Data Deletion

1. Which route applies to you

You are	What to do
A customer or borrower of a lender that uses Zotta, including someone who received WhatsApp messages from that lender	Contact the lender first; it is the data controller and can act on your request directly. If you cannot reach the lender, or want us to forward your request, use the steps in section 2.
Someone who contacted Zotta through zotta.ai or used the website chat	Email us using the steps in section 2.
A lender (client) that wants its account or its customers' data deleted, or wants to disconnect its WhatsApp Business Account from Zotta	See section 3.

2. How to request deletion

1. Email info@zotta.ai with the subject line Data deletion request.
2. Tell us which of the following applies, so we can find your records:
   • the phone number you used on WhatsApp, in international format, and the name of the business that messaged you; or
   • the email address you used to contact zotta.ai.
3. We may ask you to confirm the request from the same phone number or email address, to make sure we are not deleting someone else's data.

What happens next:

• We acknowledge your request within 5 working days.
• If the data belongs to one of our clients, we forward the request to that lender within 5 working days and help it respond.
• Data we control is deleted within 30 days of verifying the request, and we confirm by email when it is done.

3. Client (lender) requests

• Disconnect WhatsApp: in your Meta Business Suite, open Business settings, then Partners, and remove Zotta's access to your WhatsApp Business Account. This stops all further message processing by Zotta immediately. You can also ask us to disconnect it for you.
• Delete specific customer records: email us with the customer identifiers and we will delete them on your written instruction.
• End the contract and delete everything: email info@zotta.ai from an administrator account. We export your data on request, then delete it from production systems within 90 days of the contract end date and from backups on their normal rotation.

4. What is deleted and what may be kept

When a request is completed we delete the personal data we hold about you, including WhatsApp phone numbers, business-scoped identifiers, message content and delivery logs, contact form submissions and chat transcripts.

Some data may be retained where the law requires it or where it is needed to defend legal claims, for example:

• Records a lender is legally required to keep about a credit agreement. These are held by the lender under its own retention rules; we keep them only while the lender instructs us to.
• Audit and security logs, kept in a form that does not identify you where possible.
• Copies in encrypted backups, which are overwritten on the normal backup cycle of no more than 90 days.

Data held by Meta about your WhatsApp account is governed by WhatsApp's own privacy policy and can be managed from within the WhatsApp app.

5. Questions

If you have any questions about deletion or about our Privacy Policy, email info@zotta.ai or write to ZOTTA AI LTD, 17B North Common Road, Uxbridge UB8 1PD, United Kingdom.