# Data deletion and access removal

**Version 1.1 · 23 October 2026**

This is a translation. In case of discrepancy, the Spanish version prevails.

You can remove InvokeApp's access to your accounts and ask us to delete your data at any time.

## 1. Disconnect an account in the platform

Go to InvokeApp → **Integrations** → choose the connection → **Disconnect**. We mark the connection as disconnected. For the Gmail mailbox, we also revoke the permission with Google and delete its credentials. For other connections (Google Calendar, Instagram, Facebook, LinkedIn and others), also remove access from the provider itself (section 2), which is what invalidates the credential, and request deletion of any credentials still stored (section 3). The WhatsApp Business account is unlinked from within Meta's tools (section 2).

Disconnecting does not by itself delete the data already stored: to do that, request deletion (section 3).

## 2. Remove access from the provider

- **Google:** [myaccount.google.com/permissions](https://myaccount.google.com/permissions) → InvokeApp → **Remove access**.
- **Facebook and Instagram:** Facebook Settings → **Business integrations** (or *Apps and websites*) → the app you connected with (yours or your agency's) → **Remove**.
- **WhatsApp Business:** Meta Business Suite → Business settings → remove access for the app or the system user InvokeApp was connected with, or unlink it in WhatsApp Manager.
- **LinkedIn:** [linkedin.com/psettings/permitted-services](https://www.linkedin.com/psettings/permitted-services) → the app you connected with → **Remove**.
- **Other connections:** in the authorised apps or access section of each provider's account.

## 3. Request deletion of data already stored

Email privacy@invokeapp.io from your account's email address or from the connected account's address, with the subject **"Data deletion"**, stating what you want deleted: a specific connection, a project or the whole account. For agency accounts, the request can come from the agency or from the business that owns the connected account; if the business makes the request, we inform the agency.

## What happens next

1. We acknowledge your request and give you a **request code**.
2. We delete the data obtained through the connection (messages, emails, appointments, posts, identifiers and credentials) within **30 days of your request at most**. Encrypted backups are deleted by rotation within 10 more days at most.
3. We confirm the deletion by email.

We only keep, blocked and for no other use:

- what the law requires us to keep (for example, invoices for the statutory period);
- if you purchased InvokeApp, the record of the contract (which version of the terms was accepted, on what date, who accepted it and from which IP address and browser), for the limitation periods;
- if someone asked not to receive further communications, their email address or phone number on the unsubscribe list, so that they are not contacted again;
- technical security logs, for up to 400 days;
- what is needed to prove that we handled your request.

## Export your data

If you close your account, you can ask us to export your data at privacy@invokeapp.io during the following 30 days: we deliver it in a structured, commonly used format (CSV or JSON) within **10 business days** at most. While your account is active, you can export from the platform the data it allows you to export (for example, your leads) and ask us for the rest through the same channel.

## If you are a customer or contact of a business that uses InvokeApp

For example, if you messaged its WhatsApp or received an email from it: that business is the controller of your data, so please contact it. If you write to us, we will forward your request without delay and help it respond. To stop receiving WhatsApp messages from a business, you can also write **"STOP"** or **"BAJA"** in the conversation.

More information in the [Privacy Policy](https://invokeapp.io/privacy).