How to delete your data

Which route applies to you

Two different people read this page, and the route depends on whose information is being deleted.

• You are a merchant using Hiwar. Dafatir holds that information on your instruction, so you can ask us directly and we act on it.
• You are a customer of a shop that uses Hiwar. The shop controls its own records, so ask the shop. You can also write to us, and we will forward your request to that shop and act on their instruction.

Step 1 — stop new data arriving

In Hiwar, open Settings and disconnect WhatsApp. From that moment Meta stops delivering messages to us on your number, and nothing further is recorded. You can do this yourself, at any time, without asking us.

Disconnecting stops what arrives next. It does not delete what has already arrived — that is step 2.

Step 2 — ask us to delete what we already hold

Deletion of stored data is handled by email, so that we can confirm a request came from the account it concerns before we act on it.

• Write to admin@dafatir.app from the email address on the account, or ask your Dafatir representative.
• Tell us what to delete: the whole account, or one part of it — imported WhatsApp history, call recordings, or a named contact and their conversation.
• If you write from another address, we will ask you to confirm who you are first. That is deliberate: the alternative is deleting one person's records on another person's word.

You can also ask for a copy of your data before it is deleted, and we will send it in a portable form.

What deletion removes

On a full account deletion, all of the following go, across every Dafatir product sharing the account.

• Conversations and their messages, inbound and outbound, on every channel.
• Photos, documents, voice notes and shared locations — including our own stored copies, which exist because the links Meta provides expire within minutes.
• Contacts, and the customer records linked to them.
• WhatsApp history imported when you connected. It is marked as imported, so it can also be deleted on its own without touching anything since.
• Call recordings, and the metadata of calls placed through WhatsApp.
• Your account, your staff's accounts, and the credentials used to sign in.

What we keep, and why

Two narrow categories survive a deletion request — one because the law requires it, one because removing it would defeat the purpose of holding it.

• Sales, invoices and ledger entries, for the statutory accounting and VAT period, which in the West Bank can run to ten years. These are separated from everything above and deleted when that period ends.
• Security and audit records, for a limited period, so that a past incident can still be investigated.

Neither category is used for anything else, and neither contains the content of your messages.

How long it takes

We complete a deletion request within 30 days of confirming it is genuine, and write to you when it is done. Most finish sooner. If any part of a request cannot be deleted, we tell you which part and why, rather than deleting the rest silently.

What deletion does not reach

Deletion applies to the copy Dafatir holds. It does not travel to the other places a conversation exists.

• Deleting a chat in the WhatsApp Business app does not delete the merchant's copy in Dafatir.
• Deleting it in Dafatir does not remove it from WhatsApp on anyone's phone, and does not affect what Meta holds under its own terms.