Data Deletion Policy

1. Overview

Triven.ai is an AI workflow automation platform owned and operated by CollabGlam LLC (CollabGlam, we, us, or our). This page explains how Triven.ai account holders, Workspace members, and individuals whose information has been processed through a Triven-powered workflow may request deletion of eligible personal information, including information received or stored through connected Meta products such as the WhatsApp Business Platform.

CollabGlam LLC is the data controller for personal information processed through Triven.ai, except where a customer organization (Workspace Owner) acts as the controller of its own end-user data and Triven.ai acts solely as a data processor on that Workspace Owner's behalf. See Section 9 for details.

2. How to Request Deletion

To request deletion, email info@triven.ai with the subject line Data Deletion Request, ideally from the email address associated with your Triven.ai account. Please include:

• Full name and Triven.ai account email address
• Workspace, organization, or customer-business name
• The connected WhatsApp business phone number or WhatsApp Business Account identifier, if your request relates to a Meta integration (see Section 3)
• Whether you want specific connected-integration data deleted, or your complete Triven.ai account and all eligible data

Do not send passwords, access tokens, API keys, payment-card information, or identity documents in your request unless we specifically ask for verification through a secure method (see Section 5).

3. Meta and WhatsApp Data Deletion

If you connected a Meta Business Portfolio, WhatsApp Business Account, WhatsApp business phone number, or another supported Meta asset to Triven.ai, you may request deletion of eligible information stored by Triven.ai in connection with that integration.

Depending on the integration used, this may include Meta account identifiers, WhatsApp Business Account or Business Portfolio identifiers, phone-number mappings, encrypted access credentials or tokens, webhook configuration, connection metadata, message or conversation records stored by Triven.ai, attachments, and related operational records. We will revoke or delete eligible stored credentials and disconnect the relevant integration as part of a completed request.

To help us locate and action your request, please provide where known:

• Your Triven.ai account email address
• Workspace, organization, or customer-business name
• The connected WhatsApp business phone number
• The WhatsApp Business Account ID or Business Portfolio ID
• Whether the request covers Meta-connected data only, a specific conversation or end user, or your complete Triven.ai account

If you are a WhatsApp end user and do not hold a Triven.ai account: you can still submit a request. In place of an account email, provide the WhatsApp phone number you messaged the business from, the name of the business you contacted, and the approximate date range of your conversation. We will use these details, together with the business's Workspace records, to locate and action eligible information.

4. Scope of Deletable Data

Upon a verified request, we will delete the following categories of personal information associated with an account or Workspace, where applicable and not subject to Section 7:

• Account & profile data: Name, email address, phone number, authentication account data
• Workspace data: Workspace configuration, team member records, permissions
• Connected integrations: WhatsApp Business, Telegram, Email, CRM, and other authorized connections
• Workflow data: Automation configurations, triggers, and workflow logic
• Conversation data: AI conversation history and message logs processed on your behalf
• Files & documents: Uploaded files, attachments, and generated outputs
• Knowledge Base content: Documents and data ingested for AI reference
• AI memory records: Workspace-specific memory or context data used to personalize AI responses
• Credentials: API keys, OAuth tokens, and encrypted access credentials
• System logs: Logs eligible for deletion under our data retention schedule

Logs required for security, fraud-prevention, or legal purposes are retained under Section 7 rather than deleted outright.

5. Identity Verification

To protect against fraudulent or unauthorized deletion requests, we will verify the identity of the requester before processing a request. Verification may include confirming account ownership, matching the request to registered account credentials, or requesting additional identifying information proportionate to the sensitivity of the data involved. We will not request more information than is reasonably necessary to verify identity.

6. Processing Timelines

We process verified deletion requests according to the following framework:

• General / GDPR-eligible requests: within one calendar month of identity verification, in accordance with Article 12(3) GDPR.
• California (CCPA/CPRA) requests: within 45 calendar days of receipt, with a one-time 45-day extension where reasonably necessary, provided we notify you of the extension and the reason within the initial 45-day period.
• Requests involving connected third-party integrations: may require additional time where deletion depends on a connected platform's own processing schedule. We will notify you if this applies to your request.

