Data Deletion Instructions

This page constitutes the official Data Deletion Instructions for the Esplendorco app operated by Esplendorco (“Esplendorco”, “we”, “us”, “our”), available at esplendorco.com. It is provided to satisfy the data deletion disclosure required by Meta’s Platform Terms and Developer Policies, and it explains how end-customers and merchant businesses can request the deletion of personal data that Esplendorco processes, what is deleted, how long deletion takes, and the limited cases in which data must be retained. This page is the app’s Data Deletion Instructions URL referenced in our Meta app configuration.

Effective date: July 9, 2026. Legal entity: ESPLENDORCO S.A. DE C.V.. Registered address: San Salvador, El Salvador. Governing law: El Salvador. El Salvador’s data protection law is the primary framework governing Esplendorco as controller.

Understanding who controls your data

Esplendorco is a WhatsApp Business Platform Tech Provider that gives merchant businesses a shared team inbox and AI-assisted automation to handle their WhatsApp conversations for cash-on-delivery e-commerce. Because of this, the way a deletion request is handled depends on whose data it concerns:

• Merchant account data. For the data of the businesses that sign up for Esplendorco (their account, admins, and billing), Esplendorco acts as the data controller. Merchants can ask us to delete this data directly and we will act on the request ourselves.
• End-customer conversation data. For the data of the end-customers who message a merchant on WhatsApp (phone numbers, WhatsApp profile names, message content and media, and the related Shopify order data), Esplendorco acts as a data processor on behalf of the merchant, who is the data controller. This data belongs to the merchant. We delete it on the merchant’s documented instructions or, where an end-customer contacts us directly, we forward the request to the relevant merchant and act on their instructions and on the automated Shopify data flows described below.

For end-customers: how to request deletion of your data

If you have messaged a business on WhatsApp and want your personal data deleted, please note that your conversation data belongs to that business (the merchant). The fastest and most direct route is to contact the merchant you messaged. You have two options:

Option 1 — Contact the merchant directly (recommended)

• Step 1. Identify the business you messaged on WhatsApp.
• Step 2. Send them a deletion request through WhatsApp, their website, or any contact channel they provide, stating that you want your personal data deleted and including the WhatsApp phone number you used so they can locate your records.
• Step 3. The merchant, as the data controller, will action your request. Esplendorco will carry out the deletion in its systems on the merchant’s instruction.

Option 2 — Email Esplendorco

• Step 1. Email contacto@esplendorco.com with the subject line “Data Deletion Request”.
• Step 2. Include the WhatsApp phone number you used and, if you know it, the name of the business you were messaging, so we can identify the correct merchant and your records.
• Step 3. Because we are a processor for this data, we will forward your request to the relevant merchant (the data controller) and delete the data in our systems in line with their documented instructions. We will acknowledge your request and confirm once the deletion has been completed.

For merchants: how to delete your account and all associated data

Merchants can request deletion of their Esplendorco account and all data associated with it, including the end-customer conversation data processed under their account. You have two options:

Option 1 — In-app account deletion

• Step 1. Sign in to your Esplendorco account at esplendorco.com.
• Step 2. Go to Settings and select the account or workspace deletion option.
• Step 3. Confirm the request. This disconnects your WhatsApp Business Account (WABA) and phone numbers, revokes stored access tokens, and schedules deletion of your account and associated data.
• Step 4. If your store is connected through Shopify, uninstalling the Esplendorco app from your Shopify admin also triggers the automated deletion flows described below.

Option 2 — Email Esplendorco

• Step 1. Email contacto@esplendorco.com from the email address registered to your account, with the subject line “Merchant Account Deletion Request”.
• Step 2. Include your business name and the WhatsApp phone number(s) or WABA connected to your account so we can verify ownership.
• Step 3. After we verify your identity as the account owner, we will delete your account and all associated data and confirm once completed.

What data is deleted

When a deletion request is completed, the following categories of data are removed from our production systems and propagated for deletion to the relevant sub-processors that store or process them on our behalf, including our managed database on Supabase, media/file storage on Backblaze B2, application hosting on Vercel, the WhatsApp Cloud API operated by Meta, and any AI/LLM providers configured for the account. A current list of our sub-processors is available on request at contacto@esplendorco.com.

• Merchant account data — business name, admin names, email, phone, and billing details (for merchant account deletions).
• WhatsApp assets — WABA IDs, phone number IDs, display names, and encrypted access tokens; connected numbers are disconnected and tokens revoked.
• End-customer data — customer phone numbers, WhatsApp profile names, message content and media, and timestamps.
• Shopify data — order details, customer names, shipping addresses, and order status held to fulfil and confirm cash-on-delivery orders.
• AI-generated content — suggested or automated replies generated for the account by third-party LLM providers.

Shopify data flows we honor automatically

Esplendorco complies with Shopify’s API License and Terms of Use and Shopify’s Protected Customer Data Requirements. We implement Shopify’s mandatory compliance webhooks and honor them automatically, without any manual action required from you:

• customers/data_request. When a customer asks a merchant for the data a store holds about them, Shopify sends this webhook. We respond by providing the relevant customer data we process on the merchant’s behalf so the merchant can fulfil the request. We action this webhook without undue delay, and in any case within 30 days of receipt.
• customers/redact. When a customer’s data must be deleted, Shopify sends this webhook. We delete that customer’s data from our systems, typically within 30 days of receiving the request.
• shop/redact. Approximately 48 hours after a merchant uninstalls the Esplendorco app, Shopify sends this webhook. On receipt, we delete the shop’s data associated with that store from our systems.

Deletion timelines

• End-customer data requests are acknowledged promptly and completed without undue delay, and in any case within 30 days, subject to the merchant’s instructions.
• Shopify customers/data_request is responded to without undue delay, and in any case within 30 days of receipt.
• Shopify customers/redact requests are completed typically within 30 days of receipt.
• Shopify shop/redact is actioned when we receive the webhook, which Shopify sends approximately 48 hours after uninstall.
• Merchant account deletions are completed within 30 days of a verified request. Residual copies in encrypted backups are purged on our standard backup rotation, within a further 90 days.

Retention exceptions

In limited cases we may retain certain data after a deletion request where we are legally required or permitted to do so, for example to comply with legal, tax, accounting, or regulatory obligations, to resolve disputes, to prevent fraud and abuse, or to establish, exercise, or defend legal claims and enforce our agreements. In these cases we retain only the minimum data necessary for the required purpose and for no longer than the applicable retention period, after which it is deleted or irreversibly anonymized. Where the merchant is the data controller, retention is also subject to the merchant’s own legal obligations and instructions.

Deletion is irreversible

Once data has been deleted in accordance with these instructions, it cannot be recovered. Deletion is permanent and irreversible. Please make sure you have exported or saved anything you need before submitting a deletion request. Deleting your Esplendorco account will end your ability to service WhatsApp conversations through the app.

Contact

For any question about these instructions or about a request you have submitted, contact us at contacto@esplendorco.com. General, legal, and data protection contact, including our privacy contact for data protection questions: contacto@esplendorco.com.