Data Deletion
This page explains how to request the deletion of the personal data SAM holds about you and what happens after the request. It complements the Privacy Policy, in particular sections 10 (data subject rights) and 11 (retention and erasure).
In short:
- Send an email to privacy@oisam.ai from the address registered in SAM.
- We confirm receipt and complete the deletion within 15 business days; the account is blocked immediately and permanently erased after 90 days.
- No card, password or additional verification is required beyond the registered email.
1. Who can request
- SAM users (holders of a login account): may request deletion of their own account and the data associated with it.
- Campaign account administrators: may request deletion of the entire campaign account, including the users linked to it. In that case we notify the other users by email before completing.
- Anyone whose public data is analyzed by SAM (see section 6): may exercise the right to object to processing.
2. How to request
- Send an email to privacy@oisam.ai from the email address registered in SAM, with the subject "Data deletion". The registered email is the only identification required.
- State whether you want to delete only your user or the entire campaign account (if you are an administrator).
- We reply confirming receipt within 2 business days. If the request comes from an address other than the registered one, we will ask for confirmation from the registered address before proceeding.
- We complete the deletion and send the final confirmation within 15 business days, as set out in section 10 of the Privacy Policy.
You may also contact the Data Protection Officer directly — see section 7.
3. What is deleted and when
| Data | What happens | Timeframe |
|---|---|---|
| Account access (login) | Blocked | Immediately after the request is confirmed |
| Content of conversations with the assistant, reports and preferences | Permanently deleted | Within 15 business days |
| User account (name, email, profile picture from Google sign-in, settings) | Blocked and, after the reactivation window, permanently erased | 90 days after the request |
| Technical logs (IP, user-agent, errors) | Expire automatically | 6 months (standard retention) |
| Backup copies | Overwritten by the normal backup rotation cycle | Within 30 days of the main deletion |
The 90-day reactivation window protects you against unauthorized requests: during that period you can undo the deletion by replying to our confirmation email. If you prefer immediate erasure, say so in your request and we will apply it as soon as your identity is confirmed.
4. What is retained by legal obligation
As described in section 11 of the Privacy Policy, we keep only the minimal account data (name and email) required for accounting and tax audit purposes, for the period required by law (5 years for tax records), and access records for the period required by the Brazilian Internet Civil Framework (Marco Civil da Internet). This data is kept isolated, is not used for any other purpose, and is erased at the end of the legal period.
5. Connected apps and third-party platforms
- Sign in with Google: when your account is deleted, we remove the data received from Google (name, email and picture). To revoke the authorization on Google's side, visit myaccount.google.com/permissions.
- Meta (Facebook / Instagram): SAM does not offer Facebook or Instagram login and does not request access to users' Meta accounts. No Meta account data of SAM users is stored; therefore there is no Meta user data to delete. The use of public content of public figures obtained from Meta platforms is described in section 6.
- AI providers (Anthropic, Google): do not retain your questions after generating the answer, as described in section 5 of the Privacy Policy; there is no data of yours to delete at those providers.
6. Public figures and third-party data
SAM analyzes public posts of candidates, elected officials, party leaders and news outlets, and aggregated official election data (section 6 of the Privacy Policy). If you are the holder of a public profile analyzed by SAM and wish to object to that processing (LGPD, Art. 18, §2), send an email to privacy@oisam.ai identifying the profile (social network and username). We reply within 15 business days and, when the request is well-founded, we stop collection and remove the stored content attributed to that profile.
7. Contact
| Channel | Address |
|---|---|
| Deletion requests and other LGPD rights | privacy@oisam.ai |
| Data Protection Officer (DPO) | Rafael Correia — rafael.correia@oisam.ai |
| Controller's address | SAM INTELIGÊNCIA ARTIFICIAL LTDA — Rua João Lourenço, nº 713, apartamento 132, E3BX, Vila Nova Conceição, São Paulo/SP, ZIP 04508-031, Brazil |
For questions that have not been satisfactorily addressed, you may also contact the Brazilian Data Protection Authority (ANPD) at www.gov.br/anpd.