MirageCHAT is a shared inbox. A business connects its own Facebook, Instagram, WhatsApp, Telegram or TikTok channels, and we hold the messages its customers send it so its team can answer them. This page explains how to have that deleted, and how long it takes.
Write to privacy@miragechat.io from the email address the workspace is registered to, and say that you want the account and everything in it deleted. That is the whole request; you do not need a form of words.
We verify before we delete anything. A deletion request is also the shape an attack takes, so we confirm you are the account owner first — an admin can see the company's billing, but ending the company's account is a different kind of decision.
It cannot be undone. The erasure removes the workspace from the live system, and we do not put it back from a backup afterwards.
We acknowledge within three working days and complete the erasure within thirty days of confirming who you are. If anything holds it up we write and say what and why, rather than letting the clock run out in silence.
Your conversation belongs to the business you wrote to, not to us: we hold it on their behalf, the way a mail server holds a company's email. We are not able to identify you across our customers, and we will not delete one company's records at another person's request.
Ask the business directly. If they use us and need help doing it, they can reach us at the address above and we will act on their instruction. You may also revoke MirageCHAT's access from your own Facebook, Instagram or Google account at any time — that stops any further data reaching us, though it does not remove what the business already received.
| What | When |
|---|---|
| Conversations, messages, attachments, notes, contacts | Erased when the request runs |
| Comments, mentions, reviews and the record of published posts | Erased when the request runs |
| Connected channels and their access tokens | Erased — the tokens are destroyed, not just unlinked |
| Team members and their sign-in details | Erased |
| Linked Google or Facebook sign-in identities | Erased |
| Invoices and payment records | Kept while the law requires it, then deleted |
| Encrypted backups | Up to 12 months — see below |
Invoices are the one exception, and it is not a choice we get to make: a United States company has to be able to show what it billed and what it collected. They are kept apart from the inbox and hold no message content.
Backups are the honest caveat. We keep thirty nightly copies of the database and one copy from the first of each month for twelve months. A deleted workspace is gone from the live system at once, but it survives inside those copies until they rotate out — up to twelve months for the monthly ones. They are encrypted, they are never restored except to recover from a failure, and nobody reads a customer's data out of them. We would rather write this down than claim a thirty-day figure that our own retention does not support.
Where a business connects a Meta channel, we receive only what is needed for the work it does in MirageCHAT: its messages (the message itself, any attachment, and the sender's display name and platform id); the comments, mentions and reviews people leave on its Facebook Page and Instagram account, with the writer's name and platform id; and the record of each post it publishes there. The numbers of its Page and account are read when its staff open them and are not stored. We do not use any of it for advertising, we do not sell it, and we do not build profiles from it.
Deleting the workspace removes all of it and destroys the channel's access token. Removing MirageCHAT from a Facebook or Instagram account also stops the flow at once.
A business connects its own TikTok account on TikTok's own sign-in screen and approves each permission there. From TikTok we keep only what publishing needs: the account's TikTok identifier and display name, and the access and refresh tokens that let MirageCHAT post for it — the tokens encrypted (AES-256-GCM). For every post the business publishes from MirageCHAT we keep the record of that post: the caption and media the business chose, when it went out, and TikTok's id and status for it. The account's statistics (followers, views) are read live when the business opens Insights and are not stored. We do not use any of it for advertising, we do not sell it, we do not build profiles from it, and we do not share it with anyone.
Deleting the workspace removes all of it and destroys the tokens. Disconnecting the TikTok account in MirageCHAT deletes its tokens at once and stops its schedules; a business can also remove MirageCHAT from TikTok itself (Profile → Settings and privacy → Security and permissions → Apps); when TikTok tells us the permission was withdrawn, we stop using the account at once.
A business connects its own Telegram bot by giving MirageCHAT the bot's token, kept encrypted (AES-256-GCM). We then receive what people send to that bot — the message, any attachment, and the sender's Telegram name, username and id — so the team can answer it. We do not use it for advertising, we do not sell it, and we do not build profiles from it.
Deleting the workspace removes all of it and destroys the bot token. Disconnecting the bot in MirageCHAT tells Telegram to stop sending us its messages.
Mirage Global Technologies LLC · 1621 Central Ave #8434, Cheyenne, WY 82001, United States
privacy@miragechat.io