A business that uses bxq can delete itself, and everything it stores in bxq, from inside the app. Anyone else can ask us to delete the personal data bxq holds about them — including anything that reached us through Meta Platforms (WhatsApp, Messenger, Instagram) — by email; those requests are handled by a person.
1. Whose data we hold
- People who use the bxq panel — the team of a business that works in bxq: name, email, phone and sign-in credentials.
- People who write to a business that uses bxq over WhatsApp, Messenger or Instagram: the name and number or username Meta shares with the business, the messages, and the notes and follow-ups its team adds. That data belongs to the business's records; bxq stores and processes it on the business's behalf.
- People who write to bxq itself, on our own WhatsApp line or by email.
2. If you run a business on bxq: delete it from the app
The owner or any admin of the business can delete the whole business and all of its data:
- Sign in and go to Settings → Company. At the bottom, under Danger zone, choose Delete this business.
- Type the business's identifier to confirm — the name it has in its bxq web address (for example, the "coldfire" in coldfire.bxq.app).
Download anything you need (invoices, reports, records) before you delete — from the moment you confirm, nobody on the team can sign in. During the 30 days you can still ask us for a copy at oscar@bxq.app.
As soon as you confirm:
- Everyone on the team is signed out and nobody can sign in. The business's AI assistants stop, and so do its outgoing messages.
- Its bxq subscription stops renewing.
- Every admin of the business gets an email with a link to cancel the deletion; the rest of the team gets a notice. The link works for 30 days; if anyone uses it, nothing is erased and the team can sign in again.
After 30 days, everything the business has in bxq is erased permanently and cannot be recovered:
- Its records: contacts and prospects, notes, follow-ups, meetings, sales and invoices.
- Its conversations and messages, including those with its AI assistants.
- The files it uploaded.
- Its WhatsApp, Messenger and Instagram connections, with the Meta access tokens we held for them, and its Google Calendar connections. Before erasing them we ask Meta to stop sending us the business's messages and revoke bxq's access to its Google Calendar.
- The accounts of everyone on its team.
What bxq keeps afterwards:
- Its own billing records for that account — the bxq subscription and its invoices, AI credit purchases and WhatsApp message charges — for five years, as Mexican tax law requires, without names, email addresses or phone numbers.
- An internal record of the deletion itself: who requested it, when, and how many records were erased.
Payments a business collects from its own customers through its own Stripe account live in that Stripe account. When the business is erased, bxq disconnects from that Stripe account, but it doesn't close it or touch those payments.
3. How to request deletion by email
If you wrote to a business that uses bxq (over WhatsApp, Messenger or Instagram), if you only want your own data or part of it deleted, or if you can't sign in to do it yourself, send an email to oscar@bxq.app with the subject "Data Deletion Request", and include:
- The email address, phone number or Instagram/Facebook account the data is tied to.
- If you wrote to a business that uses bxq, which business it was.
- Whether you want everything deleted or only part of it (for example, only the conversations).
We may ask you to confirm that the number or account is yours — for instance, by sending a message from it. We reply within 72 hours, complete the deletion within 30 days, and write back to you when it is done.
When the data sits in the records of a business that uses bxq, we let that business know and carry out the deletion in its records too. You can also ask the business directly. If that business deletes itself from bxq (section 2), your data in its records is erased with everything else.
4. To stop the messages
In any WhatsApp conversation with a business that uses bxq, reply with just BAJA or STOP. From then on that business stops writing to you from bxq. This stops the messages; it does not delete what is already stored — for that, send the email in section 3.
5. If your business connected a Meta account
To disconnect a WhatsApp number, Facebook Page or Instagram account from bxq, write to us and we remove the channel and the access token we hold for it. You can also remove the access you granted to bxq from your Meta business portfolio settings; that stops new messages immediately, but the conversation history already stored in bxq stays until you ask us to delete it, or until you delete the business (section 2), which removes every channel and its tokens along with everything else.
6. What gets deleted when you ask by email
- Your bxq user account, if you have one: name, email, phone, profile settings and sign-in credentials.
- Your contact or prospect record, conversations, messages, attachments, notes and follow-ups.
- The conversations our AI assistants had with you, and the records of them.
- For a business that asks us to remove it: everything listed in section 2, the same as deleting it from the app.
7. What we cannot delete
- Records the law requires us to keep: bxq's own invoices and payments, which Mexican tax law requires to be kept for five years (see section 2 for what that means when a business deletes itself).
- Messages already delivered to your phone stay in your own WhatsApp, Messenger or Instagram. Meta's copies are governed by Meta's own policies.
8. Contact for data deletion
Data controller: Oscar Omar Martínez Lujano (operating as bxq).
Monterrey, Nuevo León, México.
Email: oscar@bxq.app