SAWT IA

Legal

Data Deletion

Data deletion instructions — SAWT IA

Data Deletion Instructions – SAWT IA

SAWT IA processes personal data in accordance with Moroccan law 09-08 on the protection of individuals with regard to the processing of personal data. This page explains how to request deletion of that data and what happens next. It complements our privacy policy.


1. Who this page is for

Two very different situations are possible. Identify yours before writing to us:

  • You hold a SAWT IA account — a business that created an account, configured AI agents and possibly connected a WhatsApp Business number. For your data, SAWT IA is the data controller: see section 4.
  • You are an end user — you called a number, messaged a WhatsApp account or chatted with an AI agent belonging to one of SAWT IA's business customers. In that case, that business is the data controller and SAWT IA acts only as a technical service provider on its instructions: see section 5.

2. Data we hold and where it comes from

  • Account data — first name, last name, email address, login credentials, company name. Provided by you when creating the account.
  • Agent configuration — instructions, knowledge bases, connected numbers and channels. Provided by you.
  • Conversation data — audio recordings, transcripts, message history and related metadata. Generated by your use of the platform.
  • Data from authorised third-party integrations — Google (profile, Gmail, Calendar, Docs, Sheets depending on what you enable), CRM and other tools you connect.
  • Data obtained through Meta / WhatsApp — detailed in section 3.
  • Billing information — transaction reference and status. Card details are never stored by SAWT IA: they are entered directly on the platform of Payzone, our PCI-DSS certified payment provider.
  • Browsing and audience data — Google Analytics and Meta Pixel on sawtia.ma, in pseudonymised form.

3. Data obtained through Meta / WhatsApp

When a business customer connects its WhatsApp Business account to SAWT IA (Meta's Embedded Signup flow), we receive and process the following through Meta's APIs:

  • the WhatsApp Business Account (WABA) ID and the associated Meta business account ID;
  • the connected business phone number(s) and their display name;
  • the technical access tokens required to send and receive messages;
  • the phone numbers of people who message those business numbers;
  • the content of the messages exchanged — text, voice notes, images, documents and other media;
  • conversation history and metadata (timestamps, delivery status, channel).

This data is used solely to operate the AI agent configured by the business customer. It is never sold and never used for advertising purposes. In line with our privacy policy, no customer data — conversations, recordings, transcripts or integration data — is used to create, train or improve artificial-intelligence or machine-learning models, and our model providers are contractually bound by the same prohibition.

SAWT IA is an independent technical provider, integrated into the Meta ecosystem as a Meta Tech Provider (approved technical provider).


4. Requesting deletion of your data or your SAWT IA account

Send your request by email to contact@sawtia.ma with the subject line "Data deletion".

So that we can identify you with certainty, include:

  • the email address associated with your SAWT IA account;
  • the legal or trading name of the account's business;
  • the connected WhatsApp Business number(s) and call number(s), if any;
  • the scope of the request: full account deletion, deletion of conversations and recordings only, or disconnection and deletion of the data of a specific integration (for example Google or WhatsApp).

What happens next:

  • we acknowledge receipt of the request by email;
  • we verify that the request comes from the account holder — we may ask you to confirm it from the email address registered on the account;
  • we delete the relevant data from our production systems, except for what is listed in section 7;
  • we confirm in writing once the operation is complete.

Account deletion is final and irreversible: configured agents, histories and integrations are lost. Export anything you wish to keep beforehand.


5. You messaged or spoke to a SAWT IA business customer

If you sent a WhatsApp message, called a number or chatted with an AI agent operated by one of our business customers, that data belongs to that business: it decides how the data is used and when it is deleted. SAWT IA only hosts the data on its behalf and can act only on its instructions.

  • Send your request directly to the business you contacted — the one whose number you dialled or whose website you visited.
  • If you cannot reach them, write to us at contact@sawtia.ma stating the business number you contacted, the number you wrote from and the approximate date of the exchange. We will forward the request to the business concerned and, on its instructions, delete the data we host for it.

Regardless of any request, conversation history, recordings and transcripts are kept for 30 days on all plans, then deleted automatically.


6. Processing times

  • Automatic deletion: conversations, audio recordings and transcripts are deleted automatically after 30 days, with no action required from you.
  • Deletion on request: we acknowledge receipt of your request within 72 hours and carry it out within a maximum of 30 days.

Deletion is permanent. Once carried out, the data concerned is no longer retained and cannot be restored, including from our backups.


7. What is retained after deletion, and why

Deletion cannot be total or instantaneous: some data must be retained for legal or accounting reasons.

  • Invoices and accounting records: 5 years — accounting obligation. These documents cannot be deleted on request.
  • Account data: subscription term + 1 year after termination in the absence of an earlier deletion request.
  • Audience data: 26 months — Google Analytics, in pseudonymised form, which does not directly identify you.
  • Aggregated and anonymised statistics — call or message volumes with no identifying data. Being anonymous, they are no longer personal data and are retained.
  • Data already exported to your own tools — for example rows written to your Google Sheets or your CRM at your request. They belong to you and must be deleted from those tools.

8. Revoking access granted to SAWT IA

Revoking access stops new data from flowing in, but does not delete data already recorded: a deletion request is still required.


9. Contact — data protection

Your rights of access, rectification, objection, erasure and portability, along with details of our processing activities, are described in our privacy policy. Commercial terms are set out in our terms of sale.