How long information is kept
We keep personal information for the purposes described in this policy, taking account of the account or project relationship, configured retention settings, legal obligations, disputes, security and recovery needs. Different record types have different retention requirements.
When WhatsApp receiving is enabled, original message content and attachment references expire 60 days after first receipt. Expired content is unavailable to the inbox and assistant; scheduled cleanup removes that content and its message-associated contact identifiers. Limited delivery, deduplication and security records may remain to prevent retries from restoring deleted content. This does not delete saved estimates, unlink a registered staff number or remove copies held independently by WhatsApp or recipients. Separately saved media follows the retention rules for that feature.
Saved assistant source text has a default retention period of 60 days. The period shown in the service or configured for that feature may differ. This source-text period does not automatically delete estimates, proposals, customer records, uploaded media, audit records, billing records or independent copies held by other services. Where available, the assistant lets the source author export or delete saved source content before it expires.
Deleting content may leave limited records needed for legal, security, transaction or recovery purposes. Backup and third-party copies may follow separate retention processes. We explain relevant limitations when responding to a deletion request rather than promising that every copy disappears immediately.
Access, correction and data deletion
Email info@crafterops.com with the subject “CrafterOps privacy request” or “CrafterOps data deletion”. Include the email associated with your account, the business/workspace involved and what you want to access, correct, export or delete. For a WhatsApp-related request, include the relevant phone number with country code and identify the connected business. Do not send passwords, verification codes, access tokens or full payment details.
We may ask for information needed to verify your identity or your authority to act for the business before disclosing or deleting records. If a contractor controls the requested customer/project records, we may direct or coordinate the request with that contractor.
Depending on applicable law, you may have rights to access, correct, delete or obtain a copy of information, restrict or object to certain processing, withdraw consent, or complain to a relevant authority. We handle requests under applicable requirements. Some records may need to remain for legal obligations, fraud prevention, disputes or other permitted purposes; we explain applicable limits in our response.
An authorized agent may contact us on your behalf where permitted by law. We may require evidence of authorization and, when appropriate, direct identity verification. We respond within the period required by applicable law and explain an applicable denial or extension. If your law provides an appeal right, reply to our response with “Privacy appeal” so we can review the decision. We do not discriminate against you for exercising a privacy right; deleting information needed for a feature may make that feature unavailable.
You may disconnect an integration or revoke its access where the relevant controls are available. Disconnection stops that connection's future use; it is separate from deleting previously stored records. Stopping WhatsApp messages or deleting your WhatsApp account does not automatically submit a CrafterOps deletion request.