This page explains how to request deletion of your personal data held by Auro AI, operated by Evosolve Kft. (registered seat: 6722 Szeged, Kálvária sugárút 19., Hungary; company reg. no. 06-09-024422). Auro AI integrates with Meta platforms (WhatsApp Business, Facebook, Instagram) and other services on behalf of business clients; data we hold about you may originate from those platforms or from a business you interacted with.
How to request deletion
Send an email to [email protected] with the subject line "Data deletion request" and include:
- your full name and the email address or phone number you used with our service or with one of our business clients;
- if applicable, the Auro AI client (business) you interacted with;
- if applicable, your Facebook user ID, WhatsApp number, or Instagram handle.
You do not need to give a reason. Under Article 17 GDPR ("right to erasure"), we will action your request within 30 calendar days. We may first take reasonable steps to verify your identity so that we do not disclose or delete data on the wrong person’s instruction.
What gets deleted
Within 30 days of a verified request we permanently remove:
- your contact record (name, email, phone, message history) from our database;
- any conversation logs (chat widget messages, WhatsApp messages, email bodies) where you are the sender or recipient;
- any AI-generated drafts, classifications, or notes derived from your messages;
- server access logs containing your IP address (these auto-expire on a rolling basis regardless).
Deletion from active systems completes within the 30-day window; residual copies in encrypted backups are overwritten on the normal backup-rotation cycle (within 90 days).
What we cannot delete
We cannot delete records that we are legally required to retain — in particular invoices and accounting records for paid services (retained 8 years under the Hungarian Accounting Act, Act C of 2000, §169) and tax records. These are kept in a separate restricted-access archive and are not used for any other purpose. Where an erasure request conflicts with such an obligation, we will tell you which records must remain and on what legal basis.
Erasure audit trail
When we complete a deletion, we keep a minimal, non-identifying record (a one-way hashed email, a timestamp, and a row count). This is not personal data — it cannot be reversed into your details — and we keep it as proof that the erasure happened, which the GDPR’s accountability principle (Art. 5(2)) requires of us.
Confirmation
You will receive a written confirmation when deletion is complete, including the date and a summary of what was removed. If we cannot honour part of your request because of the legal-retention exceptions above, we will tell you which records remain and on what legal basis.
Right to lodge a complaint
If you are not satisfied with our response, you have the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): naih.hu.