Data Retention and Deletion
Last updated: 15 October 2026
This page explains how long GenFleet keeps each kind of data and how to ask us to delete it. It is also our data deletion instructions page for Facebook, Instagram, Messenger and WhatsApp users.
GenFleet is run by Genfleet LLC (in formation), Nasr City, Cairo, Egypt. Deletion requests are free of charge.
How to request deletion
If you messaged a business on WhatsApp, Messenger, Instagram, Telegram, Slack or Discord
The business you messaged controls your conversation data. GenFleet runs its AI agent.
- Ask the business. It can delete your data, and we act on its instructions.
- Or email us at privacy@genfleet.ai with the subject "Delete my data". Include:
- the name of the business you messaged;
- the channel (for example, WhatsApp);
- the identifier you used: your WhatsApp phone number, your Telegram username, or, for Messenger and Instagram, the name on your account and roughly when you messaged. If you messaged the business on more than one channel, list each one.
- We will respond to your request within 6 working days (PDPL Art. 10 and 32) and give you a reference number.
- We will tell the business, then delete the data listed in "What we delete" below within 30 days. We will delete it unless the business shows us a legal reason it must keep it. If we cannot delete something, we will tell you why.
- You can ask about your request at any time by replying with your reference number.
We may ask you to prove the identifier is yours, for example by sending a message from that number or account.
If you connected a Facebook Page, Instagram account or WhatsApp number to GenFleet
Remove the GenFleet app in your Facebook settings. On Facebook, select your profile picture, then Settings & privacy → Settings → Apps and websites. Select Remove next to GenFleet, then confirm. Menu names can vary slightly between versions of Facebook. This revokes our access on Meta's side, and we stop receiving messages from that Page, Instagram account or WhatsApp number.
Ask us to delete the data we stored. Email privacy@genfleet.ai from the email address on your GenFleet account, with the subject "Delete my Meta data", and name the Page, Instagram account or WhatsApp number. We will delete:
- your Facebook user ID and name, and the stored access tokens;
- the list of Pages and Instagram accounts you shared with us;
- the channel connection, with its contact list and message records.
We will reply within 6 working days and complete the deletion within 30 days. Removing the app on Facebook does not, on its own, delete the data we already stored, so please send this email as well.
If you have a GenFleet account
Email privacy@genfleet.ai from your account email and ask us to close your account or your workspace.
- When you ask: we disconnect the workspace's channels, stop its agents, and turn off its API keys. You can still sign in, and the workspace owner can ask us for a copy of its data.
- Changing your mind: you can cancel by emailing us before deletion starts. Your agents start again, but channels are not reconnected: you need to reconnect them yourself.
- Deletion: we delete the account or workspace, normally within 30 days of your request. We keep the record of which terms you accepted and, for a closed workspace, the business's legal name, for up to 5 years for legal and tax purposes. We also keep usage records and the audit trail for the periods in the table below.
You cannot close an account while it is the only owner of a workspace that has other members. Make another member the owner first. A workspace where you are the only member closes with your account.
If you sent us a form on genfleet.ai
Email privacy@genfleet.ai and we will delete your demo request or waitlist entry from our inbox and records.
What we delete for an end customer
When we delete an end customer's data for a business, we delete:
- the agent's conversation history with that person;
- the progress of any multi-step task linked to that person;
- the record of messages received from that person on the channel, and their entry in the channel's contact list;
- for Telegram, any link between their Telegram account and the business;
- approval records for actions taken on their behalf;
- their entries in our security message log, unless they are needed for a security investigation that is still open. If so, we tell you, and delete them when the investigation ends.
Facts an agent saved. If a business lets its agent save facts during customer chats, those facts go into the agent's general memory. They are shared across all of that agent's conversations and are not linked to one person, so a deletion request does not find them automatically. Until this is automated, GenFleet staff search the agent's saved facts for the identifiers and details you give us, and delete the facts that clearly relate to you. The business can also find and delete them.
Some data is not stored against a particular person. It is removed by a manual search, or when it expires:
- Reference documents the business uploaded: we search for the person's details and delete what we find.
- Copies of model requests and replies kept by our AI gateway: deleted automatically after 90 days.
- Operational logs: deleted after 7 days, and from any archive after 24 months.
- Backups: overwritten after 14 days.
- Safety examples (see below) have names, phone numbers and other identifiers removed before we keep them, so they cannot be linked back to you.
