Data Deletion Instructions

Effective date: 9 August 2026

You can ask Performance Labs SL to delete personal data associated with My AI Employee, MiEmpleadoIA, Il Mio Impiegato IA, Captura, or a connected WhatsApp Business account.

How To Request Deletion

Email ruben@performancelabs.net with the subject Data deletion request and include:

  • The email address used for your account.
  • The organization or accounting firm involved, if applicable.
  • Whether the request concerns your user account, uploaded documents, a Captura submission, a connected email or Google Workspace mailbox, or a connected WhatsApp Business account, number, message, or request link.
  • Enough information for us to locate the data without sending additional confidential documents by email.

We may ask you to verify your identity and authority before deleting data. If an accounting firm controls the requested client data, we may forward or coordinate the request with that firm because it decides how its workspace data is used.

Connected Email And Google Workspace Data

To stop future access to a Google mailbox immediately, remove My AI Employee from your Google Account third-party connections. You can also pause or archive an email source in My AI Employee to stop its scheduled checks, but that does not revoke Google's authorization or delete data already collected.

To request deletion from My AI Employee, follow the email process above and identify the organization and connected mailbox without sending passwords, OAuth tokens, or confidential documents. The request may cover encrypted connection credentials; synchronization cursors and status; message headers, senders, recipients, subjects, body content, and attachments; outbound operational messages and delivery evidence; and related document, client-matching, review, and audit records. Removing access at Google stops future authorized access but does not by itself identify which previously collected workspace records the organization wants deleted, so contact us when those records must also be removed.

WhatsApp Business Data

Archiving or pausing a WhatsApp source is not disconnection and does not delete data. A product disconnection removes the saved authorization token and registration PIN, stops future product access after provider-side revocation or unsubscription completes, and leaves already-received workspace records subject to the organization's retention and deletion instructions.

To request deletion, follow the email process above and identify the organization and connected WhatsApp number. The request may cover connection and account identifiers; sender profile names and phone numbers; inbound text, captions, media, filenames, and documents; outbound recipient, body, Utility-template parameters, and private-link references; delivery, read, failure, conversation, pricing, and error identifiers; client matching and reply correlation; permission, revocation, and STOP evidence; and related review or audit records. Do not send access tokens, registration PINs, app secrets, or confidential documents by email.

You can also remove the Meta app's access from the relevant Meta Business settings. Removing Meta access stops future authorized access but does not by itself identify which accounting records your organization wants deleted from My AI Employee, so contact us when stored data must also be removed. Deleting data from My AI Employee does not delete copies Meta/WhatsApp may retain under the terms applicable to the customer-owned WABA; use the relevant Meta Business controls or contact Meta for those copies.

What Happens Next

After verifying the request, we will delete or de-identify data that Performance Labs SL controls and is not required for an active organization workflow. Organization owners can also delete eligible uploads, documents, clients, and organization data using the controls available in the service.

Some information may be retained where necessary for legal, tax, accounting, security, fraud-prevention, dispute, or backup-integrity obligations. Deleted customer data may remain in encrypted, access-restricted disaster-recovery copies until the verified backup-retention period expires. If a backup is restored, applicable deletion records are reapplied before ordinary use. We will explain any applicable limitation when responding to the request; the active 35-day Compliance lock is an immutability floor and is not presented as a verified maximum until post-lock lifecycle cleanup and the complete restore/re-deletion procedure have been tested.

For more information, see our Privacy Policy.