How to delete your data

1. The fast option: self-service from the dashboard

If you have account access, it's the quickest path (immediate effect, no waiting for a reply from us):

1. Log in to app.neofir.com
2. Go to Settings → Account
3. Click "Delete account and data"
4. Confirm with your password

Your account and all associated data are deleted immediately. Google OAuth tokens are revoked. You receive written confirmation by email within 5 minutes at most.

2. The alternative: email request

If you no longer have account access or prefer this route, send an email to salut@neofir.com with the following:

• Subject: "GDPR Art. 17 data deletion request"
• The email you registered with
• The organization name
• If you know it: the approximate account creation date

We'll verify identity (to prevent malicious deletion) by sending a confirmation link to your registered email. After confirmation, we execute the deletion within 30 days at most, per GDPR Art. 12(3). You receive written confirmation by email when it's done.

3. Exactly what gets deleted

Category	Status
Account data (name, email, phone, password hash)	Deleted
Organization data (name, address, description, configuration)	Deleted
RAG content (documents, FAQ, uploaded pricing)	Deleted + vector index purged
Google Calendar OAuth tokens	Deleted + access revoked instantly at Google
Instagram/Facebook OAuth tokens (if connected)	Deleted + automatic Meta notification
Widget conversations associated with your organization	Deleted
Upcoming bookings	Deleted + Google Calendar no longer touched
Historical bookings (>1 year)	Deleted
API keys generated for the widget	Deleted + invalidated instantly
Active dashboard sessions	Invalidated instantly
Payment data in Stripe (on our side)	Detached from your account

4. What is NOT deleted immediately (legal exceptions)

GDPR Art. 17(3) permits retaining certain data for legal obligations. In our case:

• Issued invoices — kept 10 years. Tax obligation in EE (Tax and Customs Board) and RO (ANAF). Invoices are archived, accessible only to the accountant and tax authorities on request. Not publicly accessible, nor to employees.
• Anonymized technical logs — kept 90 days. For debugging and security (GDPR Art. 32). They contain no personally identifiable information — only partially masked IPs, timestamps, and error codes.
• Stripe payment data — retained by Stripe. Per Stripe's policy, transaction data is kept 7 years for anti-money-laundering. See stripe.com/privacy.

If you want early deletion for exceptional legitimate reasons (e.g. participation in a witness protection program), write to hello@neofir.com and we'll assess case by case.

5. Meta data deletion (Facebook / Instagram)

If you connected an Instagram account or Facebook Page to NeoFir for DM automation and want to revoke access:

5.1 The Meta route (recommended)

1. Go to Facebook Settings → Business Integrations
2. Or on Instagram: Settings → Apps and Websites → Active
3. Find "NeoFir" or "ZYNTHYR" in the list
4. Click "Remove" or "Delete"

Meta notifies us immediately via the "User Deauthorization" webhook. Within 24 hours at most:

• We delete the associated tokens
• We delete the DM conversations from the last 30 days associated with your Meta account
• We send automatic confirmation by email

5.2 The NeoFir route

Alternatively, from the dashboard: Settings → Channels → Instagram/Facebook → "Disconnect". The effect is similar, but we also go through the Meta API to invalidate the token at the source.

6. For the organization's clients (widget end users)

If you are a client of an organization that uses NeoFir (not its administrator), and you want your data deleted:

1. First option: contact the organization directly. They are the data controller under GDPR; NeoFir is the processor. The organization can delete your conversations and historical bookings from the dashboard.
2. Second option: if the organization doesn't respond or has ceased operations, write to salut@neofir.com. We'll help you find the right organization or, in exceptional cases, delete your data directly.

7. Timeline and confirmations

Event	Max time
Request receipt confirmation	1 business day
Identity verification (email request)	3 business days
Deletion execution	7 calendar days (target)
Final response with written confirmation	30 calendar days (GDPR limit)

Self-service from the dashboard: instant.

8. Frequently asked questions

Can I reactivate the account after deletion?

No. Deletion is permanent. You can create a new account with the same email, but it starts from scratch — history isn't recovered. Backups are purged within 30 days.

What happens to upcoming bookings already made by my clients?

At deletion time, upcoming bookings:

• Remain in your Google Calendar (the calendar stays intact — we don't modify it on deletion)
• Are no longer accessible through NeoFir (dashboard, conversations)
• Clients will no longer receive reminders from NeoFir (they'll only get native Google Calendar notifications)

Recommended: if you have important upcoming bookings, export the CSV list before deletion.

Can I delete only the widget conversations without closing the account?

Yes. From the dashboard: Conversations → Select → "Delete selected". Or to delete all conversations in bulk: Settings → Privacy → "Delete all conversations".

Can deleted data be recovered by authorities via court order?

After effective deletion (max 30 days + 30 days backup purge), your data no longer exists in our systems, so it can't be provided to any authority, regardless of the type of order. Before deletion is finalized, we may be legally required to provide data under a valid subpoena (in particular Estonian law or that of an EU state).

Contact

← Back to homepage