Data Export & Deletion Requests

1. Overview of Your Privacy Rights

Opimatic is committed to empowering users with full control over their personal data. Under global privacy regulations—including the General Data Protection Regulation (GDPR Article 15 & 17) and the California Consumer Privacy Act (CCPA/CPRA)—you have the right to request access to, export of, and permanent deletion of personal data processed by our platform.

2. Data Export (Right to Portability)

You may request a machine-readable copy of the personal data associated with your Opimatic account at any time. This includes:

• Account & Billing Metadata: Profile information, agency sub-account structures, and transaction history.
• Omnichannel Contacts & Logs: Customer subscriber lists, chat transcripts, and unified inbox conversation records.
• Media & Content Archives: AI-generated content drafts, scheduled post queues, and media library assets.

Exports are delivered in standard JSON or CSV formats to ensure seamless portability to other systems.

3. Data Deletion (Right to be Forgotten)

Requesting account deletion initiates our automated data purging protocol. Upon confirmation of an erasure request:

• Production Database Purge: All active profile records, linked social tokens (WhatsApp, Facebook, Instagram, X, LinkedIn), and messaging histories are immediately removed from production databases.
• Agency Sub-Accounts: Any provisioned client accounts associated with an agency subscription are closed and queued for erasure.
• Backup Cycle Overwrite: Encrypted system backup snapshots containing residual data are permanently overwritten according to our rolling 30-day backup cycle.

4. Verification & Security Protocols

To protect account security and prevent unauthorized access or accidental data loss, all Data Subject Access Requests (DSARs) undergo strict identity verification:

• Registered Account Email: Requests must originate from or be confirmed via the primary email address registered to your Opimatic account.
• Multi-Factor Confirmation: We may request two-factor authentication (2FA) verification or additional authorization tokens before processing sensitive export packages or irreversible deletion requests.

5. Response Timelines & Notifications

We process all verified privacy requests promptly and within statutory deadlines:

• Acknowledgment: Received requests are acknowledged within 48 business hours.
• Fulfillment Window: Data exports and deletion confirmations are fulfilled within 30 days of initial verification (extendable by up to 60 additional days for unusually complex multi-account enterprise structures, as permitted by GDPR Article 12).

6. Lawful Exceptions to Erasure

In certain limited circumstances, Opimatic may be legally obligated to retain specific subsets of data despite an erasure request:

• Compliance with statutory tax, accounting, and financial reporting laws (e.g., invoice records retained for up to 7 years).
• Establishment, exercise, or defense of ongoing legal claims or fraud prevention investigations.

7. Submit a Request

You can submit a data export or account deletion request through any of the following channels: