User Data Deletion

1. Who processes your data

Z·Apply is the platform businesses use to talk to their customers over WhatsApp, Instagram and other messaging channels. When you message a business that uses Z·Apply, that business decides what happens to the conversation (it is the data controller); Z·Apply processes the data on its behalf (as data processor).

In practice, a deletion request submitted here is handled by our Data Protection Officer and forwarded to the business you talked to whenever the data is under their control. You do not need to know that split in order to ask — we take care of the routing.

Platform operator: 51425442 LEANDRO ROBERTO DA SILVA, registered under Brazilian tax ID (CNPJ) 51.425.442/0001-10, located at Rua Panamá, 131 — Bairro Casa Branca, Santo André/SP, CEP 09015-680.

2. What data exists about you

It depends on how you reached the platform.

If you messaged a business through Z·Apply

• Your name and the channel identifier — on Instagram, your @ handle and the ID Meta assigns to the conversation; on WhatsApp, your phone number.
• Email address and alternate phone number, when you provide them during the conversation.
• The content of the messages exchanged with that business and the service history.
• Internal notes the business writes about the contact, tags, and the automatically generated sentiment classification.
• Orders and appointments created from the conversation, if any.

If you connected an Instagram account to Z·Apply

• The professional account identifier and the profile @ handle.
• The access token issued by Meta, stored encrypted and isolated per business.

If you have a dashboard account

• Name, email, phone and company details provided at sign-up.
• Access records (date, IP address and browser), used for security and auditing.

3. How to request deletion

Option 1 — Remove the app in Instagram (automatic)

1. In Instagram, go to Settings → Apps and websites.
2. Find Z·Apply and select Remove.
3. Meta notifies us automatically. We revoke the token, disconnect the integration and delete the contacts imported from that account that never produced a conversation, order or appointment.
4. We return a confirmation code that you can check at any time on the request status page.

Option 2 — Data subject rights form

This route covers every channel, not just Instagram. Fill in the form choosing the “Eliminação” (deletion) type and provide the phone number or email used in the conversation — that is what lets us locate your records.

You receive a ticket number once the request is submitted.

Option 3 — Email our Data Protection Officer

Write to privacidade@z-apply.com with your Instagram @ handle or the phone number used in the conversation, and which business you were talking to, if you know it. Data Protection Officer: Leandro Roberto da Silva.

4. What happens after your request

• We acknowledge the request and verify your identity through the same channel it came from — this is what stops someone else from erasing your data.
• We locate the records tied to the identifier you gave us and notify the controlling business where applicable.
• We complete and answer the request within 15 business days of receiving it (LGPD, Art. 19).
• If the request cannot be fully granted, we explain the reason and the legal basis rather than simply refusing.

5. What is erased and what is retained

We erase: the contact record, conversations and messages, internal notes, tags and the channel identifiers linked to you at that business.

Retained, by legal obligation or for security:

• Records required by law, including tax and accounting obligations for orders already issued.
• Audit and access logs, kept to investigate security incidents.
• A technical marker of the deleted conversation, holding no content, whose only purpose is to keep the channel history from recreating the conversation you asked us to delete.

6. Instagram and Meta

The Instagram integration exists so a business can reply to the direct messages its own account receives. We request only the permissions needed to read and reply to those messages; we do not post anything, we do not access your feed, and we do not use conversation content to train third-party artificial intelligence models.

Instagram-specific instructions are available on the Instagram data deletion page (in Portuguese).

For Meta reviewers: our data deletion callback lives at /api/webhooks/instagram/data-deletion, validates the signed_request signature and responds with { url, confirmation_code }, where url points to the request status page.

7. Contact

Data Protection Officer: Leandro Roberto da Silva — privacidade@z-apply.com.

General enquiries: contato@z-apply.com. For how we handle data day to day, see our Privacy Policy.