Data Deletion Instructions

Last updated: 2 September 2026

This page explains how to request deletion of personal data from the WeHub service, what gets deleted, how long it takes and how confirmation is provided. It complements the Privacy Policy and the Data Processing Agreement.

An important structural point: WeHub is a platform that businesses use to talk to their own customers. Conversation content belongs to the business you contacted, which is the Controller of that data. WeHub processes it only on that business's behalf. The route therefore depends on who is asking.

1. I contacted a business on WhatsApp, Instagram, Messenger, email or by phone, and I want my data deleted

1. Contact that business directly. It decides and performs the deletion, and it holds the details.
2. If you cannot identify or reach the business, write to [[email protected]] and include: the business name or the number you contacted, the phone number or address you contacted from, and what you are asking for.
3. We will identify the relevant account and forward the request to the business within [5 business days], and assist it in carrying it out. We are not permitted to delete a business's data on our own initiative, except where the law requires it.
4. What is deleted when the business deletes a contact: all of that contact's identities (phone number, email address, Instagram and Messenger identifiers), all conversations and messages across every channel, media files sent, notes and labels recorded, call logs and recordings where they exist, and customer satisfaction responses.
5. What remains: an audit record of the deletion itself (who performed it and when), without content and without identifying details of the individual, plus aggregate non-identifying figures in reports.
6. Timing: deletion from production systems is immediate or within [7 days]; from encrypted backups within [90 days]; and in any event within 30 days of receiving a complete request.

2. I connected a Facebook, Instagram or WhatsApp Business account to WeHub and I want the connection and its data deleted

This is the route Meta directs people to. There are two ways to use it:

2.1 Through Facebook settings (automatic)

1. Go to Facebook Settings ⟶ Apps and Websites.
2. Find the WeHub app and choose Remove.
3. Select the option to delete the activity and data accumulated in the app.
4. Facebook sends us a signed deletion request. We process it automatically and return a confirmation code (in the form `WHDEL-...`) together with a link to a status page.
5. The status page `https://app.wehub.co.il/meta/deletion?code=<code>` shows the date the request was received and its status: received, completed, or failed with contact details.

What this performs: access tokens issued through your Facebook account are invalidated and their encrypted material is erased; connection session data is cleared; channels that relied on those tokens are marked as requiring reconnection, and the business administrators are notified.

What this does not perform: the business's customer conversations are not deleted by this action. They belong to the business as Controller, not to the Facebook user who made the connection. To delete conversations see Section 1 or Section 3.

2.2 By contacting us

Write to [[email protected]] from the address registered on the account. We will perform the same action and send written confirmation.

3. I am a WeHub business customer and I want to delete an account or an entire business

3.1 Deleting a personal user account

From Profile ⟶ Security you can request account deletion. Before deletion you must transfer ownership of any business where you are the sole owner. The personal account, sessions, devices and display preferences are deleted or anonymised within [30 days]; audit records are retained without content.

3.2 Deleting a business (tenant)

A user with the owner role can delete the business from the account settings. Deletion happens in two stages:

1. A 30-day soft delete: access is blocked, restoration is possible, and a full export (a JSON archive together with media files) can be downloaded.
2. Full deletion: after those 30 days, all business data is removed from production systems within a further [30 days], and from backups within [90 days].

3.3 What is retained after deletion

• Invoices and accounting records: 7 years, under Israeli law.
• Audit records: action identifier, actor and time, without conversation content.
• Aggregate statistics that do not permit identification.

4. Deletion confirmation

• For a request arriving through Meta: a confirmation code and status page, as described in Section 2.1.
• For a request by email: written confirmation to the requester, stating the date of performance and a general description of what was deleted.
• For a business customer: a signed deletion statement on request.

5. Refusal or delay

We may refuse or delay a request where: we cannot verify the requester's identity; the data is needed to meet a legal obligation or to defend a legal claim; or the request concerns data for which we are not the Controller, in which case we will forward it to whoever is. In such cases we will explain the reason and the routes for appeal.

6. Contact

• Privacy and data deletion: [[email protected]]
• Privacy officer: [privacy officer name]
• Post: [address]
• Phone: [phone]

For more on data categories, processing bases and retention periods, see the Privacy Policy.

---

> Note: draft pending review by a licensed Israeli attorney (לתשומת-לב: טיוטה לבדיקת עורך-דין). Confirm that this page is served publicly over HTTPS and entered as the Data Deletion Instructions URL in the Meta app settings, and verify the timings against the actual implementation.