Data Deletion

In Refloat. Open Settings → Delete account in the web app or the mobile app and confirm; on the web you confirm by typing your business name. Your business’s records are deleted from our database immediately, and this cannot be undone. Photos, generated images, website files and reports held in file storage are removed within 30 days. If that business was the only one on your sign-in, your Refloat login is removed too.

By email. Write to support@refloat.in from the email address you signed in with, naming the business you want removed. We complete the deletion within 30 days and confirm by reply.

Deleting an account removes, for that business:

• your business profile, health scores, reports, POS records and logged sales;
• your catalogue, offers, generated posts and images, the photos you uploaded, and website builds;
• your WhatsApp conversations, message content, leads, campaigns, templates and opt-out list stored by Refloat, and your customers’ records;
• loyalty cards and rewards, Review QR feedback, and the business memory Refloat uses to keep drafts consistent;
• access tokens for every connected account (WhatsApp, Instagram, Facebook, Google Business Profile), which ends Refloat’s access to them; for a Facebook Page we also remove Refloat’s partner access to the Page, and for Google Business Profile we also ask Google to revoke that access, unless another of your businesses is still connected through the same Google account (see section 3);
• everything read through your Google Business Profile connection, including copies of your listing photos.

These are not deleted: records we must keep under Indian law (such as invoices and tax records); reviews we collected from your public Google listing, which we cache against its public Place ID rather than your account; raw message events received from Meta, which are removed 30 days after processing; and server logs, which are kept for a limited period.

You do not have to delete your account to remove a single customer. Email support@refloat.in from your registered address with the customer’s WhatsApp number (or the name on their record), and we will delete their conversation history, message content, lead record and loyalty card within 30 days.

If that customer had opted out of your marketing messages, we keep the single record of that opt-out. It contains nothing beyond the fact that this number must not be contacted, and it exists so their withdrawal of consent keeps being honoured.

Customers can also stop marketing messages themselves at any time by replying STOP to your WhatsApp number. That takes effect immediately and needs no action from you.

Disconnecting ends Refloat’s access; it does not delete your other data. Disconnect Instagram or Google Business Profile from Profile → Connections, your Facebook Page from Marketing → Ads, and WhatsApp from the WhatsApp card on your dashboard. The stored access token is deleted immediately, so Refloat can no longer publish, send messages, submit templates or otherwise act on that account for you. For a Facebook Page we also remove Refloat’s partner access to the Page; if Facebook refuses, we tell you, and you can remove Refloat yourself in Meta Business Suite. For Google Business Profile we also ask Google to revoke Refloat’s access, and you can remove it yourself at any time from your Google Account. One exception: Google revokes the whole grant, not one business’s share of it, so if another of your businesses is still connected through the same Google account we leave that access in place for it and only delete the token for this one.

Disconnecting Google Business Profile also deletes the reviews we read through it, the matching data and business memory built from them, and the listing audits made with it. Copies of your listing photos in your photo library, your review reply history and your past health scores and reports stay until you delete your account.

Your WhatsApp Business account, phone number, approved message templates and billing relationship with Meta all stay with you. They are yours, not Refloat’s, and disconnecting does not change them.

For other accounts, data already stored in Refloat, such as conversation history and the performance figures of past posts, is kept so your records stay intact. To remove it, delete your account or email us.

In Instagram, go to Settings → Apps and websites and remove Refloat. Instagram notifies us and we delete the stored credentials for that account automatically. If you send a data deletion request through Instagram, we return a confirmation code and a link where you can check the status of that request.

An account deletion you make in the app removes your records immediately and stored files within 30 days. Every request sent to support@refloat.in, whether for a whole account, a single customer or anything else, is completed within 30 days. Copies in encrypted backups are overwritten within 90 days.

If you are unhappy with how a request was handled, our Grievance Officer is reachable at the same address and responds within 30 days.