Data Deletion Instructions

1. Purpose of this document

This document explains how to request the deletion of information processed through SIGNATELL, who may request it, what happens in each case, and the timeframes in which we respond.

SIGNATELL is a unified communications platform operated by PEOPLE E COMMERCE LLC, a limited liability company organized in the State of Florida, United States, with a business address at 3815 Arcade Trail, Suite 308, Lutz, Florida 33548.

This document is supplemented by the Privacy Policy and the Terms of Service, available on the SIGNATELL public website.

2. Who is who: the three roles

Everything explained in this document depends on this distinction, so it is worth setting it out first. Three parties with different roles are always involved in SIGNATELL.

2.1 SIGNATELL — the platform provider

We build and operate the software. We do not own the conversations that pass through it, we do not sell information, and we do not decide what data a business requests from its clients or for what purpose.

Our role changes depending on whose data it is: we are the controller of the data of our own customers — the businesses and the people who use the platform on their behalf — and we are the processor of the data those businesses receive from their clients, which means that we act on that data solely on their instructions.

2.2 The Customer — the business that uses SIGNATELL

This is the company or professional that contracts SIGNATELL, connects its own communication channels — its WhatsApp Business number, its Instagram account, its telephone line, its email — and serves its own clients from the platform.

The Customer owns that information and is responsible for it. The Customer decides what is requested, from whom, for what purpose, and how long it is retained. Within the platform, its information is isolated from that of any other business.

We use the term "Users" for the people the Customer authorizes to access the platform on its behalf: its employees or collaborators. They are part of the Customer, not third parties.

2.3 The end client — the person who communicates with the business

This is the person who writes on WhatsApp, calls by telephone, submits a form, or attaches a document to a business that uses SIGNATELL. They may not even know that SIGNATELL exists, because their relationship is with the business.

Their data belongs to that business. We host and process it on the business’s behalf, but we are not the ones who decide about it.

2.4 Why this distinction determines the rest of this document

From this follows the rule that governs all deletion requests:

• If the data belongs to the Customer or its Users, SIGNATELL is the controller and handles the request directly.
• If the data belongs to an end client, the controller is the business that person communicated with. SIGNATELL receives the request, identifies the business, forwards it, and provides the necessary technical assistance, but cannot unilaterally decide about information that does not belong to it.

This separation is not an administrative formality: it is also a technical characteristic of the platform, where each business’s information is isolated from that of all others.

3. Who may request deletion

3.1 A business that uses SIGNATELL

The business may request deletion of its account information or, upon termination of the relationship, of the information stored in its workspace. SIGNATELL executes the instruction once verified.

3.2 An authorized User of a business

A person who uses SIGNATELL as a User of a business may request deletion of their personal account data. If their access forms part of the business’s administration, we will coordinate the request with the corresponding administrator.

3.3 A person who communicated with a business

If you wrote to, called, or submitted a form to a business and you want that information deleted, your counterpart is that business. You may contact it directly or write to us: in that case we will forward your request to the responsible organization and let you know that we have done so.

We cannot delete on our own initiative information that belongs to a business, in the same way that a records provider cannot destroy a client’s documents because a third party asks it to.

3.4 An administrator who removes the application from Meta

If a business removes SIGNATELL’s authorization from its Meta settings, that action immediately revokes our access to the channel: we can no longer receive or send messages through it.

Removing the authorization does not by itself delete the conversation history already stored, because that information belongs to the business and it may need it. If you also wish to have it deleted, you must request this expressly through the channels indicated in Section 4.

4. How to submit a request

There is a single point of entry for all requests:

• Email: privacy@signatell.com
• The contact form on the public website, indicating "Privacy" as the reason.
• Postal mail: PEOPLE E COMMERCE LLC, 3815 Arcade Trail, Suite 308, Lutz, Florida 33548, United States.

So that we can process the request, please provide:

• Your name and the contact details you used (email address, telephone number, or the account from which you communicated).
• The name of the business you communicated with, if you know it.
• What information you want deleted: all of it, or only a specific part.

You do not need a SIGNATELL account to submit a request, and there is no charge for processing it.

5. Identity verification

Before deleting or forwarding anything, we reasonably verify the identity of the person making the request, to prevent someone from requesting the deletion of another person’s data.

• If you are a business or a User, the request must come from an email address already registered on the account, or be confirmed through it.
• If you are a person who communicated with a business, we have no prior relationship that allows us to verify your identity. This is a further reason to forward the request to the business, which can verify it.

No request is executed on the same day it is received. This interval is a deliberate security measure, not an administrative delay.

6. Timeframes

The applicable timeframes are as follows:

• Acknowledgment of the request: 5 business days.
• Request from a business or a User regarding account data: up to 30 calendar days.
• Deletion upon termination of the relationship with a business: 15 days for it to export its information, followed by deletion within the next 30 days, unless the contract provides otherwise.
• Forwarding to the business a request received from one of its clients: 5 business days.
• Technical assistance to the business in carrying out a deletion: 10 business days.

If a request requires more time due to its complexity, we will inform you before the deadline expires, stating the reason.

7. What is deleted and what is retained

When a deletion is carried out, the information identified in the request is removed from SIGNATELL’s active systems.

There is information we retain even where deletion is requested, and we consider it honest to state so:

• A minimal record of the request itself: who made it, when, and how it was resolved. This is the evidence that we complied and cannot be deleted without destroying that evidence.
• Information whose retention is required by applicable law, or that the business must retain under its own legal obligations.
• Financial and contractual records of the relationship with the business.
• Backup copies, until they are overwritten in their normal rotation cycle.

This retained information is not used for any purpose other than those stated.

8. How the procedure is carried out

Each deletion request follows a procedure managed and supervised by SIGNATELL’s privacy officer: an identified person reviews the request, verifies the identity of the person making it, determines the exact scope of what must be deleted, carries out the deletion, and confirms the outcome in writing.

We have deliberately chosen this supervised model rather than an automatic deletion mechanism. A deletion is irreversible and affects information that may belong to a business and to its clients, so we prefer each case to be reviewed before it is executed.

As the platform evolves we will introduce tools that streamline this procedure, and we will update this document to reflect them.

9. Controls available to businesses

A business that uses SIGNATELL also has direct controls that do not require submitting a request:

• Revoke the authorization of a connected channel at any time, from SIGNATELL or from the settings of the relevant provider.
• Remove access for Users who should no longer have it and adjust their permissions.
• Request an export of its information before requesting deletion.

We recommend exporting information before requesting deletion, because once carried out it cannot be reversed.

10. Contact

To submit a request or resolve any question about this procedure:

• Privacy and data deletion: privacy@signatell.com
• Legal inquiries: legal@signatell.com
• General inquiries: contact@signatell.com
• Postal address: PEOPLE E COMMERCE LLC, 3815 Arcade Trail, Suite 308, Lutz, Florida 33548, United States.

If you believe your request has not been handled correctly, you may write to us again quoting the original reference and we will review it.