Data Deletion

Last updated: August 2026

This page explains how to request deletion of personal data handled by saastro.io and by the Saastro platform (the Hub and Gen tooling the same controller operates). It is the deletion route referenced by our Privacy Policy.

How to request deletion

Write to info@saastro.io from the address or with the details we would need to find your data (for example, the email you contacted us from, or the phone number you used on WhatsApp). There is no form to fill in and we will not ask you for a copy of your ID; we may ask for one more detail only if we cannot otherwise tell which data is yours.

What we delete

Email correspondence. Any message you sent to info@saastro.io and our replies.

Site preferences. The cookie that remembers your banner choice lives only in your own browser — you can clear it yourself at any time, and it disappears on its own after a year. There is nothing for us to delete on our side.

Platform data (leads and WhatsApp). For data processed through the Saastro platform on a customer’s behalf — a lead you submitted through a customer’s form, or a WhatsApp conversation with a customer’s business number — the customer is the controller of that data, not Saastro. In that case:

• You can ask us directly and we will route your request to the right controller and delete the data from our systems on their instruction; or
• You can ask that customer (the business you contacted) directly.

Either way the data is removed from the platform. Note that Meta keeps its own copy of WhatsApp message delivery under its own retention terms, which is outside our control; the same applies to any copy in your own WhatsApp app.

How long it takes

We act on deletion requests without undue delay and within one month at the latest, as required by Article 17 GDPR. If a request is complex we may extend that period and will tell you why.

Some data may survive a deletion request where the law requires us to keep it — for example records of commercial dealings we are obliged to retain, or data we need to establish or defend a legal claim. We will tell you if that applies and delete it once the obligation ends.

Full platform backups are held for 90 days; data removed from the live platform is purged from backups as they rotate out within that window.

Your other rights

Deletion is one of several rights you have under the GDPR (access, rectification, restriction, objection, portability). See the Privacy Policy for the full list and how to exercise them, and your right to complain to the Agencia Española de Protección de Datos (AEPD), www.aepd.es.