Data Deletion

Two kinds of people can ask Meerlume LLC, a limited liability company registered in the Republic of Armenia to delete data, and the route differs:

• Account owners — anyone with a Meerlume account, for the account itself and everything it owns (bots, conversations, contacts, connected channels).
• End customers — people whose data was collected through a bot built on Meerlume, for example by messaging a business on WhatsApp or Telegram. For that data the business running the bot is the controller and we are its processor, so requests are normally handled by that business. You can still write to us directly and we will act, as described in section 3.

In the app. Sign in and go to Settings → Danger zone → Delete account. You confirm by typing DELETE (and your password, if your account has one). Deletion starts immediately and is not reversible — there is no grace period and we cannot restore the account afterwards. Cancel any paid subscription first if you do not want it to renew.

By email. If you cannot sign in, email support@meerlume.com from the address on the account. We may ask you to confirm ownership before we act, so that nobody can delete your account by writing to us pretending to be you.

If you messaged a business through a WhatsApp or Telegram bot built on Meerlume, that business decides what to collect and holds the relationship with you. Ask the business directly where you can, since they can delete your conversation and contact record from their dashboard themselves.

If you cannot reach them, or you would rather not, email us at support@meerlume.com and tell us the business or bot you contacted and the phone number or Telegram username you used. We will locate the records, notify the business, and delete the data within 30 days. You do not need a Meerlume account to make this request and we will not charge you for it.

A deletion covers the personal data we hold for you, across every place we store it:

• Conversation content — inbound and outbound messages, full conversation transcripts, including replies you sent by taking over a conversation, and any media stored with them.
• Submissions — the structured answers collected by a bot’s questions, bookings and their calendar entries, and the notification records generated from them.
• Contact records — names, phone numbers, Telegram usernames, email addresses, notes and tags, and the contact’s history in the dashboard.
• Channel credentials and tokens — stored WhatsApp Business Account (WABA) IDs, phone-number IDs, display phone numbers and access tokens, Telegram bot tokens, webhook tokens, and any OAuth tokens from a linked sign-in provider. Deleting an account also disconnects its bots, so the channels stop receiving messages.
• Account and bot configuration — your profile and credentials, sessions, bots, flows, prompts, builder drafts, and notification settings.
• Marketing contact record — we remove your contact from Brevo, our email provider. If you had previously unsubscribed, your address stays on Brevo’s suppression list so we cannot email you again by mistake.

In-app account deletion runs immediately. Any request you send us by email is completed within 30 days of us verifying it, and usually much sooner. If a request is unusually complex we will tell you before the 30 days are up and explain the delay.

After the live records are gone, residual copies can survive for up to 24 hours in our database provider’s point-in-time recovery window before they are overwritten. Those copies are not used to serve the product and are not searchable by us in the ordinary course.

We cannot delete literally everything on request, because some records exist to satisfy obligations we do not control:

• Billing and invoice records — invoices, receipts, transaction identifiers, plan and amount, and billing country. Armenian tax and accounting law requires us to retain accounting records for a statutory period (currently five years), and Paddle, our Merchant of Record, keeps its own transaction records to reconcile payments, refunds, chargebacks and the VAT it remits on our behalf. These are retained for the statutory period and then deleted. This applies to account owners who have paid us; it does not apply to end-customer data collected through a bot, which carries no such obligation.
• Security and abuse logs — server access logs and request metadata are kept for up to 30 days on a rolling basis for security and abuse prevention, then aged out.
• Records needed for a live legal matter — where we must retain something to comply with a legal obligation, to resolve a dispute, or to enforce our agreements, we keep only what is necessary and delete it once that reason ends.

Retained records are not used to keep serving you the product, to rebuild a deleted account, or for marketing.

Send deletion requests and any questions about them to support@meerlume.com. For the wider picture of what we collect and the other rights you have — access, correction, portability, objection — see our Privacy Policy. See also our Terms of Service and contact page.

The data controller for account data is Meerlume LLC, a limited liability company registered in the Republic of Armenia, registered at Moskovyan 28, apt. 159, 0002 Yerevan, Armenia.