Delete your data

01How to ask

1. Write to aisolvespro@gmail.com with the subject «Eliminar mis datos». If you prefer, send that same text to our WhatsApp. The person in charge of personal data, Walter Javier Serrudo, handles it.
2. Tell us (article 28 LFPDPPP): your name and where we should reply; what you want us to delete, or «everything»; and how to find you: the phone or email you contacted us with; your username, if it was on Instagram; if you use AISOLVES OS, your account email; if you connected a WhatsApp Business number, that number. If someone else asks on your behalf, we will verify your identity, theirs and the representation, through a public instrument, a power of attorney signed before two witnesses or your appearance in person (article 89, section II, of the LFPDPPP Regulations).
3. To check it is you, we will ask you to confirm it from that same number or email: it is the identification mechanism we set (article 89 of the LFPDPPP Regulations). If that is not possible, you can sign your request with your advanced electronic signature (e.firma), which exempts you from sending a copy of your ID, or show us the original of your official ID on a video call, which we do not record and of which we keep no copy. We do not ask for copies of IDs by email or on WhatsApp: our mailbox is a free Gmail account, which Google processes as a controller under its own terms (see the privacy notice, 3.7).
4. We confirm receipt with its date. A team member blocks and deletes the data and confirms it to you through the same channel, at the moment of deleting it: if you wrote to us on WhatsApp, you get a message with the date and what we keep right before the conversation is deleted, because afterwards there would be no way left to write to you; if more than 24 hours have passed since your last message, with a WhatsApp utility template or by email. If we cannot tell you, we do not delete until we can. A record of your request and how we handled it is kept, without a copy of your data (see 04).

It is free and you do not need an account.

02Within what period

• We tell you whether it is granted within 20 business days at most from receiving your request, and we make it effective within the following 15 business days (article 31 LFPDPPP). If we are missing some detail to handle it, we will ask you once within the following 5 business days, and you will have 10 business days to send it; the period runs from when you give it to us (article 96 of the Regulations).
• We can extend each period only once, for the same length, if the circumstances justify it; we will tell you, with the reason, within the period itself.
• Cancelling means we first block your data —set it aside and stop using it— and then delete it. What the law does not require us to keep we delete within those 15 days; what it does stays blocked until its period ends (see 04), and we tell you which (article 24 LFPDPPP and 107 of its Regulations).

03What we delete, depending on your case

You visited the website

We keep nothing from your visit: the measurement and the score live in your browser's memory and disappear when you close the tab, and the country you visit from is checked without being stored. The only thing that may remain on your device is what you chose, for 12 months: your answer to the consent panel (ais-consent) and the language (ais-lang). You can delete them from your browser settings (see cookies). Not active today When Meta Pixel and Google Analytics are active, what Meta and Google receive is deleted by asking them (see 05).

You requested the report on WhatsApp Not active today

The code and the report text are deleted automatically after 24 hours, or as soon as we reply to you (then only the delivery status remains for one hour). Your conversation with us is the next case. If you ticked the sales contact box, we delete your record in our CRM and your pending box; if you had confirmed it, the proof of that consent is not deleted: it stays locked in the records register (see 04). From your request on we do not write to you again: your number (and your email, as a hashed fingerprint, if you ask by email) goes onto our opt-out list, which the inbox checks before writing to you, and we tell our CRM so that it does not call you. The message you received is on your phone, and you delete it.

You wrote to us on WhatsApp

Today we handle the website's WhatsApp outside the inbox: we delete your conversation from the device we handle it on and from its backup. When the number is connected to the inbox, we delete from it your contact, your conversations, your messages, the internal notes and the data of the ad you came through. A team member does it with the inbox's «Cancel» action, which in a single operation tells our CRM, deletes all of that, deletes the copy of your data we prepared if you asked for access and have not downloaded it yet, records your number (or your WhatsApp identifier, if you wrote to us with a username without giving us the number) and, if we had your email, a hashed fingerprint of it on our opt-out list so as not to write to you again, withdraws your sales consent if you had given it and keeps a record of your request (see 04). If you only want us to stop measuring which ad you came through, the inbox has another action that deletes just that data and does not store it again, even if we delete your conversation one day: your objection is kept separately (see 04). The deletion also reaches the copy kept by the team's tab, which disappears when it is closed. Even if you do not ask us, the inbox data will be deleted automatically 12 months after the last message, by a daily process we will check before connecting it. The files you sent us are not on our servers, and Meta only allows downloading them for 7 days. The conversation remains on your phone; and in the WhatsApp API, Meta keeps messages for 30 days at most.

Deleting a message on WhatsApp does not always delete it from the inbox. WhatsApp only tells us you deleted it if our number is connected in coexistence mode (the WhatsApp Business app and the API at the same time), and then we empty its text and file. If the number is connected only to the API, WhatsApp does not tell us and the message stays until the conversation is deleted after 12 months; if you want us to delete it earlier, ask us as explained in 01.

If you only want us to stop writing to you, just reply «stop» or «baja», or tell us in your own words («don't message me anymore»), to any of our messages: we send you a single message confirming it, with the Mexico City date and time, which is the record of your entry on our opt-out list; we send you nothing more and tell our CRM so that we do not call you. If you write to us again, we reply. That is objecting to receiving messages, not deleting your data; to delete it, ask as explained in 01.

You wrote to us on Instagram

We delete the conversation from our Instagram account and, if we sent your personal link with a messaging tool, from it too. The conversation remains in your Instagram account.

You wrote to us by email

We delete your emails from our mailbox, including the trash, except those the law requires us to keep because they are part of a contract or an invoice (see 04).

You use AISOLVES OS In development

AISOLVES OS is not yet offered to clients and does not yet have a function to delete a user account. If you have one, we will delete it by hand within one month: email, name, picture, password, preferences and sessions. The actions you performed are recorded in the audit log of the client you work for, which will be kept for two years for security once the system applies that period; today it is not deleted automatically (see 04).

You connected your WhatsApp Business number to AISOLVES OS with Meta In development

We will stop receiving your account's notices and delete by hand, within one month, the access token Meta gave us and the identifiers of your WhatsApp Business account and your number: today, disconnecting a number in AISOLVES OS only marks it as disconnected, without deleting the token. You can also remove AISOLVES's access yourself, in Meta Business Suite. Meta manages access to the WhatsApp Business account and access to the messaging account, which is the one that sends the messages, separately, so you have to remove it from both:

1. Settings → Accounts → WhatsApp accounts: select your WhatsApp Business account, click Manage next to AISOLVES and then Remove access.
2. Settings → Accounts → Messaging accounts: if AISOLVES is also listed there, select the linked messaging account, click Manage next to AISOLVES and then Remove access.
3. If it is also a partner of your business portfolio: Users → Partners.

These are Meta's current instructions («Access to WhatsApp Business accounts and messaging accounts is managed separately»).

The data of your contacts and conversations belongs to your company. With the current code the system does not yet allow fully deleting it (the event log and the previous text of deleted or edited messages are kept), and that is why we will not process real client data until it does. From then on, we will return it to you or delete it, as you choose, under Annex I of the Terms.

You are a customer of a business that uses AISOLVES OS

Your data belongs to that business, which is the controller, and AISOLVES only processes it on its behalf. Ask the business. If you write to us, we will pass your request on and help it respond.

04What is not deleted and why

The law allows not cancelling, or keeping blocked, data that must be processed by legal provision or that is necessary to perform a contract (article 25 LFPDPPP). In our case:

• Invoices (CFDI) and accounting, 5 years (Federal Tax Code, article 30), and transaction receipts and contracts, 10 years (Commercial Code, articles 38 and 49).
• Data needed to deal with possible liabilities: it is not used, it is blocked. It is set aside, only available to courts and authorities, for the applicable limitation period, and then deleted.
• Record of your request: what you asked, the date, the acknowledgement, how we handled it and when and through which channel we told you about the cancellation, without a copy of your data, for 5 years and locked, only to be able to prove that we complied. It is the period in which the authority can sanction us (article 79 of the Federal Administrative Procedure Law, applicable under article 4 LFPDPPP).
• Proof of your sales consent, if you confirmed it (the box text, the question we asked you and your answer, or the team's note if you confirmed it by email), and of its withdrawal: asking us to delete your data withdraws that consent, and its proof stays locked 5 years from the withdrawal (if you do not withdraw it, 5 years from when we stop using it, at the latest 12 months after your consent or after the last contact we made with it), in an append-only register with a chained hash and timestamp, because it is up to us to prove that you consented (article 20 of the LFPDPPP Regulations) and that is the period in which the authority can sanction a contact without permission (the same article 79).
• Contract acceptances, if you hired us: 10 years, locked, in the same register (Commercial Code, articles 38 and 49).
• Your number on our opt-out list, if you asked us not to write to you or to delete your data: only the number (or your WhatsApp identifier) and, if you asked by email or we had your email when you asked us to delete your data, a hashed fingerprint of your email (SHA-256, not the email), with the date and how you asked. It is our exclusion list (article 110 of the Regulations). It lives in our database, with a copy in Upstash, and the 12-month purge does not touch it: it is what stops us writing to you again. What it cannot do: if we keep it only with your WhatsApp identifier (you wrote to us with a username without giving us the number), it does not recognise your number until WhatsApp confirms it, which happens with the first message we send to that number; and if we keep it only with your number, it does not recognise you when you write to us with a username without showing it, until you give us the number. If you ask to receive messages again, we remove it.
• Your objection to our measuring the ad, if you asked for it: the key of your number, your WhatsApp identifier and an encrypted hash of your email, with the date. Neither the 12-month purge nor cancellation touch it: it is what stops us from storing the ad data again if you write to us again from an ad. If you ask us to withdraw it, we remove it.
• Hosting technical logs (Vercel): Vercel deletes them after 1 day (Pro plan).

05Data held by Meta

Deleting your data at AISOLVES does not delete the data held by Meta or Google. For the data Meta holds about you, including your Facebook or WhatsApp account data, see Meta's privacy policy. When Meta Pixel is active, you can ask us to stop sending it data and we will pass your request on to Meta, which will have received this notice with the data (article 35 LFPDPPP).

If we receive your data through Meta's WhatsApp Business platform, this page is the one we give Meta as the instructions to delete it.

06Your other rights and if you are not satisfied

With the same procedure you can ask us for access to your data, to rectify it or to stop using it for a specific purpose, and withdraw your consent: see the privacy notice. If you are not satisfied with our answer, or we do not reply, you can file a rights protection request with Mexico's Ministry of Anti-Corruption and Good Governance within the following 15 business days (see authority).

References: Federal Law on the Protection of Personal Data Held by Private Parties, articles 21 to 35 (diputados.gob.mx); its Regulations, articles 89, 96, 107 and 110 (diputados.gob.mx); Federal Administrative Procedure Law, article 79 (diputados.gob.mx); removing a partner from a WhatsApp Business account and from a messaging account (Meta); Meta Platform Terms, deletion and data requests (developers.facebook.com).