You can request deletion of your Vesspr account and all associated personal data at any time. This page explains what happens when you do, what we delete, what we are legally required to retain, and how long the process takes.
1. Your right to deletion
Under the General Data Protection Regulation (GDPR), the UK GDPR, and India's Digital Personal Data Protection Act, 2023, you have the right to request that Karooli Garage Private Limited ("Karooli.ai", "we") erase the personal data we hold about you. This right is sometimes called the "right to be forgotten".
You may exercise this right at any time, for any reason, and without giving notice. We will not penalise you for doing so.
2. How to request deletion
Choose either of the methods below — both result in the same deletion. We respond to all valid requests within 30 days of receipt, in most cases within 72 hours.
Option A — Email
Send an email from the address you used to create your Vesspr account to privacy@karooli.ai with the subject line "Delete my data". Include the phone number you used for Telegram or WhatsApp (if any). We will verify the request is from you, confirm receipt within 72 hours, and complete deletion within 30 days.
Option B — In-app
Sign in to your Vesspr dashboard, open the Profile page, and choose Delete my account. You will be asked to confirm. Once confirmed, the deletion runs immediately and is irreversible.
NOTE: If you have lost access to your account (forgotten email, lost phone), still email privacy@karooli.ai — we will verify identity through alternative means.
3. What we delete
When your deletion request completes, the following are erased from our primary systems within 30 days:
- Your account profile — name, email, phone number, time zone, language preferences.
- Your messaging identifiers — Telegram chat ID, WhatsApp phone ID, iMessage phone ID.
- Your conversation history — every message you sent to Vesspr and every reply we sent to you.
- Your memories — facts, events, preferences, and emotional patterns Vesspr extracted from your conversations.
- Your archetype and personality profile — onboarding answers, character settings, and any custom preferences.
- Your subscription and billing records linked to your account, except where retention is legally required (see §4).
- Any voice notes or images we generated for you.
- Analytics events tied to your user ID.
Backups containing your data are overwritten in the normal rotation cycle, which is at most 35 days. After this period, no copy of your personal data remains in any Karooli.ai-controlled system.
4. What we are required to retain
A narrow set of records is retained even after deletion, only where retention is mandated by law:
- Tax and financial records of paid transactions — retained for the period required by Indian tax law (currently 8 years from the relevant assessment year).
- Safety-related records — if a crisis-safety event was logged during your use of Vesspr, anonymised aggregate metadata may be retained for safety auditing. No identifying information is kept.
- Records of the deletion request itself — we keep a minimal log (timestamp, requester identifier, action taken) to demonstrate compliance with data-protection law. This log contains no message content.
Retained records are pseudonymised wherever practical and are accessible only to authorised staff for the specific legal purpose stated.
5. Deletion from third-party processors
Vesspr uses third-party services to deliver messages and process payments. When you request deletion, we instruct each processor to delete the data they hold on our behalf within their published timelines:
- Telegram — message metadata only; we do not control Telegram's own retention of messages you sent through their app.
- Meta / WhatsApp Business — message metadata and your WhatsApp Business profile linkage are deleted via Meta's standard data-deletion API.
- Dodo Payments, Creem, and (legacy) Stripe — billing records are retained per the legal period above; non-statutory data is deleted.
- Anthropic, OpenAI, Groq, Google, OpenRouter — Vesspr does not store conversation content with LLM providers; their no-training policy applies and any temporary cache is purged on their schedule.
- Resend / SendBlue / ElevenLabs / Cartesia / Replicate / Pollinations — transactional providers; we erase any account-linked records we hold and request the same upstream.
- AWS — our infrastructure provider. All deletion completes within their backup-rotation window described in §3.
6. What cannot be undone
IMPORTANT: Account deletion is permanent. Once you confirm, your memories, conversation history, and personalised state cannot be recovered — not even by us. If you change your mind later, you can create a new Vesspr account, but you will start fresh.
7. How long it takes
8. Contact and complaints
Privacy contact: privacy@karooli.ai. General support: support@karooli.ai.
If you believe we have not handled your deletion request appropriately, you have the right to complain to your local data-protection authority — for example, the Information Commissioner's Office (ICO) in the United Kingdom, your national supervisory authority in the EEA, or the Data Protection Board of India once it is constituted under the DPDP Act.