Data Deletion at Urpi

Last updated: November 6, 2026

This is a translation for convenience. The Spanish version at urpi.app/data-deletion is the legally binding one.

This page explains how to request deletion of your data at Urpi, what is deleted, what is kept, and the deadlines. You don't need an account to make the request. The full explanation of what data we process is in the privacy policy.

1. Who can request it

Who How it is handled
End client: someone who wrote to a business on WhatsApp Directly with the business, or with Urpi. Urpi notifies the business, which is the controller of your data, and deletes your data within the stated period
Business using Urpi With Urpi, through an authorized person of the business. It can request deleting a client or leaving Urpi
Business member with a Urpi account With Urpi, for their account data

A representative can also request it, with proof of representation. People under 15 act through their legal representative.

2. How to request it

Write to contact@urpi.app with the subject "Eliminación de datos" and state:

We must verify your identity or representation before deleting. It is free.

3. If you are an end client

Urpi keeps your data on the business's behalf. You can always request its deletion, and the business instructs us by contract to honor those requests.

What we delete

Deletion applies to your data with that business. If you wrote to other businesses using Urpi, tell us: each one is a separate controller.

What we keep and why

If you write to the business again, new data will be created.

4. If you are a business leaving Urpi

To leave Urpi, write to contact@urpi.app. To delete a single client, section 3 applies. On leaving Urpi:

  1. We mark the business as deleted.
  2. We disconnect its WhatsApp number and delete the token and PIN immediately.
  3. After 30 days, we permanently delete its clients, chats and messages.

We also empty the inputs and outputs of that business's AI systems within the same period.

Before that period ends, you can ask us for a copy of your data.

What we keep and why

5. If you are a business member

We delete your account data: name, email and password hash. We keep what a law requires us to keep and the record of your request.

Messages you wrote to clients belong to the conversations of the business, which is their controller. They stay there unless the business or the clients request their deletion. If you want any deleted, we coordinate it with the business.

6. Deadlines

Deadlines run from when we receive your request.

Step Maximum time
Forwarding an end client's request to the business 2 working days
Suspending processing or handling a revocation of consent 3 working days
Carrying out deletion after the business's instruction 3 working days
Replying to and carrying out a deletion request 10 working days
Deleting the token and PIN when a number is disconnected Immediately
Deleting the clients, chats and messages of a business that left 30 days from leaving Urpi

If information is missing, we may ask for clarification once, within 5 working days.

7. How we confirm

When we finish, we reply by email confirming the deletion: what was deleted, on what date, and what was kept and why. For a business, that email is its proof of deletion. If we cannot honor your request, we explain why.

If you get no reply in time, write to contact@urpi.app or file a complaint with Ecuador's Superintendencia de Protección de Datos Personales at spdp.gob.ec.

8. How to cut Urpi's access

A business can disconnect its number from the Urpi app, or remove Urpi from its Meta account. In both cases we delete the token and PIN immediately and stop sending and receiving messages for that number. This does not delete messages or clients: for that, use the deletion request on this page.

9. What this request does not delete

We delete data from Urpi's systems. This does not reach the chats on your phone, copies the business holds outside Urpi, or Meta's data, which is under its own rules. What our providers have already received is subject to their own periods, and backups are deleted when they expire.