This page explains how to ask Bototo Technology LLC, the company behind BOTOTO, to delete your personal data, and what happens next. You do not need a BOTOTO account, and there is normally no charge.
BOTOTO's messaging channels are not live yet. Where this page mentions Messenger, Instagram or WhatsApp, it describes how deletion will work once a business connects one of them to BOTOTO.
Who this page is for
- Website visitors and people who contacted us, for example to request a demo. We handle your request directly.
- Business customers and their staff, such as a clinic's account administrator or a receptionist with a BOTOTO login. We handle requests about account and user details directly.
- People who messaged a business that uses BOTOTO, through its website chat or, once available, Messenger, Instagram or WhatsApp. The business controls your conversations, booking requests and customer record, and we process them for it. See Requests about a business's records.
How to request deletion
Email info@bototo.ge with the subject line "Data deletion request", or write to us through our contact page. Please include:
- your name and an email address where we can reach you;
- whether you are a website visitor, a business customer or staff user, or someone who messaged a business;
- if you messaged a business, its name and the channel you used (website chat, Messenger, Instagram or WhatsApp);
- your identifier on that channel: for WhatsApp, the phone number you messaged from; for Messenger, the name on your Facebook profile; for Instagram, your username and profile name; for website chat, the name and phone number you gave;
- approximate dates of your conversations or contact; and
- whether you want everything deleted or only specific information.
Please do not send passwords, verification codes, identity documents, payment details or health information. We will never ask for your password. We will ask for an identity document only if there is no other reasonable way to confirm who you are, and we will explain why.
How we confirm it is you
Before deleting anything, we check that the request comes from the person the information is about, or from someone they have authorised, so that nobody can delete another person's data. Our checks are proportionate, and we ask only for what we need. For example, we may ask you to reply from the email address we hold, confirm the approximate date and topic of a conversation, or send a short code we give you from the same WhatsApp number, Messenger profile or Instagram account to the business you messaged. We use this information only to handle your request.
What we delete
| Information | Controlled by | What we do |
|---|---|---|
| Emails, enquiries and demo requests sent to us | BOTOTO | Delete them from our mailboxes and records. |
| Business account and staff user details | BOTOTO | Delete the account or user profile. |
| Conversations: messages, attachments you sent, channel identifiers (Page-scoped ID, Instagram-scoped ID, or WhatsApp phone number and profile name), timestamps, message IDs and delivery status | The business you messaged | On the business's instruction, delete them, with any handoff summaries, draft replies and staff notes. |
| Booking requests, appointments and your customer record | The business you messaged | On the business's instruction, delete or anonymise them, unless the business must keep them by law. |
| Meta connection details and access permissions of a business | BOTOTO, for the business | Stop using the access and delete the details. |
| Website, technical and security logs, including records of requests to AI providers | BOTOTO | Deleted automatically after 30 days; specific entries sooner where we can identify them. |
| Messages sent to AI providers to produce replies | Our AI model providers | Kept only as the provider's terms with us allow. See our Privacy Policy. |
| Backups | BOTOTO | Not used day to day; overwritten within 35 days. |
What we may keep, and why
- Legal obligations: for example, accounting records about a business customer's account, or records a business must keep by law, such as a clinic's appointment records.
- Legal claims: information needed to establish, exercise or defend legal claims, until the matter is resolved.
- Security: limited security logs, for up to 30 days.
- Backups: overwritten within 35 days. If we restore a backup before then, we delete your information again.
- A record of your request: the date, what was deleted and our reply, without the deleted content.
If we keep anything, we will tell you what and why.
Requests about a business's records
When you message a clinic or other business through BOTOTO, that business controls your conversations, booking requests and customer record. We process them on its behalf and act on its instructions. You can contact the business directly, which is often fastest, or contact us: we will forward your request to the business promptly, tell you we have done so, and help the business carry it out. The business may need to keep some records by law and should tell you if so.
Business customers can delete conversations and customer records in their BOTOTO account where BOTOTO offers that option, or ask us at info@bototo.ge, which is also where to ask us to delete a whole account.
Disconnecting is not deleting
- If you messaged a business: blocking it, deleting the chat in your app or no longer messaging stops new messages reaching BOTOTO, but does not delete the copy the business holds in BOTOTO.
- If you connected a business account: removing BOTOTO from the business integrations or connected apps in your Facebook or Instagram settings, removing it from your WhatsApp Business account, or disconnecting the channel in BOTOTO stops new messages reaching BOTOTO. Information already stored stays in the business's records until it is deleted.
To have stored information deleted, send a request as described above. Facebook or Instagram may show you a link to this page when you remove BOTOTO; removing it there does not by itself send us a deletion request.
Information held by Meta
BOTOTO cannot delete information held by Meta. Messages you send through Messenger, Instagram or WhatsApp stay in your own app and on Meta's systems, and may remain in the business's own Meta account, even after our copy is deleted. To manage information Meta holds, use the controls Meta provides, for example through the Meta Privacy Center, the Instagram Help Center or the WhatsApp Help Center. To have the business delete its copy in its Meta account, contact the business.
What happens after you ask
- Acknowledgement: we confirm receipt within 3 working days.
- Checks: if needed, we ask you to confirm it is you.
- Forwarding: if your request concerns a business's records, we forward it to the business promptly and let you know.
- Completion: within 10 working days, and in any case within the period required by law. If the law allows more time for a complex request and we need it, we will tell you why.
- Confirmation: we email you what was deleted, anything kept and why, and a reference number.
To follow up, reply to our email or write to info@bototo.ge quoting your reference number.
If we refuse your request in whole or in part, for example because we could not confirm your identity or the law requires us to keep the information, we will explain why. You can ask us to reconsider. You can also complain to the State Audit Office of Georgia, which supervises personal data protection in Georgia, or, where the GDPR applies, to the data protection authority in the EU country where you live or work, and you can go to court. See also our Privacy Policy.