Data deletion

How to have personal data removed from DayThree CRM. This page also serves as the data deletion instructions required by Meta and Google for connected applications.

If you use the CRM (a workspace user or business)

  1. Email privacy@daythree-studio.com from the address you sign in with. Subject: Data deletion request. Say whether you want your own user account removed, or the whole workspace closed and deleted.
  2. We confirm the request by reply, and check it came from the workspace owner when it concerns the whole workspace.
  3. If you want a copy first, export your contacts and enquiries as CSV from the Contacts page before we proceed.
  4. Deletion happens within 30 days: your account, or the workspace and everything in it, including contacts, conversations, notes, forms, workflows, stored advertising figures and connected-account tokens. Connected platforms are disconnected. We email you when it is done.

If you contacted a business that uses the CRM

Your enquiry belongs to the business you wrote to, which is responsible for it. Two routes:

  • Ask the business directly. They can delete your record from their workspace themselves, immediately.
  • Or write to us at privacy@daythree-studio.com with the phone number or email address you used and, if you remember, the business or website you contacted. We locate the record, delete it or pass the request to the business as the law requires, and confirm to you within 30 days.

Data that reached us through Google, Meta or WhatsApp

If your data came into the CRM through a connected platform, for example a message to a business's WhatsApp number or a lead form on Facebook or Instagram, the same steps apply: contact the business, or email us with the details above. Disconnecting a platform from a workspace deletes the stored access token straight away; data already imported is deleted on request or when the workspace closes.

What deletion covers, and what does not

  • Everything in the workspace or record concerned, as listed above.
  • Copies in our providers' backups expire on their own schedule, at most 30 days later.
  • Records we must keep by law, such as invoices for a paid engagement, are kept for the period the law requires and then deleted.
  • Deleting your record from a business's workspace does not delete messages on the business's own phone or in the platform's own systems; those are governed by the platform.

The full picture of what the CRM stores is in the privacy policy.