Sidekick

Data Deletion Instructions

Version 1.0.0 · Effective 2026-08-08. Previous versions are available on request from privacy@sidekick.mu.

This page explains how to have data deleted from the Service operated by Sidekick Ltd (“Sidekick”, “we”), with particular reference to data obtained through a connected Meta account (Facebook Page, Instagram professional account, or WhatsApp Business number). It sits alongside our Privacy Policy, which sets out your rights in full.

1. Two different kinds of data

Which route applies depends on whose data it is. This distinction matters, because we are not permitted to delete one business’s records at the request of a different person.

  • Connection data — the link between a Meta account and a Sidekick business: the authorisation itself, the access tokens derived from it, and the message threads received through the connected accounts. We hold this as a processor on behalf of the business, and we delete it on request as described below.
  • Business records — contacts, invoices, quotes, contracts and documents inside a Sidekick account. These belong to the business that uses Sidekick; that business is the controller. Requests to erase them must go to that business, or to us so that we can pass them on.

2. Deleting connection data

Any of the following will remove it:

  • In Sidekick — go to Settings → Integrations and choose Disconnect on the relevant account. This revokes our access at Meta and erases the stored tokens and message history immediately.
  • From Facebook — open Settings & Privacy → Settings → Apps and Websites, select Sidekick, and choose Remove. Facebook notifies us and we revoke and erase the stored credentials automatically.
  • By request — email privacy@sidekick.mu from the address associated with the account, telling us which Page, Instagram account or WhatsApp number is affected.

Where Facebook sends us a deletion request on your behalf, we return a confirmation code and a status page where you can check that the deletion completed.

3. How long it takes

Disconnecting in Sidekick or removing the app on Facebook takes effect immediately. Requests sent by email are actioned within 30 days, and normally much sooner. Backups are retained on a rolling 30-day cycle, so a deleted record may persist in an encrypted backup for up to 30 days after deletion before ageing out; it is not restored to the live Service.

4. What we keep, and why

We retain the minimum needed to meet legal obligations and to show that a deletion was performed — for example the fact and date of the request. We do not retain message content, access tokens, or profile data after deletion.

5. Contact

Sidekick Ltd, 18 Block C, Phase 2, Les Allées d'Helvétia, Moka, Mauritius. Data protection enquiries: privacy@sidekick.mu. You also have the right to lodge a complaint with the Data Protection Office of Mauritius.