Data and Account Deletion

1. Who can delete which data?

Zencron is a multi-layered platform: your account may be managed by an agency, and you may in turn hold records belonging to your own customers. Deletion rights therefore depend on your role.

• Business owner (account owner): Can start the deletion of the entire account from the panel. This covers all users and all data belonging to the business.
• Business administrator: Can remove team users from the account and archive customer records, but cannot delete the entire account.
• Team member / staff: Requests deletion of their own user account from the business owner or an administrator. Once the user account is removed, their access to the platform ends.
• If you are a customer of a business using Zencron: To have your appointment, contact or loyalty record deleted, you must contact the business you received service from. For that data the business is the data controller and Zencron acts only as the data processor.

2. Deleting your account from the panel

The panel is the fastest and most direct way to delete your account. You start the request yourself; there is no intermediate approval to wait for.

1. 1Sign in to your account and go to Account Settings from the menu at the top right.
2. 2Open the Security tab.
3. 3In the “Delete account” section at the bottom of the page, click “Delete my account”.
4. 4In the dialog, optionally select your reason for leaving and type the requested confirmation text to verify the request.
5. 5Your request is recorded and your account is scheduled for permanent deletion 30 days later.

If you change your mind, you can undo the request via “Cancel deletion request” on the same screen before the 30 days expire. Once the waiting period ends, deletion cannot be reversed. If the deletion was started by your agency, you need to contact your agency to cancel it.

3. Requesting deletion by email

If you cannot access the panel (for example, your account is closed or you cannot sign in), you can submit your deletion request by email. So that we can verify your request securely, please send it from the email address registered to your account.

• Subject line: “Data deletion request”
• The business name of the account to be deleted
• The email address registered to the account
• The scope of the request: only your own user account, or the entire business

Your request is concluded within 30 days at the latest pursuant to Article 13 of Turkish Data Protection Law No. 6698 (KVKK), and the outcome is communicated to you at the same email address.

4. Before deleting: download your data

Deletion cannot be undone. In case you need your records later, we recommend exporting your data before creating the deletion request.

The “Download my data” button under Account Settings → Security downloads your business data as a single package in JSON and CSV format. This corresponds to your right to data portability under KVKK.

5. Data that is deleted

When the waiting period expires, the following data is permanently deleted or anonymised so that it can no longer be traced back to you:

• Your user accounts, sign-in credentials and open sessions
• Your business profile, locations and module settings
• Your customer (contact) records, appointments, staff and service definitions
• Your loyalty, finance and payment transaction records
• Your subscription, credit balance and usage records
• Your social media and messaging channel connections, together with the stored access tokens belonging to those connections
• Your channel message history — deleted, or irreversibly disassociated from your account and rendered anonymous
• Your audit records and sign-in history — any remaining traces are rendered unlinkable to your identity

6. Data that is retained, and retention periods

Some records are retained to a limited extent after your account is deleted, due to obligations arising from legislation. These records are kept solely for retention purposes and are not used in service delivery or marketing.

• The record of the deletion request (date of request and date of completion): kept due to the accountability obligation under KVKK; it contains no personal data.
• Invoices, payment and accounting documents: retained for the period prescribed by the Turkish Tax Procedure Law and the Turkish Commercial Code.
• Anonymised statistical data that cannot be traced back to an individual in any way.
• If there is an ongoing legal dispute, audit or request from a competent authority, the necessary records may be retained until that process concludes.

Deleted data is also removed from backup systems once the backup cycle completes. During that period backups are accessible for disaster recovery purposes only and are not used in service delivery.

7. Data connected to Meta (Facebook, Instagram, WhatsApp)

In Zencron’s social content and messaging modules you can connect your Facebook Page, Instagram account or WhatsApp Business number. When such a connection is established, we store your account identity, page/account identifiers and encrypted access tokens, along with the content and message records required for the module to operate.

You can remove this data in two ways:

• To remove only the connection: Use “Disconnect” on the connections screen of the relevant module in the panel. Once the connection is removed, the stored access tokens are deleted from the database and Zencron can no longer act on Meta on behalf of your account.
• To remove all data: Use one of the account deletion paths described in sections 2 and 3 above. When the account is deleted, your Meta connections, access tokens and associated content records are deleted as well.
• To also revoke the app’s access on Meta’s side: On Facebook, go to Settings & privacy → Settings → Business integrations and remove Zencron. On Instagram, do the same under Settings → Website permissions.

Revoking access on Meta’s side alone does not automatically delete records previously stored in Zencron. If you also want your data deleted, create a deletion request from the panel or email us.

8. Timeframes

• Deletion request started from the panel: recorded immediately, permanent deletion applied at the end of the 30-day waiting period.
• Cancellation within the waiting period: takes effect immediately from the panel.
• Request submitted by email: concluded within 30 days at the latest.
• Disconnecting a Meta connection and deleting its access tokens: immediate.

9. Contact

You can reach us at the address below regarding your deletion request, its status, or your other rights concerning your personal data. For details about the data controller and the scope of your rights, please review our Data Protection Notice (KVKK) and Privacy Policy pages.