Data Deletion Policy
Last Updated: April 27, 2026
This page explains how to delete your data from GoUltra, what is deleted, what is retained, and how long the process takes.
Your Right to Delete
You may request deletion of your personal data from GoUltra at any time. This right applies whether you are:
- A direct GoUltra Customer (account holder)
- An End-user contacted through a Customer's WhatsApp Business account
- A website visitor
How to Request Deletion
Method 1: In-app deletion (Customers)
- Log into your GoUltra dashboard at https://go.goultra.ai
- Navigate to Settings → Account → Delete Account
- Confirm the deletion via email verification
- We acknowledge receipt within 1 business day
Method 2: Email request
Send an email to privacy@goultra.ai from the email address registered on your account, with the subject line:
Account Deletion Request
Include in the email body:
- Your full name as registered
- Your business name (if applicable)
- The phone number(s) connected to your WhatsApp Business account through GoUltra
- A short statement confirming you wish to delete your account and all associated personal data
Method 3: For End-users
If you received a WhatsApp message from a business using GoUltra and you want your phone number and conversation history deleted:
- First, contact the business that messaged you and ask them to remove you from their contacts. They are the data controller for that data.
- If the business does not respond within 30 days, contact us at privacy@goultra.ai with proof of your initial request and the business's WhatsApp Business name. We will assist in resolving the request.
Method 4: Cannot access registered email
If you cannot access the email registered on your account, contact us via the form at /contact with sufficient information to verify your identity (alternative email, phone number, business details). We will follow up to confirm.
What Gets Deleted
Upon successful deletion request, the following data is permanently removed:
- Your user account and login credentials
- Your business profile, settings, and preferences
- Your contact list and conversation history
- Your message templates and AI training data
- Your team members' profiles within your account
- Your usage analytics and behavioral data
- Connected integrations: Google Calendar tokens are revoked; Meta WhatsApp connection is disconnected
- Stripe customer records are anonymized (cancellation note retained for tax purposes)
What Is Retained
Some data must be retained to comply with legal, tax, or platform obligations:
| Data | Retention period | Reason |
|---|---|---|
| Billing records (invoices, transactions) | 7 years | US tax law (IRS) |
| Audit logs of security incidents | Until matter is resolved | Legal/regulatory |
| Aggregated, anonymized usage statistics | Indefinitely | Cannot be linked to you |
| Records required by Meta WhatsApp Business Platform | Per Meta's terms | Contractual |
| Subpoena or legal hold data | As required by law | Legal compliance |
Retained data is access-restricted and used only for the stated legal purpose.
Deletion Timeline
| Day | Action |
|---|---|
| Day 0 | We receive your request and acknowledge within 1 business day |
| Days 1-7 | We verify your identity and review the request |
| Days 7-14 | Account is deactivated; data is moved to a 30-day recovery state |
| Day 30+ | Data is permanently deleted from our active systems |
| Day 90+ | Data is purged from backups |
If you change your mind during the 30-day recovery window, contact privacy@goultra.ai and we can restore your account.
Data Subject Rights Under Applicable Laws
GDPR Article 17 (Right to Erasure)
If you are an EU/EEA resident exercising your right to erasure, the timeline above applies. We will provide written confirmation when deletion is complete. We may decline to delete in limited cases (e.g., where processing is necessary for compliance with legal obligation).
Israeli Privacy Protection Law (תיקון 13)
Israeli residents have the right to request deletion under the Israeli Privacy Protection Law. We comply within 30 days of verified request. If we decline, we will notify you of your right to appeal to the Israeli Privacy Protection Authority.
Saudi PDPL Article 4(7) and UAE Federal Decree-Law 45 Article 13
Residents of Saudi Arabia and the UAE have the right to request destruction of their data. We comply within 30 days of verified request, subject to legal retention obligations.
CCPA / CPRA (California)
California residents may request deletion under CCPA. Verifiable requests are processed within 45 days, with one 45-day extension permitted if reasonably necessary.
Verification Requirements
To prevent unauthorized deletion, we verify identity before processing. We may request:
- Confirmation from the email address registered on the account
- Two-factor authentication code (if enabled)
- Government-issued identification (only if other verification fails)
We use the minimum information necessary for verification and delete verification documents after the request is closed.
Confirmation of Deletion
When deletion is complete, we send written confirmation to the email address used for the request. The confirmation includes:
- Confirmation of deletion completion date
- List of data categories deleted
- List of data categories retained (with reasons)
- Right to appeal or file a complaint
What Happens If You Have Active Subscriptions
- Active paid subscription: the deletion request triggers cancellation effective at the end of the current billing period. No refunds for the unused portion (see Refund Policy)
- Trial period: the deletion request immediately ends the trial; no charges apply
- Outstanding invoices: must be settled before deletion completes
Disputes
If you are dissatisfied with our handling of your deletion request, you may:
- Contact our Privacy team at privacy@goultra.ai for review
- File a complaint with the relevant supervisory authority (see Privacy Policy Section 17)
Contact
- Privacy Team: privacy@goultra.ai
- Postal mail:
GoUltra Systems LLC Privacy Department 312 W 2nd St 2692 Casper, WY 82601, USA
This Data Deletion Policy is provided in English, Hebrew, and Arabic. In the event of any inconsistency, the English version controls for legal interpretation, except where local law requires otherwise.