Bimalink Data Deletion Instructions

1. Your Right to Deletion

You can ask Bimalink to delete your personal information, your account, or the data we received from a connected service such as Facebook, Instagram, WhatsApp, Google, or Microsoft. This page explains what you can delete yourself, how to request deletion, what happens after a request, and how long deletion takes. It supplements our Privacy Policy.

2. Delete Data From a Connected Service

If you connected a Facebook Page, Instagram account, WhatsApp number, ad account, mailbox, calendar, or cloud storage account to Bimalink, you can disconnect it and remove the data we received from it at any time:

• sign in to Bimalink;
• open Settings and select the relevant area (Social Media, Meta Ads, Email, Calendar, or Storage);
• choose the connected account and select Disconnect or Remove.

Disconnecting revokes our access token, stops any further sync, and removes the stored credentials for that integration. Messages, posts, leads, or files already synced into your organisation remain in your account until you delete them in Bimalink or request full deletion using the steps below. You can also remove Bimalink from the provider's own settings, for example under Facebook Settings › Apps and Websites or your Google account permissions.

3. Delete Records Inside Bimalink

Users with the appropriate permissions can delete individual leads, clients, contacts, documents, conversations, invoices, listings, and other records directly in the platform. Deleting a record removes it from your organisation's active workspace. Some records are retained for a short period in backups or for legal, tax, and accounting purposes, as described in section 6.

4. Delete Your Account or Organisation

To delete your user account, or an entire organisation and all of its data, use the request form above, or email support@bimalink.co.ke with the subject line “Data Deletion Request”. Either way, tell us:

• the email address and phone number registered with your Bimalink account;
• the organisation name, if you are asking us to delete an entire organisation;
• whether you want your user account deleted, the organisation deleted, or only data received from a specific connected service;
• any connected service you want covered, such as a Facebook Page, Instagram account, or WhatsApp number.

We verify the identity of the requester before acting, because deletion is permanent. If you are a team member rather than the organisation owner, we may need the owner's confirmation before deleting organisation-wide data.

5. What Happens After a Request

Once we verify a deletion request, we:

• acknowledge the request, normally within 5 business days;
• revoke access tokens and stop any ongoing sync with connected services;
• delete the requested account, organisation, records, and files from our production systems within 30 days;
• remove the data from routine backups within 90 days, as backups expire on their normal cycle;
• confirm to you in writing once deletion is complete.

6. Data We May Retain

We may retain limited information after deletion where the law requires it or where we have an ongoing legal basis. This can include invoices, payment records, and tax documents kept for statutory accounting periods, records needed to resolve a dispute or enforce our agreements, and minimal security or audit logs used to prevent fraud and abuse. Retained information is kept only for as long as necessary and is not used to provide the service to you.

7. Deletion Cannot Be Undone

Deletion is permanent. Once an account or organisation is deleted, we cannot restore leads, clients, contacts, documents, conversations, invoices, or settings. If you need a copy of your data, export it from Bimalink or ask us for an export before submitting a deletion request. Deleting an organisation also ends any active subscription and add-ons for that organisation.

8. Contact Us

For deletion requests, questions about this page, or any privacy concern, contact us at support@bimalink.co.ke.