Data Deletion Instructions

Overview

SECAN Bilişim Teknolojileri Limited Şirketi ("SECAN") processes deletion requests for personal data handled through its Secan Asistan service ("Assistant") in accordance with the EU GDPR and the Turkish Personal Data Protection Law (KVKK). This page describes the deletion process for both end-users (people who messaged a business on WhatsApp, Instagram, Telegram or web chat via the Assistant) and our business customers.

1. For End-Users (people who messaged a business)

If you sent a message to a business's WhatsApp number or Instagram account and believe those messages were handled by an Assistant operated by SECAN, you can request that your conversation history be deleted.

How to request:

• Email inbox@secan.info with the subject line "Data Deletion Request".
• In the body, include: (a) the name of the business you messaged, (b) the channel you used and your identity on it: for WhatsApp your phone number in E.164 format (e.g. +905551234567), for Instagram your username.
• We may ask you to send a verification message from the same account to confirm identity.
• If you are a business owner who connected an Instagram account: remove Secan Asistan in Instagram under Settings > Apps and websites and send a data deletion request there. Meta forwards it to us; we delete the connection and all conversation history that came in through it, and Meta gives you a confirmation code.

2. For Business Customers

If you are a business using our Assistant service and want to terminate the service or request deletion of all your data:

• Email inbox@secan.info from the email address registered on your account.
• Specify which business(es) you are requesting deletion for.
• If no invoices are outstanding, deletion is completed within 30 days.

3. What Is Deleted vs Retained

Deleted:

• Conversation history (all sent and received message text)
• Channel profile information (WhatsApp name and phone number, Instagram ID, name and username)
• Raw webhook event data received from Meta (WhatsApp, Instagram)
• Text of replies generated by the Assistant

Retained for legal compliance:

• Summarised usage records for billing (message counts, dates, costs) — 10 years per Turkish Tax Procedure Law.
• Basic business-customer registration information (name, tax ID, invoice address) — for the same statutory retention period.

4. Timeline

Deletion requests are completed within 30 days of receipt. We send an email confirmation once the deletion is done. The timeline may extend if identity verification is required or during high-volume periods; we will notify you in such cases.

5. Contact

6. Related Documents

• Privacy Policy — See §5 for Assistant data processing details
• Terms of Service — See §10 for Assistant SaaS service terms
• KVKK Notice (Turkish) — Turkish-law-specific data protection notice