Data Deletion Instructions

Who this is for

• Operators — the business owner or staff who signed up for Caye.
• End customers— people whose messages passed through an operator's Caye-connected inbox (WhatsApp, email, Messenger, Instagram).

How to request deletion

Email: lamar@tropitech.org with the subject line Caye data deletion request.

Include in your message:

• Which category applies (operator or end customer)
• The identifying details we would have on file — for operators, your account email and business name; for end customers, the phone number, email address, or social handle you used to reach the business
• The name of the business whose Caye received your messages (end customers only) — this helps us find your data faster
• Confirmation that you're the owner of the data being requested

We may ask a follow-up question to verify identity before we act — this protects you from someone else deleting your data without permission.

What gets deleted

For operators:

• Your account, authentication credentials, and business configuration
• Your voice-and-tone samples, service catalog, and workspace settings
• All customer conversations, bookings, and contacts stored in your workspace
• Connected-channel tokens (WhatsApp, email, Meta, Google, Zoho) — we revoke and delete these

For end customers:

• Message threads containing your contact identifier (phone, email, social handle)
• Contact records created for you across affected operator workspaces
• Any booking or reservation records that reference you

What we may retain (and why)

• Billing and tax records — retained for 7 years to comply with Bahamian and applicable foreign tax law. These contain the fact of a transaction but not message content.
• Legal hold— if we're under a lawful order or active dispute concerning the data, we may retain it until the matter is resolved.
• Anonymized aggregate metrics — counts and timing data with no personal identifiers may be retained for service-quality analysis.
• Encrypted backups — deletion propagates to backups on the next 30-day rotation cycle. Backups are not accessed for any purpose other than disaster recovery.

How long it takes

• We acknowledge deletion requests within 3 business days.
• Live-system deletion completes within 30 days of the verified request.
• Backup rotation completes deletion from encrypted backups within a further 30 days.
• We'll email you a confirmation once each stage is done.

Third-party channels

Caye reads and replies through third-party services (WhatsApp Business, Meta, Google, Zoho, Stripe). Deleting data from Caye does not delete it from those providers — you'll need to request deletion directly with each provider you want your data removed from. We can point you to the relevant help pages if you email us.

After deletion

Once your data is deleted, Caye can no longer function for you — operators lose access to their workspace; end customers whose contacts have been removed won't appear in any future replies. Deletion is not reversible.

Questions or complaints

Email lamar@tropitech.org. If you believe we've mishandled a deletion request, you can also file a complaint with the Bahamas Data Protection Commissioner.

Contact

TropiTech Solutions
Attn: Data Deletion
Eleuthera, The Bahamas
lamar@tropitech.org