1Who We Are
GafferBot AI (“we”, “us”, “our”) is operated by Dopamean Limited, registered at 11 Brindley Place, Brunswick Square, Birmingham, England, B1 2LP. Our registered number is 12670329.
For data deletion requests, contact us at info@gafferbot.ai.
2What This Page Covers
This page explains how to request the deletion of personal data that GafferBot AI holds about you. It also explains how to revoke GafferBot AI's access to your connected Facebook, Instagram, or WhatsApp accounts.
These instructions apply whether you are a:
- ✓Business client (an account holder using GafferBot AI to run your trade business)
- ✓End customer (someone who messaged a business via web chat, WhatsApp, or Instagram powered by GafferBot AI)
- ✓Demo booker (someone who booked a demonstration call with us)
- ✓Connected platform user (someone who connected a Facebook Page, Instagram Business account, or WhatsApp Business account to GafferBot AI)
For full details of what personal data we collect and why, see our Privacy Policy.
3How to Request Deletion
To request deletion of your personal data, send an email to info@gafferbot.ai with the subject line “Data Deletion Request” and include the following information:
- ✓Your full name
- ✓The email address associated with your account or interaction
- ✓Your business name (if you are a business client)
- ✓The phone number associated with your account (if applicable)
- ✓A description of which categories of data you wish to be deleted, or confirmation that you wish all data to be deleted
- ✓If you connected a Facebook, Instagram, or WhatsApp account, the username or page name associated with it so we can locate the data
We may need to verify your identity before processing your request to protect against fraudulent deletion attempts. This typically involves confirming the request from a registered email address or providing additional information you previously gave us.
4Revoking GafferBot AI's Access to Facebook, Instagram, or WhatsApp
If you have connected a Facebook Page, Instagram Business account, or WhatsApp Business account to GafferBot AI, you can revoke our access directly through the relevant platform. This immediately stops GafferBot AI from being able to read or send messages on that account.
To revoke access on Facebook:
- Log in to Facebook Settings → Business Integrations.
- Find GafferBot AI in the list of connected apps.
- Click Remove and confirm.
To revoke access on Instagram:
- Open Instagram and go to Settings → Apps and Websites.
- Find GafferBot AI under Active or Expired.
- Tap Remove and confirm.
To revoke access on WhatsApp Business:
- Log in to Meta Business Suite.
- Go to Settings → Business Apps or WhatsApp Accounts.
- Locate GafferBot AI and remove its access.
Revoking platform access stops GafferBot AI from continuing to process new data, but does not automatically delete data we have already stored. To delete that stored data, you also need to submit an email deletion request as described in Section 3.
5What Data We Will Delete
Following a verified deletion request, we will delete the following categories of personal data held by GafferBot AI:
- ✓Your account profile and contact details
- ✓Conversation history and chat messages stored on our platform
- ✓Photos and files you uploaded or that were sent during conversations
- ✓Lead scores, conversation metadata, and AI-generated tags
- ✓Connected calendar and accounting integration tokens (we will also revoke our access via the relevant providers)
- ✓Connected Facebook, Instagram, and WhatsApp access tokens
- ✓Marketing preferences and any consent records (other than the audit record of the deletion itself)
- ✓Demo booking records (where you were a prospective client)
6What Data We Must Retain by Law
UK law requires us to retain certain records even after a deletion request. Where this is the case, we will retain only the minimum data necessary and will pseudonymise or restrict access to it where possible.
- ✓Invoice and payment records: retained for 6 years from the end of the relevant accounting period, as required by HMRC under the Companies Act 2006 and VAT Act 1994
- ✓Audit records of deletion requests themselves: retained for 6 years so that we can demonstrate compliance with UK GDPR
- ✓Records required to defend or pursue legal claims: retained for as long as a claim could realistically arise
We will clearly tell you in our response which (if any) categories of data we are unable to delete and why.
7Timeframe
We will:
- ✓Acknowledge receipt of your deletion request within 5 working days
- ✓Complete the deletion within 30 days of verifying your identity
- ✓In complex cases, extend this by up to 60 additional days and notify you of the extension, as permitted by UK GDPR Article 12(3)
- ✓Send written confirmation once deletion is complete, including a summary of what was deleted and what (if anything) was retained under Section 6
8If You Are an End Customer of a GafferBot AI Business Client
If you interacted with a business that uses GafferBot AI — for example, you sent a message via that business's web chat, WhatsApp, or Instagram — then your personal data was processed by GafferBot AI on behalf of that business. Under UK GDPR, that business is the data controller for your data, and GafferBot AI is the data processor.
You have two options:
- ✓Contact the business directly to request deletion. They are responsible for instructing us to delete your data.
- ✓Contact us at info@gafferbot.ai. We will route your request to the relevant business client and confirm with you once deletion is complete.
Either route will result in your data being deleted within the timeframes set out in Section 7.
9Right to Complain
If you are not satisfied with how we have handled your data deletion request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
You can also contact us directly to discuss any concerns:
info@gafferbot.ai
Dopamean Limited
11 Brindley Place, Brunswick Square, Birmingham, England, B1 2LP