Retention by category
"Until deleted" means we keep it until the business deletes it, deletes the agent or channel, or closes its workspace. A deletion request always applies, whatever the period below. A business can ask us to apply a shorter period to its own data by emailing privacy@genfleet.ai.
Data about end customers (we process this for businesses)
| Data | How long | Notes |
|---|---|---|
| Incoming message text, while waiting to be handled | Cleared as soon as the agent has handled the message | If delivery fails or the message is dropped, cleared after 7 days |
| Record of each incoming message (sender ID, message ID, time, any error) | 24 months after the person's last message, or until the channel is deleted if sooner | |
| Contact list for a channel (sender ID, last message time) | 24 months after the person's last message, or until the channel is deleted if sooner | |
| Security message log (message text, sender ID, time) | 12 months | Kept to investigate attacks, abuse and incidents. Encrypted, and open only to a small number of authorised GenFleet staff |
| Agent's conversation history (channel chats) | If the business has not turned on memory about its customers (the default): about 24 hours from each message. If it has: up to 24 months after the person last contacted the business | With memory on, the agent can recognise returning customers. If the business turns memory off, the stored history is deleted, except messages from the last 24 hours, which are deleted within a day |
| Facts an agent saved | Until the business deletes them, or deletes the agent | Shared across all of that agent's conversations, not linked to one person. Agents do not save facts from customer chats unless the business has turned on memory about its customers. A business can delete single facts |
| Reference documents | Until the agent is deleted | |
| Progress of multi-step tasks | Finished or cancelled tasks: 90 days after the last update. Tasks idle for 30 days are cancelled | Deleted automatically |
| Approval requests for sensitive actions | Action details: 7 days after the decision. The record itself: until the agent is deleted | |
| Telegram link codes | Expire after 10 minutes; deleted about a day later | |
| Telegram links between a person and a business | Operator links expire after 90 days. Records stay until the channel is deleted | |
| Model requests and replies kept by our AI gateway | 90 days | Deleted automatically |
| Model call summaries (amount used, timings, model; no content) | 24 months | Used for usage and cost records |
| Safety examples | Until no longer needed | Excerpts with names, phone numbers and other identifiers removed, used to write and test the platform's safety rules. Never taken from Meta channels (WhatsApp, Messenger, Instagram), never used to train AI models, and not taken from businesses that opt out |
| Media files sent by end customers | Not stored | We keep only the channel's reference to the file |
Data about our customers and their users (we control this)
| Data | How long | Notes |
|---|---|---|
| Account (name, email, password, workspace) | While the account is open. Deleted normally within 30 days of your request to close it | We keep the record of which terms you accepted and, for a closed workspace, the business's legal name, for up to 5 years |
| Dashboard chats with agents | Until deleted by the user | Users can delete a conversation or messages in it |
| Conversation summaries made for agent memory | Until the conversation is deleted | |
| Invitation links | Expire after 7 days | |
| Beta invitations | Expire after 14 days | |
| Password-reset links | Expire after 1 hour | |
| Re-confirmation codes for sensitive actions | Expire after 5 minutes | |
| Usage records (messages, model use, durations per month) | 5 years, for tax and accounting records | |
| Audit trail of workspace actions (who, what, IP address) | 24 months | Kept after an account closes, to investigate security incidents and disputes |
| Channel and tool credentials | Revoked and deleted when you disconnect, or when your workspace closes | For Meta channels, which you cannot disconnect in the app yet, email privacy@genfleet.ai |
| Website demo and waitlist forms | 12 months after our last contact with you | Stored in our email inbox |
| Support emails | 3 years |
Technical data
Raw technical data is kept for the periods below. Before it expires, we turn it into summary statistics, such as request counts, error rates, response times and how often each tool is used. The statistics contain no names, account or sender IDs, IP addresses or message content, so they do not identify anyone, and we keep them indefinitely.
| Data | How long |
|---|---|
| Application logs | 7 days, then may be moved to an archive for up to 24 months |
| Performance traces | 3 days |
| Metrics | 15 days |
| Record of external sites each agent contacted (no content) | 30 days, then may be moved to an archive for up to 24 months |
| Backups | 14 days. Backups are never archived |
| Website request logs (kept by our website security provider) | Up to 7 days |
When the law requires us to keep data
If the law requires us to keep some data (for example, tax records), we keep only that data, only for as long as required, and tell you in our reply.