Data deletion

To request the deletion of your account and data, send an email to contact@total-innovation.net following these guidelines:

• Email subject: “Data deletion”
• Send the request from the email address associated with your Miracle account (for identity verification).
• Specify whether you want full account deletion or only the deletion of specific data.

• Acknowledgement of your request: within 72 business hours.
• Account deactivation (end of access): within a maximum of 30 days from identity verification, following an internal two-channel confirmation procedure.
• Permanent data erasure: at the end of a 90-day retention period following account deactivation. This period allows us to reverse a deletion in case of error or a fraudulent request.
• Email confirmation as soon as the account is deactivated, and again, on request, once permanent erasure has been completed.

Deletion happens in two stages: the account is deactivated immediately (no further access is possible), then the following data is permanently erased at the end of the 90-day retention period:

• Account data: name, email, phone, password (hashed), organization.
• Projects and their configuration (API keys, associated templates, test numbers, webhooks).
• OTP, message, WhatsApp campaign and SMS logs linked to your projects.
• Media, proposed templates, SMS gateway devices and KYC documents linked to the account.
• Quote requests and notifications associated with the account.

Some data is retained beyond account deletion, only where required by law:

• Billing data and PDF invoices: retained in accordance with applicable accounting and tax obligations, including after account deletion.
• Payment and referral records: retained detached from the account for accounting traceability.
• Security logs (login attempts, audit logs): retained for a period proportionate to security needs, then deleted or anonymized.
• Referral program ledger (points earned, withdrawals): retained for accounting traceability; your account is detached from these records, but a snapshot of the name and email at the time of the operation remains attached to them.

If you are an end user who received a WhatsApp verification code sent by one of our clients, please note that:

• We never store your number in clear text in our logs: it is masked and hashed.
• The code you received is automatically deleted upon expiry (5 minutes) or after verification.
• The company that sent you the message is the data controller for your number: address your requests to them directly.
• You can also write to contact@total-innovation.net with any question.