If we deny a deletion request in whole or in part, we will provide the reason for denial and, where applicable, information about your right to appeal.

7. Legal, Regulatory & Security Retention

Notwithstanding a deletion request, we may retain limited data where necessary to:

• Comply with a legal obligation requiring processing (GDPR Art. 17(3)(b); CCPA §1798.105(d));
• Establish, exercise, or defend legal claims;
• Detect, investigate, or prevent fraud, security incidents, or illegal activity;
• Complete a transaction or provide a good/service you requested prior to your deletion request;
• Satisfy tax, accounting, or financial recordkeeping obligations;
• Debug or repair functionality as necessary for platform integrity.

Retained data is limited to what is strictly necessary for the applicable purpose, is subject to access restrictions, and is deleted once the retention basis no longer applies.

8. What Happens After Deletion

Once a deletion request is completed:

• The account and/or Workspace is disabled and cannot be reactivated.
• Connected third-party integrations are disconnected, and eligible access tokens are revoked where supported by the provider.
• Workflow configurations, conversation history, uploaded files, and AI memory records tied to the Workspace are deleted or irreversibly anonymized from active production systems.
• API keys and OAuth credentials associated with the account are invalidated.

After completion, deleted information will no longer be available through Triven.ai's active production systems or ordinary account-recovery processes. Limited copies may remain temporarily in encrypted, access-restricted backups until those backups are overwritten or expire under our backup-retention schedule (see Section 10). Backup copies are not used for ordinary business processing, and if a backup is ever restored, the original deletion request will be reapplied before the affected information returns to active use.

9. Data Controlled by a Customer Business (Workspace Owner)

Where Triven.ai processes customer or end-user information solely on behalf of a Workspace Owner — for example, WhatsApp messages a business sends to its own customers through our platform — that Workspace Owner is the data controller for that information, and Triven.ai processes it solely as a service provider/processor under the Workspace Owner's instructions.

If you are an end user who messaged a business via WhatsApp, we may refer your request to that Workspace Owner, or coordinate with them to complete it. We will still delete information within our own control when required by applicable law or a valid controller instruction. Deletion from Triven.ai's systems does not automatically delete information independently retained by the Workspace Owner or by Meta.

10. Backups

Deleted data may persist temporarily in encrypted, access-restricted backups maintained for disaster recovery and business continuity, as described in Section 8. Backup data is not accessible in the ordinary course of business and is automatically purged in accordance with our backup-retention schedule.

11. Other Third-Party Integrations

Beyond the Meta WhatsApp Business Platform (Section 3), Triven.ai integrates with other third-party platforms at the customer's direction, including but not limited to Telegram, Google Workspace, Microsoft services, Stripe, and Twilio. We will disconnect these integrations and delete our copy of associated data as part of a completed request. Data independently stored within those third-party platforms is governed by their own policies, and you may need to separately request deletion directly from them.

12. How We Use Data With AI Systems

Customer conversations, uploaded files, workflow data, and messages processed through Triven.ai are not used to train shared or foundation AI models. Where third-party AI service providers are used to process a request, that processing is governed by our agreements with those providers and our Privacy Policy, and is subject to the same deletion rights described on this page.

13. Children's Data

Triven.ai is not directed to individuals under the age of 18, and we do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child in violation of applicable law, we will delete it promptly upon verification.

14. Your Rights (GDPR / CCPA / Other Applicable Law)

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate personal information;
• Delete your personal information (subject to Section 7);
• Restrict or object to certain processing;
• Port your data to another provider;
• Know what categories of personal information are collected, used, and disclosed (CCPA/CPRA);
• Opt out of the sale or sharing of personal information. Triven.ai does not sell or share personal information for cross-context behavioral advertising, so no opt-out action is required for this right;
• Non-discrimination for exercising any of the above rights.

To exercise any of these rights, use the contact method in Section 2.

15. Contact Us

For data deletion and privacy requests, contact us at: