LEGAL
Data Deletion & Your Rights
Effective 14 July 2026
This page explains what data Midodze (the “Service”) holds, how you can request its deletion, and the privacy rights available to you. The Service is operated by Benalika Consult Inc (“we”, “us”), incorporated in British Columbia, Canada. We handle personal data in line with the General Data Protection Regulation (GDPR), Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), and the California Consumer Privacy Act (CCPA).
What data we hold
Depending on your relationship with us, we may hold: your account and billing details (name, business name, email, subscription and payment records held by our payment processor); the social media messages and comments your agent processes; the AI-generated replies; a rolling per-contact memory used to keep conversations coherent; captured leads (such as an email a customer shares in a conversation); and operational logs.
How to request deletion
To request deletion of your data, email contact@midodze.com from the email address associated with your account, with the subject line “Data Deletion Request”. Please include your business name and, if you have it, your account or order reference so we can locate your records.
We verify that the request comes from the account owner before acting on it, then permanently delete the associated tenant and its data from our systems. This maps to a real deletion path: internally, a verified request triggers a purge of your tenant and all of its records from our database (technically, our control plane executes a hard delete of the tenant, including its conversations, contact memory, and captured leads — not a soft flag). We complete verified deletion requests within 30 days and confirm by email once done.
Deleting an end-contact’s data
If you are a customer (an end user who messaged a business that uses our Service) and you want your conversation data removed, you can ask that business directly, or email us at contact@midodze.com. Because the business is the controller of its own conversations, we will coordinate the deletion with them and remove the matching records from the Service within 30 days.
What remains after deletion
After a deletion we may retain a limited set of records where the law requires or permits it — for example, invoices and transaction records needed for tax and accounting obligations, and minimal records needed to prevent fraud or resolve disputes. Payment records are held by our payment processor, Stripe, under its own retention rules. Backups are rotated on a schedule and any residual copies age out of backups in the ordinary course.
Your privacy rights
Subject to applicable law, you may have the right to:
- access the personal data we hold about you;
- correct inaccurate or incomplete data;
- request deletion of your data (the “right to be forgotten”);
- request a portable copy of your data;
- object to or restrict certain processing;
- withdraw consent where processing relies on consent; and
- for California residents, to know what personal information is collected and to opt out of any “sale” of personal information — we do not sell your personal information.
To exercise any of these rights, email contact@midodze.com. We respond to rights requests within the timelines set by applicable law and will not discriminate against you for exercising them.
Subprocessors
We share data only with the service providers needed to run the Service. Each processes data under its own security and privacy commitments:
| Provider | Purpose |
|---|---|
| Cloudflare | Application hosting, edge compute, the tenant database, and bot protection on sign-in and checkout |
| Stripe | Payment processing and subscription billing |
| Anthropic | AI model that classifies messages and drafts replies (default provider) |
| OpenAI | Optional AI provider, used only if the subscriber chooses it |
| Google (Gemini) | Optional AI provider, used only if the subscriber chooses it |
| Meta Platforms | Facebook, Instagram, Messenger and WhatsApp messaging APIs the agent replies through |
| Resend | Transactional email (welcome, password and account emails) |
| Systeme.io | Optional lead sync into the subscriber's own account, only if the subscriber connects it |
| Discord | Optional notifications to a channel the subscriber nominates, and our own operational alerts |
| Intuit QuickBooks | Our bookkeeping and tax records for subscriptions (billing contact and invoice data only) |
Complaints
If you believe we have mishandled your data, please contact us first so we can put it right. You also have the right to lodge a complaint with your local supervisory authority — for example, the Office of the Privacy Commissioner of Canada, or your EU/EEA data protection authority.
Contact
Benalika Consult Inc
British Columbia, Canada
contact@midodze.com
See also our Privacy Policy, Terms of Service, and Refund & Cancellation Policy.