Access, deletion, and export

Privacy Request Workflow

How customers, users, and data subjects can request access, export, correction, deletion, or other privacy actions.

Last updated: June 2026

How to submit a request

Email support@zenkoo.app with the subject “Privacy request”. Include your name, email address, organization, the WhatsApp number or account involved if relevant, and the request type.

Supported request types

  • Access: ask whether Zenkoo processes personal data about you and request a copy where applicable.
  • Correction: ask Zenkoo or the customer admin to correct inaccurate account or sales data.
  • Export/portability: request an export of account or customer data where technically available and legally required.
  • Deletion: request deletion of an account, connected WhatsApp account data, or specific personal data where applicable.
  • Restriction or objection: ask Zenkoo or the customer to limit certain processing where required by law.
  • Tracking preferences: when optional services are enabled, use the NoClutterCRM privacy controls to change analytics and advertising choices.

Workflow

1. Intake

Zenkoo records the request, request type, requester identity, organization, date received, and target response date.

2. Verification

Zenkoo verifies the requester before sharing, exporting, or deleting data. For customer-controlled WhatsApp data, Zenkoo may route the request to the customer admin.

3. Scope

Zenkoo identifies the relevant account, WhatsApp number, conversations, user profile, media, logs, and retention constraints.

4. Fulfillment

Zenkoo exports, corrects, deletes, restricts, or explains the data handling outcome, subject to legal and technical limits.

5. Record

Zenkoo keeps a minimal record of the request and outcome for accountability and abuse prevention.

Response target

Zenkoo targets one calendar month for GDPR-style privacy requests after verification, unless a request is complex or additional verification is needed.

Default retention guide

Messages

Default message retention is 365 days unless configured differently. Direct chats may also be limited by stored-message count.

Media

Default media retention is 30 days unless configured differently. Historical media download can be disabled.

Account data

Kept while the account is active and deleted or anonymized after verified deletion where no legal/security reason requires retention.

Auth sessions

Short-lived sessions expire and can be revoked server-side. Expired session records are pruned on a rolling basis.

Backups/logs

Deleted according to operational backup and log cycles; immediate deletion from every backup may not be technically possible.

Customer-admin requests

If you are a customer admin and need account-level deletion or export, include your organization name and the WhatsApp account names/numbers involved. Zenkoo may require additional verification before fulfilling the request.