Deleting your data
Salty, operated by Amaracus Ltd · Last updated 19 October 2026
If you commented on or messaged a business that uses Salty and you want the record of that removed, you can ask either the business or us.
Ask us directly
Email filippos@amaracus.org with:
- Your Instagram username (for example
@yourname) - The business whose account you contacted
That is all we need — we identify your records by your Instagram handle and the business you spoke to. We do not need any document from you, and you do not need an account with us.
What gets deleted
Everything we hold that is linked to you for that business, except the copies that delete themselves, described under "What we may have to keep":
- The conversation record and every message in it, in both directions
- CRM contact cards, enquiry notes and lead outcome history
- Contact details held while waiting to be saved to a CRM card
- Emails held while waiting for your answer to an email signup offer, and records of email marketing consent. If your email was sent to the business's Klaviyo, we ask Klaviyo to delete that profile and keep your email only until Klaviyo accepts the request
- Appointment requests: what you asked to see and when
- References to your conversations in the business's conversation reviews
- Test scenarios the business saved from your conversations
- Your messages kept next to the replies the business's team wrote, for its assistant's suggestions
- Delivery, read and click events, and the cart and checkout steps a store measured after a Salty link
- The link between your conversation and the business's record of you as a store customer
- Any comment of yours that was hidden, and the reason it was hidden
- Any reply still waiting for the business to approve, and the working copies of your conversation kept while the business approves replies
- The copy held in the running system's memory, not only the database
Deletion is permanent and cannot be undone. It is limited to the business you name: if you have contacted several businesses that use Salty, each is a separate controller and a separate request.
What we may have to keep
Where a purchase was made, the business may be required to keep the order record for tax and accounting purposes. That record lives in the business's own shop, not in Salty, and it is outside what we can delete. We remove the link between that order and your conversation.
If the business has turned on its store customer list, Salty also holds an encrypted copy of its Shopify store's record of you: your name, email, phone number, orders and email marketing choice. That copy follows the store. Ask the business to delete you as a customer in its store: when it does, or when Shopify asks on your behalf, we delete our copy too.
Copies of replies, and of items waiting for the business's approval, in Amaracus Ltd's internal Slack, which our staff use to check the assistant (see our privacy policy), are not deleted one by one: they are deleted automatically 90 days after they were made. The same copies in our application's log are deleted by our hosting provider after 7 days.
How long it takes
We act within 30 days and confirm by email when it is done. In practice it is usually the same working day.
Deleting does not rewrite our encrypted backups. Your data leaves them as they expire: within 5 days for our hosting provider's snapshots, and within 30 days for our own daily backups once we switch them on. If a backup is ever restored, we delete your data again before anything is used.
Deleting your Instagram connection instead
If you are a business that connected Salty to your Instagram account and you want to disconnect it: remove Salty from Instagram → Settings → Website permissions → Apps and websites. That stops all processing immediately. Email filippos@amaracus.org to have the stored data erased as well.