Data Deletion.

This page explains how to delete data that Mikla, Inc. ("Mikla", "we") holds in connection with the Mikla platform and our Facebook, Instagram, and WhatsApp integrations. It sits alongside our Privacy Policy and Terms of Service.

There are two kinds of people who may want to delete data, and the process is slightly different for each.

• Customers. Hospitality businesses who have connected a Facebook Page, Instagram Business account, or WhatsApp Business account to Mikla so that we can respond to inbound leads on their behalf.
• End users. Members of the public who have sent a DM, replied to a story, or commented on a post belonging to one of our customers, and whose message was handled by Mikla.

When a customer connects a Facebook Page, Instagram Business account, or WhatsApp Business account, Mikla stores the following categories of data so that we can respond to leads on the customer's behalf. All tokens and message content are encrypted at rest.

• Channel connection metadata. Page ID, Instagram Business Account ID, WhatsApp Business Account ID, display name, granted permissions, webhook subscription state, and long-lived access tokens.
• Conversations and messages. Inbound DMs, story replies, and comments routed to Mikla, plus the replies Mikla generated and sent on the customer's behalf. Includes timestamps, message IDs, and any media attachments referenced in the thread.
• Lead profiles. The platform-scoped user ID that Meta assigns (page-scoped ID for Facebook, IGSID for Instagram, phone number for WhatsApp), display name and profile picture where the permission grants it, first-seen and last-interaction timestamps, and any tags or intent labels derived by our AI (e.g. "pricing inquiry", "booking request").
• AI response audit trail. The prompt sent to the model, the model version, the generated response, safety flags, and whether a human operator took over the conversation. Used for debugging, quality review, and tuning.

If you are a Mikla customer, you have three options, each deleting a different scope of data.

• Disconnect a single channel. In Mikla settings, remove the Facebook, Instagram, or WhatsApp connection. We immediately revoke and delete the access tokens and purge conversation, lead, and audit-trail data tied to that channel within 30 days.
• Delete specific conversations or leads. Use the delete action inside a conversation or on a lead profile. Deletion is immediate in the live system and propagates to encrypted backups within one rotation (up to 30 days).
• Close your Mikla account. Email privacy@mikla.ai from the admin email on file, or use the "Close account" option in billing settings. We delete the full tenant, including all channel connections, conversations, lead profiles, AI audit trails, and configuration, within 30 days. Billing records required for tax and audit purposes are retained as described in our Privacy Policy.

If you sent a message, story reply, or comment to a business that uses Mikla, there are two ways to have that data deleted. You do not need a Mikla account.

Because Meta only shares a platform-scoped identifier with us (not your real Facebook or Instagram ID), we need either your scoped ID or the business you contacted in order to locate your data. The easier path is almost always the first one.

• Remove the app from your Facebook or Instagram settings. Go to Settings → Apps and Websites (Facebook) or Settings → Apps and Websites (Instagram), find the Mikla app connected through the business you messaged, and remove it. Meta automatically sends Mikla a signed deauthorization notice, and we delete your lead profile and conversation history for that business within 30 days.
• Email privacy@mikla.ai. Include the name of the business you messaged and, if you have it, your Facebook or Instagram handle. We will locate your data, delete it, and confirm by email within 30 days. No Mikla account is required, and there is no fee.

When you request deletion, we remove the following from live systems and from encrypted backups within one rotation (up to 30 days after the live deletion).

• Conversations and messages (inbound and outbound) tied to the relevant channel, lead, or account.
• Lead profiles, including platform-scoped IDs, display names, profile picture URLs, and any AI-derived tags or intent labels.
• AI response audit trail entries for the deleted conversations.
• For channel disconnects and account closures: access tokens, webhook subscriptions, and channel configuration.

A small amount of data is retained after deletion, only where the law requires it or where it contains no personal information.

• Billing records (customer name, billing address, invoice history) for up to 7 years to meet tax and audit obligations. Applies to customers only.
• Security and fraud logs, retained for up to 12 months to investigate abuse and account takeover.
• Aggregated, anonymized metrics (e.g. "average response time across all venues") that cannot be linked back to an individual customer or end user.

We complete all deletion requests within 30 days of receipt. In most cases it takes less than 48 hours. You will receive an email confirmation once deletion is complete. If we cannot locate any data associated with your request, we will tell you that instead.

If you initiated deletion by removing the Mikla app from your Facebook or Instagram settings, Meta assigns a confirmation code to the request. You can use the status URL Meta provides, or email privacy@mikla.ai with the code, to check progress.

For deletion requests, questions about this page, or help locating data:

• Email: privacy@mikla.ai