Data Deletion Instructions
This page explains how a Studio owner, a Studio's Client, or a connected Meta user can request deletion of personal data held by InkDesk. This satisfies our obligations under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and Meta Platform Terms (Instagram + WhatsApp integrations).
1. What you can request
- Deletion of your InkDesk account and all associated personal data (Studio owners and staff).
- Deletion of Instagram message threads stored by InkDesk that originated from you and were received via the Studio's Instagram Messaging integration.
- Deletion of WhatsApp message records (inbound + outbound) stored by InkDesk that relate to you and were received via the Studio's WhatsApp Cloud API integration.
- Deletion of booking records tied to your phone number or Instagram handle (Clients of a Studio).
2. Who handles your request
Per our Privacy Policy, InkDesk is the Data Fiduciary for Studio account data and acts as a Data Processor for Client data on behalf of the Studio.
- If you are a Studio owner or staff member requesting deletion of your InkDesk account: contact us directly via the email below.
- If you are a Client of a Studio (you DM'd a tattoo studio that uses InkDesk, or you booked with one): contact the Studio first. The Studio is the Data Fiduciary for your data and owns the deletion decision. InkDesk will assist the Studio in fulfilling such requests on a commercially reasonable basis once they instruct us.
- If you cannot identify or reach the Studio: email us at privacy@inkdesk.in and we will attempt to identify the Studio and forward your request, or delete the data ourselves if no Studio claims it within 30 days.
3. How to submit a deletion request
- Email privacy@inkdesk.in with subject
Data Deletion Request. - Include in the body:
- Your full name as registered (if you have an InkDesk account).
- Your registered email address (Studio owners) OR phone number / Instagram handle (Clients).
- The Studio name(s) you interacted with, if applicable.
- The data you want deleted (account, messages, bookings, or all).
- For verification, we will reply from the same email address used to register the account, or send a one-time verification code to the phone number on file before deleting Client data.
4. Timeline
We acknowledge requests within 3 business days and complete deletion within 30 days, unless legal retention obligations apply (see Section 6).
5. What happens after deletion
- Your account login and session are revoked immediately.
- Personal data (name, email, phone, Instagram handle, message bodies) is removed from production databases.
- Backups are encrypted and retained for up to 30 days as per provider policy. After that window, backup copies are also rotated out.
- We send you a written confirmation when deletion is complete.
6. What we are required to retain
Indian law requires us to retain certain records even after a deletion request:
- Tax invoices for 8 years (Section 36 of the CGST Act, 2017). Customer name on invoices is anonymised on request but the invoice document remains.
- Payment records for 8 years where applicable.
- Audit logs for 12 months for fraud and abuse investigation, then purged.
7. Meta-specific deletion (Instagram + WhatsApp)
When you instruct Meta (Instagram or WhatsApp) to disconnect InkDesk from your account, Meta sends us a deauthorisation callback. On receipt, we mark all data tied to that connection for deletion within 30 days, in line with Meta Platform Terms.
You can disconnect at any time:
- Instagram: Settings → Apps and Websites → Active → InkDesk → Remove.
- Facebook (if connected via Page): Settings → Business Integrations → InkDesk → Remove.
- WhatsApp Business: contact your Studio to revoke the integration.
8. Grievance Officer
If we do not respond within the stated timeline, or if you disagree with our handling of your request, you may escalate to our Grievance Officer (full contact details in our Privacy Policy) or to the Data Protection Board of India.
9. Contact
Email: privacy@inkdesk.in
Subject: Data Deletion Request