All docs Account
Data and privacy
How long conversations are kept, deleting a customer's data, what is encrypted, and how personal data is protected.
Settings → Data & privacy (Owners and Admins).
Retention
Keep conversations for 3–24 months (default 24; your plan sets the maximum). Conversations with no activity for longer are deleted every night with their messages, tool runs, drafts and stored files.
Deleting a customer's data
Delete customer data: enter the customer's email and tick I understand that this permanently deletes the data. Arasta deletes every conversation of that customer — verified orders, signed-in chats, offline messages and chats where the address was typed — plus their other chats from the same browser and their stored files. The result shows how many conversations, messages, files and visitor records were deleted. The audit log records the deletion without the address.
To delete a single conversation, use Delete conversation in the Inbox.
How data is protected
- Each organization's data is isolated from every other organization.
- Store credentials, WhatsApp tokens and app secrets, Slack webhook URLs and customers' offline-form emails and WhatsApp numbers are stored encrypted.
- Verification codes are never stored in conversations or shown to Kalfa AI.
- Personal data is removed from unanswered questions before they are stored.
- WhatsApp numbers are masked in the dashboard and never sent to Kalfa AI.
The Data Processing Agreement and the Sub-processors list are linked at the bottom of the sidebar.