How to request deletion of your personal data, what gets erased, how long it takes and how you receive confirmation.
Write to contato@sawadee.lat with the subject Personal data deletion request. So that we can locate your records, please include:
You may also opt out of messages at any time by replying in the WhatsApp conversation itself with a refusal (for example, “stop”). That halts sending immediately, but does not erase history — to erase it, use the email request above.
Before deleting anything, we need to be sure the request came from you. We may ask for additional confirmation — for example, validating the phone number you provided. This step exists to stop third parties from erasing your data, and is contemplated by LGPD art. 18.
We never ask for passwords, WhatsApp verification codes or banking details. If anyone requests these on our behalf, do not respond and let us know.
We are a technology provider: in most cases we process your data on behalf of the business you were messaging, which is the controller. On receiving your request we act on both fronts — we delete what is in our custody and forward the request to the controller.
| Data | What happens |
|---|---|
| Message content (text, images, audio, video, documents) | Erased from our systems and active backups |
| Phone number and profile name | Erased or irreversibly anonymised |
| Delivery metadata (date, time, read status) | Erased or detached from any personal identifier |
| Account and contact data (if you are our customer) | Erased, save for what the law requires us to keep |
| Copies held by the controlling business | Request forwarded to it and tracked through to a reply |
As for data traversing the WhatsApp Business Platform, Meta states that it retains message content for up to 30 days and deletes user identifiers within 30 days after a message’s final status update. That period is controlled by Meta and runs in parallel with ours.
When we register the request we reply with a unique reference code. Keep it: it identifies your request in any later contact.
Once deletion is complete we send written confirmation to the same address the request came from, stating what was erased, the completion date and anything that had to be retained under a legal obligation, with the reason. If you would like a status update before then, simply reply to the reference email.
LGPD art. 16 permits retaining data even after a deletion request in certain cases. We keep only the minimum:
| What stays | Why | For how long |
|---|---|---|
| Record of the deletion request itself and its execution | Evidence that we honoured your right (art. 16, I) | 5 years |
| Opt-in and opt-out evidence | Demonstrating the lawfulness of prior sending to the ANPD and to Meta | 5 years |
| Tax and accounting documents | Legal obligation (art. 16, I) | 5 years |
| Data needed to exercise rights in legal proceedings | Regular exercise of rights (art. 16, II and III) | Until final judgment |
These records are kept segregated with restricted access, are never used to contact you, and are erased as soon as the period lapses.
Contact our Data Protection Officer at contato@sawadee.lat, quoting your reference code. If the disagreement persists, you may complain to the Brazilian National Data Protection Authority (ANPD) at gov.br/anpd.
These instructions form part of our Privacy Policy.