup, when you remove the StrixApps App in your Meta/Facebook account settings, Meta automatically notifies us (deauthorize callback) and deletion of the associated data begins.
• Meta data deletion request. From your Meta account settings you can send a Data Deletion Request. Meta sends us the signed request; we begin the deletion and return a confirmation code and a status URL where you can check the progress.
• By email or phone. Write to us at [email protected] or call us at +506 6059 0207, stating the WhatsApp number, email or affected account and, if possible, your user identifier. We will verify your identity before executing the request.

When the request comes through Meta, we return a deletion status URL that includes the confirmation code assigned to your request. That page reports the actual status of the request:

• In progress: the deletion is being executed.
• Completed: the associated data has been deleted and the deletion has been persisted.
• Could not be completed automatically: a case that requires manual intervention by our team. Write to us at [email protected] to confirm it.

We never report a request as completed unless the deletion has been persisted and confirmed.

We begin deletion immediately upon receiving a valid, verified request. Deletion of conversations, contacts, leads, media and credentials is usually completed within minutes; in cases with a large volume of media it may take somewhat longer.

In any event, we handle requests within the applicable legal timeframes, which under Law No. 8968 are five (5) business days, unless a legally permissible extension applies.

Backup copies, where they exist, are overwritten according to their rotation cycle. During that interval the data remains encrypted and is not used for any purpose.

OPRA Sociedad Anónima, Hivestrix brand · StrixApps Corporate ID (cédula jurídica): 3-101-248847 Address: San Isidro de Heredia, Bodegas El Trapiche #1, Heredia, Costa Rica Privacy and data deletion email: [email protected] Phone: +506 6059 0207

If you believe your request has not been addressed, you may contact Costa Rica's Agency for the Protection of Inhabitants' Data (PRODHAB).