Data deletion
This page describes how to request removal of your personal data processed by Xamar, in accordance with the Brazilian LGPD (Art. 18, VI), the GDPR right to erasure (Art. 17) and Meta Platforms' data deletion policy.
How to request
Send an e-mail to our DPO:
Include in the message body:
- Full name
- E-mail registered on the Platform
- CNPJ (if you are a corporate customer)
- Phone number associated with the WABA, if applicable
- Description of the request (delete entire account, specific data, etc.)
For your security, we may request additional identity verification before processing the request.
Response time
We confirm receipt within 2 business days and process the deletion within 15 business days from identity confirmation, as required by the LGPD.
What is deleted
- Customer registration and admin user data
- Message history stored on our infrastructure
- Sent and received media (images, audio, video, documents)
- Account-linked technical and usage logs
- Individualized metrics and analytics
What may be retained
Some data may be retained after deletion, exclusively for the periods required by Brazilian law:
- Access logs: 6 to 12 months (Brazilian Civil Rights Framework, Art. 15)
- Tax and contractual documents: 5 years (accounting/tax law)
- Anonymized or aggregated data: indefinitely, as it does not allow re-identification
WhatsApp message data (Meta)
WhatsApp Business is operated by Meta Platforms, Inc., which is the primary controller of message data exchanged between the customer and its contacts. Requests to delete data directly from WhatsApp must be made to Meta:
Upon request, we forward applicable petitions to Meta on the data subject's behalf, but the final decision is Meta's.
Other ways to exercise your rights
Deletion is just one of the rights guaranteed by LGPD Art. 18 and GDPR Arts. 15-22. To access, correct, port or query your data, also write to privacy@xamar.com.br. More information in the Privacy Policy.