Data Deletion Request

Your Right to Data Deletion

Godot Teknoloji Bilişim ve Danışmanlık Hizmetleri Sanayi ve Ticaret Anonim Şirketi ("Godot"), the operator of the AdaptiveReply platform, respects your privacy and is committed to protecting your personal data in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK"), the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

You have the right to request the deletion of all personal data we have collected and stored about you, including any data obtained through Meta (Facebook, Instagram, WhatsApp) integrations, e-commerce platforms (Shopify, WooCommerce), Gmail, and any other connected services. Turkish data subjects exercise this right under KVKK Articles 7 and 11.

Upon your request we erase your personal data in a way that preserves the integrity of the service and of other users' data. Where full erasure would break the technical integrity of the service, or where we are under a legal retention obligation, we instead anonymize the relevant data so that it can no longer be associated with you. This is fully consistent with KVKK Article 7, which treats deletion, destruction, and anonymization as equally valid methods.

How to Request Deletion

You can request deletion directly from your account settings. Log in to your AdaptiveReply account, go to Settings > Profile, and use the "Request Account Deletion" option. The request is sent to our team for processing. Alternatively, you can email us as described below.

What Happens to Your Data?

Upon a valid deletion request, we delete — or, where deletion would break the integrity of the service or is subject to a legal retention period, anonymize — the following data associated with your account:

• Account information (name, email address, password hash)
• Connected social media account data (Facebook Pages, Instagram Business Accounts, WhatsApp Business Accounts, access tokens, page identifiers)
• Connected e-commerce platform data (Shopify and WooCommerce credentials, synced products, orders, and customer data)
• Connected Gmail data (email threads, message bodies, OAuth tokens)
• Messages and conversation history across all platforms
• Media files (images, videos, documents) stored on our cloud infrastructure
• Contact information collected through connected platforms
• Orders, appointments, and related customer data
• Posts, comments, and engagement data
• Bot configurations, knowledge base documents, and automation settings
• Analytics and usage data
• Any other personal data stored in our systems

Organization Deletion Scenarios

How your data is deleted depends on your role within your organization:

• Sole member of an organization: All organization data (conversations, contacts, orders, appointments, connected accounts, media files, bots, posts) is permanently deleted along with your account.
• Owner of an organization with other members: You must transfer ownership to another member before deleting your account. Organization data remains accessible to remaining members.
• Non-owner member of an organization: Your personal account data is deleted. Your contributions to the organization (messages sent, notes added) are anonymized. Organization data remains with the organization.

How to Submit a Deletion Request

If you cannot use self-service deletion, you can submit a request by email:

Please include the following in your request:

• Your full name
• The email address associated with your AdaptiveReply account
• A brief description of the data you want deleted (or specify "all data")
• Any additional information that helps us identify your account

Turkish data subjects may also submit requests in writing (in person or via notary) to the address in the Contact section, by registered electronic mail (KEP), with secure electronic / mobile signature, or via the email address registered in our system — in accordance with KVKK Article 13 and the Communiqué on the Procedures and Principles for Application to the Data Controller.

Processing Your Request

Once we receive your request, we will:

• Verify your identity to protect the security of your data.
• Acknowledge your request within 3 business days.
• Resolve your request within 30 days of receiving the verified request — by deleting your data or, where deletion would break the integrity of the service or is legally retained, anonymizing it — in compliance with GDPR Article 17 (Right to Erasure) and KVKK Article 7 (Deletion, Destruction, or Anonymization).
• Send you a confirmation email once your request has been resolved.

Backup Data

Once your request is resolved, your data in our active systems is deleted or anonymized. Copies that remain in encrypted backups are deleted or overwritten as those backups age out of their rotation cycle; if a backup has to be restored in the meantime, the deletion or anonymization is re-applied to it.

Third-Party Data

Data already transmitted to third-party service providers (such as AI providers for chatbot responses) is subject to those providers' own retention and deletion policies and is beyond our direct control. We recommend reviewing the privacy policies of any third-party platforms you have connected.

You can also manage your app connections directly through your Facebook, Instagram, WhatsApp, Google, Shopify, or WooCommerce account settings at any time.

Exceptions

In limited circumstances we may be required to retain certain data to comply with legal obligations, resolve disputes, or enforce our agreements. Specifically:

• Billing and transaction records are retained for up to 5 years as required by the Turkish Tax Procedure Law (Article 253) and related financial regulations.
• Data necessary for ongoing legal proceedings or investigations.

Where such an exception applies, we will inform you and explain the legal basis for retention.

Meta Platform Data

If you have connected a Facebook, Instagram, or WhatsApp account through our platform, we will also delete all Meta Platform Data associated with your account, including Meta user IDs, page access tokens, profile information, messages, and any other data received through Meta APIs. This is in compliance with Meta's Platform Terms and data handling requirements.

Contact Us

If you have questions about this Data Deletion Policy or your privacy rights, please contact us: