data deletion.

Product: Noem (noem.llc)
Operator: Sitekik Marketers (sole proprietorship), Udyam/MSME-registered, A48c, A Block, Sector 27, Noida 201301, Uttar Pradesh, India
Contact: shik@sitekik.co.in | +91 99119 19480
Effective date: 27 May 2026

1. Purpose

This Data Deletion Policy explains how you can request the deletion of your personal data and your Meta-derived data from Noem, how we process such requests, what gets deleted, what cannot be deleted, and the timelines we commit to.

This Policy is issued in accordance with the Digital Personal Data Protection Act, 2023 ("DPDPA"), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, Meta's Platform Terms and Developer Policies (including the requirement to provide a data-deletion mechanism), the EU GDPR where applicable, and the CCPA where applicable.

This Policy is incorporated by reference into our Privacy Policy and Terms and Conditions.

2. Your right to deletion

You have the right to request deletion of: your Noem account and all data linked to it; specifically the data Noem has received from Meta on your authorisation (the "Meta data deletion right"); or specific categories of data (e.g., chat transcripts, brief delivery logs) without deleting your entire account. This right is subject to limited exceptions described in Section 7.

3. How to request deletion

We provide multiple channels to satisfy the DPDPA, GDPR, and Meta's requirement.

3.1 Self-serve from inside Noem

If you are signed in:

1. Open the Noem dashboard at https://www.noem.llc.
2. Open the hamburger menu and navigate to Account → Settings → Delete my data.
3. Choose between (a) deleting your entire account or (b) deleting specific data categories.
4. Confirm the action. We will send a confirmation OTP to your registered phone number.
5. Enter the OTP. Deletion is queued and you will receive confirmation by WhatsApp and email.

3.2 By email

Send an email to shik@sitekik.co.in from any address, with the subject line "Data deletion request". Include:

• Your registered phone number,
• The Meta user ID and/or ad account ID(s) linked to your Noem account (if known),
• Whether you want full account deletion or partial deletion (specify categories),
• A statement that you are the account holder, or, if acting on behalf, the basis of that authority.

We will respond within 48 hours and verify your identity before processing.

3.3 By post

Send a signed written request to: Grievance Officer, Sitekik Marketers, A48c, A Block, Sector 27, Noida 201301, Uttar Pradesh, India. Include the same information as in 3.2 and a verifiable means of contacting you.

3.4 Via the Meta data deletion callback (for Meta App Review)

If you remove the Noem app from your Meta account, Meta sends a signed "data deletion request" callback to:

Endpoint: https://www.noem.llc/api/meta/data-deletion

On receipt of a valid, signed callback from Meta, Noem:

1. Verifies the signed request using Meta's app secret and the documented signed-request format.
2. Identifies the affected Noem account via the Meta user ID returned by Meta.
3. Queues deletion of all data linked to that Meta user ID, including any Noem account derived from it.
4. Returns to Meta a JSON response of the form { "url": "<status URL>", "confirmation_code": "<code>" }.
5. Makes the status URL accessible so you can check the progress.

The status URL takes the form https://www.noem.llc/data-deletion-status?code=<confirmation_code> and remains accessible for at least 30 days.

3.5 Via Meta's app settings

You can also revoke Noem's access to your Meta account directly from Meta:

1. Visit Facebook → Settings & Privacy → Settings → Business Integrations (or Apps and Websites on personal Meta accounts).
2. Find Noem in the list of connected apps.
3. Click Remove or View and Edit.
4. Confirm the removal.

This action revokes Noem's access token. Meta then notifies Noem via the signed callback in 3.4, which triggers data deletion.

4. Identity verification

To prevent unauthorised deletion, we verify the identity of the requester before processing:

• Requests from inside Noem: OTP sent to the registered phone number.
• Requests by email: we reply asking you to confirm from the phone number registered on the account, via WhatsApp confirmation code.
• Requests by post: we may follow up by phone or WhatsApp.
• Requests via Meta callback: Meta's signature on the request is itself the verification.

We may decline requests we cannot reasonably verify, in writing.

5. What gets deleted

A full deletion request removes: account identifiers (phone, name, Meta user ID, email); Meta OAuth access tokens, refresh tokens, and scope grants; selected ad account IDs; all Meta advertising data ingested into Noem; all AI Output generated for your account; Shasha chat transcripts; WhatsApp brief content and delivery logs; support tickets and email correspondence (except as retained for legitimate dispute / fraud investigation); cookies and local storage tied to your session (where technically feasible); analytics records tied to your account identifier.

Deletion is performed across our production Postgres database, application-level caches, background-job logs, object storage for any attachments or exports, outbox tables for WhatsApp delivery, and read-replicas (typically within 24 hours of the primary deletion).

Deleted records are removed from active systems within 30 days of identity verification. Encrypted backups containing the deleted data are rotated out within 90 days, after which no copy of the deleted data remains in our systems.

6. Partial deletion

You can request deletion of specific categories without deleting your entire account. We support partial deletion of: Shasha chat transcripts only; WhatsApp delivery logs only; historical AI Output older than a chosen date; a specific Meta ad account you no longer wish Noem to analyse. A partial deletion request does not terminate your Plan and does not entitle you to a refund.

7. What we cannot delete

Category	Reason for retention	Retention period
Payment transaction records (Cashfree order ID, amount, status, timestamps, last 4 of payment instrument where shown by Cashfree, GST/tax records)	Statutory tax and financial record-keeping under the Income Tax Act, 1961, the CGST Act, 2017, and other applicable laws	8 years from the financial year of the transaction
Invoice records	Same as above	8 years
Records subject to a legal hold (court order, regulatory request, ongoing investigation)	Compliance with the order/request	Duration of the legal hold
Anonymised, aggregated metrics that cannot be re-identified to you	Service improvement and benchmarking	Indefinite
Security and abuse-prevention records relating to a previously-detected violation	To prevent re-creation of an abusive account	Up to 3 years

We retain only the minimum data required for these purposes and will not use it for any other purpose.

8. What deletion looks like at our service providers

• Meta: We do not store your data at Meta. When you remove Noem from your Meta account or your Meta token is revoked, Noem's access ends; Meta retains your data on its own platform under Meta's policies.
• Cashfree: We instruct Cashfree to remove your contact details associated with future communications. Transaction records will be retained by Cashfree under Indian financial regulation.
• OpenAI / Anthropic (LLM providers): Under our DPAs, prompts and completions are not retained for model training. Operational logs are deleted per the provider's policy (typically 30 days).
• MSG91 / Gupshup (WhatsApp delivery): We instruct the provider to delete delivery logs tied to your phone number, subject to statutory obligations.
• Replit (hosting): Application data is deleted as part of our primary deletion process. Backups rotated out within 90 days.

9. Effect of deletion

Deletion is irreversible. Once deletion is complete: you lose access to your Noem account and the dashboard; all AI Output and historical diagnoses are gone and cannot be recovered; any unused portion of a prepaid Plan is forfeit (except where a refund right applies under Section 9 of our Terms); we can no longer respond to support queries that depend on the deleted data; and if you wish to use Noem again, you must create a fresh account.

If you want a copy of your data before deletion, request a data export via shik@sitekik.co.in. We will provide it in a structured, machine-readable format (typically JSON or CSV) within 15 days of verification.

10. Timeline summary

Stage	Timeline
We acknowledge your request	Within 48 hours
We verify your identity	Up to 7 days
We delete data from active systems	Within 30 days of verification
We rotate backups containing the deleted data	Within 90 days
Status URL availability (for Meta-initiated deletion)	At least 30 days after request

Where applicable law mandates a shorter timeline, we comply with that shorter timeline.

11. Costs

Deletion is free. We do not charge for processing a data deletion request. If a request is manifestly unfounded, excessive, or repetitive, we reserve the right to charge a reasonable administrative fee or refuse to act, in accordance with applicable law.

12. Grievance redressal

If you are dissatisfied:

1. Escalate to our Grievance Officer: Shikhar Bhardwaj, Sitekik Marketers, A48c, A Block, Sector 27, Noida 201301, Uttar Pradesh, India. Email: shik@sitekik.co.in · Phone: +91 99119 19480. We respond within 30 days.
2. Approach the Data Protection Board of India under the DPDPA.
3. Approach your local supervisory authority if you are in the EU/UK (GDPR) or California (CCPA).

13. Special note for Meta App Reviewers

• Data Deletion Instructions URL: https://www.noem.llc/data-deletion
• Data Deletion Request callback endpoint: https://www.noem.llc/api/meta/data-deletion
• Status URL pattern: https://www.noem.llc/data-deletion-status?code=<confirmation_code>
• The endpoint verifies Meta's signed requests using the app secret and returns JSON with url and confirmation_code fields as required by Meta's Login for Business documentation.
• The status URL remains accessible for at least 30 days and reports received, in_progress, completed, or failed.

14. Changes to this Policy

We may update this Policy to reflect changes in our practices, infrastructure, or the law. For material changes, we will notify active users via WhatsApp, email, or in-product notice at least 7 days before the change takes effect.

15. Contact

Email: shik@sitekik.co.in · Phone: +91 99119 19480
Address: Sitekik Marketers, A48c, A Block, Sector 27, Noida 201301, Uttar Pradesh, India

Proudly built in Noida, India.