Data deletion instructions

1. Delete your whole account

Both apps have an in-app deletion that removes the account and the personal data we are not legally required to keep. The step-by-step instructions for the Sassy client app and the OpenSassy business app are on Delete your OpenSassy account.

2. Delete specific data without closing your account

1. Email hello@the-sassy.com from the email address on your account. Subject: Data deletion request.
2. Tell us what you want deleted: for example your conversation history with Sassy, a stored photo, your notes, or everything we received from a connected platform.
3. Include only your name and the email address or phone number on your account so we can verify it is you. Never send passwords, card numbers or identity documents; we will not ask for them.
4. We confirm receipt and verify ownership of the account. We respond without undue delay and within one month, telling you what was deleted and what was kept and why (see section 5); where a request is complex, UK GDPR allows us to extend that by up to two further months, and we will tell you if that applies. You receive a confirmation email when the deletion is done.

3. Facebook, Instagram and WhatsApp data

OpenSassy’s Meta app is registered but not yet live: today no business can connect a Facebook Page, Instagram account or WhatsApp Business number to OpenSassy, and we hold no Meta user data. When that connection becomes available, a business will be able to connect it from Connect Apps, and the same screen will offer a Disconnect control that deletes the access token we store. Until then, and for anything already received once it is live:

1. Remove OpenSassy from your Meta account yourself, in that platform’s own account settings for connected apps and business tools (for example Facebook Settings → Apps and websites); Meta’s help pages describe the current path for each product. We cannot do this for you.
2. Email hello@the-sassy.com as in section 2 to have any messages, comments or page information we received through the connection deleted, and to have the connection removed on our side.

We do not claim that disconnecting triggers a deletion at Meta, or that it stops every message Meta may still deliver before the removal takes effect; deletion of data on Meta’s own services is governed by Meta’s policies and your Meta settings.

4. If you are a client of a business that uses OpenSassy

The business you booked with is the controller of your booking and client record; OpenSassy processes it on their behalf (Privacy Policy §1). You can ask the business directly, or email us at hello@the-sassy.com and we will pass your request to the business and help them carry it out. Your own Sassy client account (sign-in, protected conversation ledger, saved places, payment vault) is ours to delete and is covered by sections 1 and 2.

5. What we keep, and for how long

We delete the personal data we are not legally required to keep. Limited payment, tax, fraud-prevention, consent and deletion-audit records are kept only for the applicable legal period with restricted access, and are never used for marketing. Retention periods are listed in Privacy Policy §7. Deleting from OpenSassy does not delete records held by the business you booked with, by Meta, Google or Stripe under their own policies, or by other processors named in the Privacy Policy, which we instruct to delete where the law requires.