Frosty Agent is an AI assistant that businesses add to their website, their WhatsApp number and their email. This page explains how to ask for your data to be deleted, and what happens when you do. There is no charge for any of it. Who to contact depends on how you used it.
If you only want the messages to stop
You do not have to ask for deletion. Reply STOP to any WhatsApp message, use the unsubscribe link in any email, or write to privacy@frostyagent.com asking to be marked Do Not Contact. We will stop all outbound messages from that business and stop sending any advertising conversion events about you. Nothing else changes, and your conversation history stays as it is.
1. You messaged a business that uses Frosty Agent
If you sent a message to a company’s website chat, its WhatsApp number, or an email address it has connected to Frosty Agent, that company decides what happens to your data. We hold it on their behalf. Contact that business first. They can ask us to delete your data, and we act on that instruction.
If you cannot reach them, or they do not act, write to privacy@frostyagent.com with:
- the business name, or the website, WhatsApp number or email address you contacted;
- the phone number or email address you used;
- roughly when the conversation took place.
We will check it is you, and forward your request to that business within 48 hours. If they have not actioned it within 30 days, we will delete the data ourselves, unless the law requires us to keep it.
2. You have a Frosty Agent account
Write to privacy@frostyagent.com from the email address on your account, stating whether you want a specific end customer’s data deleted — give us enough detail to identify them — or your whole account closed.
Deletion is carried out by our staff. There is no self-service delete button in the dashboard, so please email us and we will action it. Closing an account locks access and stops all processing immediately; deleting the underlying records is done by our staff, and we will confirm when it is finished.
3. None of these describe you
Write to privacy@frostyagent.com anyway. This includes someone whose details appear in a document a business uploaded to its assistant but who never chatted; a current or former employee of a business that uses Frosty Agent; a parent or guardian acting for a child; and anyone acting for another person — as a nominee under section 14 of the Digital Personal Data Protection Act, under a power of attorney, or for someone who has died or cannot act. Tell us the capacity you are writing in and we will tell you what proof we need.
How we check it is you
We will ask you to confirm control of the phone number or email address in your request, usually by replying to a code we send to it. If we still have doubts we may ask for one further piece of information, and only what is necessary. We will not ask for a government ID unless nothing else will do, and we delete anything you send us for checking once your request is closed. If we cannot confirm who you are within 30 days we will tell you what is missing rather than act on an unverified request.
What we delete
- your conversations and message history, including voice notes and their transcripts;
- emails you sent to a business’s connected email address, including subject, body, and drafted replies;
- your name, phone number, email address and any contact record we hold for you;
- anything you told the assistant that it stored in order to remember you;
- any summary the assistant wrote of your conversation, and any logged unanswered questions;
- notes written about you by a human agent who took over the chat;
- files and voice recordings you sent, including the stored file itself and not only the record of it;
- lead, quote and meeting records that identify you;
- technical details recorded with your conversation — IP address, city, browser and device type;
- the advertising click identifier (Click-to-WhatsApp click ID) and campaign attribution attached to your conversation.
What we keep, and why
Ad measurement conversion events
If conversion events were already sent to Meta, we delete our copy. Removing it from Meta is a request made to Meta or to that business.
Delivery identifiers
Platform message IDs kept to reconcile delivery and billing. They carry zero message content.
Security and audit logs (365 days)
Privileged action audit records required by DPDP Rule 6 and CERT-In directions.
Encrypted backups (60 days)
Live system deletes are immediate. Rolling backup overwrite cycles take up to 60 days.
Tax and invoice records (8 years)
Preserved under the Income-tax Act, CGST Act, and LLP Act statutory retention periods.
Aggregate statistics
De-identified conversation volume counts stripped of names, contacts, and message bodies.
Copies we cannot reach
Deleting our records does not delete the WhatsApp conversation from your own phone, or from the phone of the business you messaged. You can each delete your own copy in WhatsApp. It does not withdraw emails or calendar invitations already delivered. And where a business has connected Frosty Agent to its own CRM, or exported its leads, we delete our copy but cannot reach theirs — ask that business. If you want to know who your data was passed to, ask us and we will tell you.
Separately from any request
Voice recordings are deleted 7 days after they are transcribed. WhatsApp delivery logs are purged after 90 days, and technical logs including IP addresses after 90 days. Conversation transcripts are kept until you or the business asks us to delete them, up to the maximum periods set out in our Privacy Policy.
How long it takes, and what it costs
There is no charge. We acknowledge every request within 48 hours and complete it within 30 days of confirming who you are. If a request is genuinely complex we may take up to 30 days more; we will tell you before the first 30 days are up, and explain why.
We may charge a reasonable fee, or decline, only if a request is manifestly unfounded or excessive — for example, the same request repeated many times — and the burden of showing that is ours. We will explain our reasoning if we ever do.
If we do not do what you asked
We will tell you why within 30 days, and tell you how to challenge it. You can ask us to look at the decision again and a different person will review it. You can also complain to your data protection regulator, and you can go to court.
How you will know it is done
We email you a confirmation when the deletion is complete, and tell you about anything we have had to keep under the exceptions above.
Your other choices
Deletion is not your only option. You can ask for a copy of what we hold, ask us to correct it, ask for it in a portable form, object to particular uses, or withdraw consent you gave — withdrawing consent is as easy as giving it. Our Privacy Policy sets out each of these rights, including instructions we accept from a Consent Manager registered under section 6(7) of the Digital Personal Data Protection Act.
If you are in California or another US state with a privacy law, the business you messaged is the party that must answer your request; we act as its service provider. Write to privacy@frostyagent.com if you cannot reach them, and tell us your state.
Write to us in English or Hindi. If neither is comfortable, write in the language you used with the assistant and we will arrange a translation. We will not refuse a request because of the language it is written in.
If you are not satisfied
Email: grievance@frostyagent.com
Frostrek LLP (LLPIN AAW-5223), 4th Floor, 422 Success Tower, Golf Course Extension Road, Sector 62, Gurugram, Haryana 122002, India
Under India’s Digital Personal Data Protection Act, 2023 you may then complain to the Data Protection Board of India if you are still not satisfied. If the GDPR applies to you, you may complain to your local supervisory authority at any time.