Data Deletion

Sparrow connects to your own WhatsApp Business Account on Meta’s platform. That means some data lives with us and some lives with Meta, and the two have to be dealt with separately.

You may also need to remove Sparrow at Meta. Disconnecting inside Sparrow does not remove Sparrow from your Meta Business account. To do that, open Meta Business Settings and remove Sparrow under your business integrations or connected apps. Until you do, Sparrow may still appear there as a previously authorised app.

Data held by Meta is governed by Meta. Message content, delivery records and account information held in Meta’s own systems are subject to Meta’s policies and retention periods. Sparrow cannot delete data from Meta’s systems, and we will not claim otherwise — to remove that data you need to deal with Meta directly.

What we will do is delete the data Sparrow itself holds and controls, on a valid request, subject to the limited retention described below.

Email hello@sparrow.qa with the subject “Data deletion request”, and tell us:

• the email address on the Sparrow account;
• the workspace name, if you are asking about workspace data;
• what you want deleted — the WhatsApp connection, the workspace, the account, or all of it;
• if you are the sole owner of a workspace, whether it should be deleted or transferred.

Send it from the email address on the account where you can. If you are asking about data a business holds about you — because they messaged you through Sparrow — that business controls it, so contact them first; write to us and we will help you identify who to ask.

Deletion is irreversible and affects everyone in a workspace, so we confirm that the person asking is entitled to ask. We verify control of the account email address, and for workspace or organization deletion we confirm that the requester is an owner of that workspace. Where a request arrives from another address, we may ask for confirmation from the account owner before acting.

We will not action a deletion request we cannot attribute to an authorised person.

We acknowledge deletion requests when we receive them, tell you what will be deleted before we do it, and confirm once it is done.

Sparrow does not yet publish a committed turnaround time for deletion requests, so we do not state one here. We act on valid requests without undue delay.

After deletion we may keep a limited amount of information where we need it:

• billing and invoice records, to meet tax and accounting obligations;
• security and abuse records, such as authentication and webhook logs, to investigate compromise and prevent platform abuse;
• records we are required to keep by law, or need in order to establish, exercise or defend a legal claim;
• backups, which expire on their normal cycle rather than being edited individually.

Anything retained is kept only for as long as that reason applies, and is not used to provide the service or for any new purpose.

Questions about deletion, or about a request already submitted: