Data Deletion Instructions

Last updated: 20 September 2026

This page says how to have data Flowzi (ABN 30 688 278 079) holds about you deleted — including anything captured from a practice’s Facebook, Instagram, WhatsApp Business or TikTok account through Pulse. Every route below ends with a person, not a form that goes nowhere. If you are unsure which one applies to you, email founders@flowzi.com.au and say what happened; we will work it out.

Start here: which of these are you?

• You messaged or commented on a practice’s account — on Messenger, Instagram, WhatsApp or TikTok — and want that message removed. Section 1.
• You run a practice that connected its accounts to Pulse and want the connection removed and the captured data deleted. Section 2.
• You joined the waitlist on this website and want your email address deleted. Section 3.

1. You messaged a practice

When you send a direct message to a practice’s business account, or comment on its post, Pulse may deliver a copy of that message to the practice’s enquiry queue — the text, any attachment, the platform’s own identifier for you, and whatever display name or handle the platform supplies. The practice that connected the account is responsible for the record that results; we hold it on that practice’s instructions.

There is nothing for you to revoke on the platform’s side — you never granted anything to us, the practice did. So there are two ways to have it removed, and either works:

Ask the practice directly (fastest)

The practice can erase a staged enquiry itself, immediately, from inside Pulse. Contact the business you messaged and ask them to delete your enquiry. They do not need to come to us.

Or ask us, and we will act on it

Email founders@flowzi.com.au with the subject line “Data deletion request” and tell us:

• which platform you used — Messenger, Instagram, WhatsApp or TikTok;
• the name of the business or the account you messaged;
• the handle, display name or phone number you messaged from;
• roughly when you sent it.

That is the least we need to find the right record and no more — please don’t send us identity documents. We acknowledge every request and complete it within 30 days, usually far sooner, and we will tell you when it is done. Where the practice has to act as well, we pass the request to them and say so.

If you never followed up, it expires anyway

An enquiry that never becomes a client matter is deleted automatically. Each practice sets a retention period for staged material; the default is 90 days and the software will not accept a value above 365. A daily job removes staged identities, staged comments and the raw delivery records once they pass it, whether or not anyone looked at them.

What we may not be able to delete

If you became a client of the practice, your messages are part of your case file, and a registered migration practice is required to retain client records — generally for seven years. That record belongs to the practice: the request goes to them, and they decide what the law lets them remove. We will tell you if that is the situation rather than quietly do nothing. Separately, the platforms hold their own copy of anything you sent, under their own policies — deleting a message from Pulse does not delete it from Meta or TikTok.

2. You are the practice that connected the accounts

Two steps, and they do different things. Disconnecting inside Pulse stops the capture and deletes the stored credentials; removing the integration at the platform revokes the grant at the source. Do both.

Step 1 — disconnect in Pulse

In Pulse, go to Settings → Channels, find the connected account and choose Disconnect. The stored access token is deleted and the account is marked inactive, so Pulse no longer holds a credential for it. That is half the job: the grant still exists at the platform until you remove it there, which is why step 2 is not optional.

Step 2 — remove the integration at the platform

• Facebook Page and Messenger — on Facebook, go to Settings & privacy → Settings → Business integrations, select the Flowzi integration and choose Remove.
• Instagram professional account — the grant belongs to the Facebook Page the account is linked to, so removing the business integration above covers it. You can also turn off Settings → Messages and story replies → Connected tools → Allow access to messages in the Instagram app, which stops message delivery to every connected tool.
• WhatsApp Business — in Meta Business Suite open WhatsApp Manager → your WhatsApp Business Account → Settings and remove the Flowzi app from the account’s connected apps.
• TikTok Business account — in the TikTok app, go to Profile → Settings and privacy → Security & permissions → Manage app permissions and remove Flowzi. Menu names change from time to time; if you can’t find it, email us and we will revoke it from our side.

Step 3 — ask us to delete what was captured

Disconnecting stops new capture; it does not erase what already arrived. To have that deleted, email founders@flowzi.com.au from an address on the practice’s domain, with the subject line “Data deletion request”, and name the accounts and the scope — one channel’s staged enquiries, or everything captured for the practice. We confirm the request with a practice administrator before acting on it, then complete it within 30 days and tell you what was removed.

Deleting the practice’s data held in Pulse more broadly — client files, documents, the case record — runs through the archive, redact and purge controls in the product and through your agreement with us, because a registered practice has retention obligations that a delete button must not quietly breach. Those controls are described in the Privacy Policy and in your agreement.

3. You joined the waitlist on this website

Reply to any email we have sent you, or write to founders@flowzi.com.au asking us to delete your waitlist record, and we will remove it and confirm. There is no account to close and nothing else of yours on this site: we hold your email address, which form you used, when you signed up, the referring page and any campaign tags — and a one-way hash of your IP address that expires by itself after an hour.