ArtHome CRM Data Deletion
1. Scope
These instructions explain how to request deletion of personal data associated with ArtHome CRM and the Instagram messaging integration operated through the Meta application ArtHome Inbox - Smiling. They apply to authorized CRM users, people who contact a connected professional Instagram account, people whose comments are processed where the comment function is enabled, Meta lead-form respondents and other individuals whose data is stored in ArtHome CRM.
2. How to request deletion
Email admin@smilingatmosphere.pt with the subject "ArtHome CRM Data Deletion Request". If your data was provided to an ArtHome business customer, identify the relevant branch or organization so that we can route the request to the correct controller. Do not send passwords, access tokens, app secrets or payment-card details.
You may also submit a request through any data-deletion channel made available by Meta for the application. We will handle requests received through available Meta platform channels and the contact method on this page.
3. What to include
Include enough information for us to locate the relevant record without sending unnecessary personal data:
- your name;
- the email address or telephone number likely used in the CRM or lead form;
- your Instagram username if the request relates to an Instagram conversation or comment;
- the relevant ArtHome branch, organization or connected Instagram account, if known;
- the approximate date of the conversation, form submission or other interaction; and
- a short description of the data, account, conversation or record concerned.
4. Identity verification
We may request proportionate information to verify identity and prevent unauthorized deletion. We will not ask for an account password, access token or complete payment-card details. If we cannot identify the relevant record, we will explain what additional information is needed.
5. Removing Instagram access
A person who authorized the Instagram connection may remove the application's access through the Instagram or Meta account settings where available. Access can also be reviewed at https://www.instagram.com/accounts/manage_access/.
Removing access stops future API access under that authorization. It does not necessarily delete conversation, comment, lead, audit or customer records already stored in ArtHome CRM. To request deletion of existing CRM records, also submit a deletion request using the email address above.
6. What happens next
We will acknowledge and assess the request, locate the relevant records, notify the appropriate controller where required, restrict processing while the request is assessed when appropriate, and delete or anonymize data that is no longer required. We record enough information about the request and its completion to demonstrate compliance and prevent the deleted data from being reintroduced through an ordinary restore.
7. Requests involving an ArtHome business customer
An ArtHome business customer may be the controller for messages, comments, leads, customer records, bookings and related branch data. Where Smiling Atmosphere acts only as processor, we will route the request to the relevant controller and assist it under the applicable data processing agreement. The controller may contact you directly if it needs to verify the request or explain a lawful retention requirement.
8. Data covered by deletion
Subject to the scope of the request and lawful exceptions, deletion may cover CRM account data; Instagram-scoped identifiers and profile data received through Meta; message text, conversation records and attachment references; comment-management records; Meta lead-form data; contact details; tasks and internal notes; connected-account records; and related technical records that are no longer necessary.
Deleting data from ArtHome CRM does not necessarily delete the original message, comment, profile, post or other content held by Instagram or Meta. Requests concerning data controlled directly by Meta must also be made through Meta's own privacy and account tools.
9. Response time
We respond without undue delay and within one month of receiving a valid request, as required by the GDPR. If a request is complex or there are several requests, the period may be extended by up to two additional months. We will explain any extension within the first month.
10. Backups and technical deletion
Deleted data may remain temporarily in encrypted backups until the applicable backup is overwritten through the ordinary rotation cycle, which is no longer than 90 days. Data in protected backups is not restored for ordinary business use. If a disaster-recovery restore is required before rotation, the deletion request will be reapplied where technically and legally required.
Revoked access tokens are deleted or rendered unusable. Raw webhook payloads are retained for no more than 30 days after successful processing unless they have already been deleted sooner.
11. Possible exceptions
We may retain limited information where required by law, necessary to establish or defend legal claims, needed to protect security, required for accounting or tax obligations, or required to demonstrate that a request was handled. We will explain any lawful refusal, limitation or continued retention unless the law prevents us from doing so.
12. Related information
The ArtHome CRM Privacy Policy is available at https://smilingatmosphere.pt/arthome-crm/privacy-policy/. The Privacy Policy explains the categories of data processed, purposes, legal bases, recipients, retention periods and individual rights.
13. Contact
SMILING ATMOSPHERE – LDA
NIPC 517944596
Rua Capitão Salgueiro Maia, nº 3, 2925-228 Azeitão, Setúbal, Portugal
Email: admin@smilingatmosphere.pt
Website: https://smilingatmosphere.pt