Data Rights, Export and Deletion

Explains how data subjects and client administrators request access, correction, export, objection or deletion.

- A customer of an MK Assist client should normally contact that business first because the business is the responsible party for the conversation.

- A client administrator can use workspace export, cancellation and deletion functions or email hello@mkassist.co.za.

- A website visitor, prospect or authorised user may email tondani@mkassist.co.za for POPIA rights.

- A PAIA requester must use the process and prescribed Form 2 described in the PAIA Manual.

Subject to law, a data subject may ask for confirmation of whether information is held, access, correction or deletion, objection to processing, withdrawal of consent, restriction of optional marketing and information about recipients. MK Assist may need to protect another person's privacy, confidential information, privilege, security, legal obligations or an active dispute.

1. Send the request to tondani@mkassist.co.za with enough detail to locate the information.

2. MK Assist acknowledges the request within three business days where practicable.

3. MK Assist verifies identity, authority and the responsible client. Verification must be proportionate and must not collect unnecessary identity data.

4. If MK Assist is only the operator, it forwards and assists the client. The client makes the substantive decision.

5. MK Assist aims to complete ordinary requests within 30 calendar days, subject to lawful extensions, complexity and the PAIA timeframes where PAIA applies.

6. A refusal or limitation will state the reason and available escalation route unless law prevents disclosure.

During an active subscription and for 30 days after cancellation, the client may export available business profile, approved knowledge metadata and source files where technically supported, customer and conversation data within the retained history, user and assignment data, and usage or billing records available in the dashboard. Export formats should be commonly readable, such as CSV and JSON, with files in their retained format. Secrets, provider credentials, internal security logic, another client's data and legally restricted information are excluded.

When approved business knowledge is deleted, it must stop being available for new responses immediately or as soon as technically practicable. The source file, extracted text, indexed chunks and embeddings must be removed from active production systems no later than seven days after a valid deletion action, subject to a legal hold. The deletion event, object identifiers, completion status and exception must be logged.

After the 30-day post-cancellation window, MK Assist begins deletion of the production workspace, including active conversation history, knowledge and derived retrieval content, user associations and configuration, subject to lawful retention. Backups are isolated from ordinary use and expire within the approved cycle, which may not exceed 90 days. MK Assist provides a final deletion confirmation when active deletion is complete and states the categories retained for law.

Minimum invoice, tax, accounting, contract, acceptance, dispute, security, fraud, regulator and law-enforcement records may remain for their lawful period. They are isolated from ordinary customer-operation use, access restricted and deleted when no longer required.

Unresolved requests may be escalated to the Information Officer at tondani@mkassist.co.za. A data subject may complain to the Information Regulator using its current online or prescribed process.

A business administrator may request deletion from Settings, disconnect the relevant Meta and WhatsApp assets from the WhatsApp page, or email tondani@mkassist.co.za without logging in. The request must identify the business, the authorised requester and the relevant Meta business or WhatsApp asset where available. MK Assist verifies authority, disconnects its access, deletes data for which MK Assist is responsible in accordance with the applicable retention rules, and sends a confirmation or status reference. Data that Meta or WhatsApp holds independently remains governed by their terms and controls.

MK Assist will validate the signed request, create an auditable deletion case, return the required confirmation URL and code, perform the mapped deletion and retain only the minimum lawful deletion record.