Managing access and deleting data

1. Disconnecting in BEAUTY FAMILY

Open https://beauty.familylawcompany.online/data-controls/manage or ‘Google connections’ in the legal documents menu. Connections are managed by the workspace owner. The existing connect and disconnect buttons in the workspace also open the relevant confirmation.

Before connecting, read the explanation of data, recipients, purposes and background operations and select the checkbox yourself. Google will then separately ask you to choose an account and permissions. Refusing does not grant those permissions.

To disconnect, click ‘Disconnect and revoke access’, read the notice and confirm. Google revokes permission at project level, which may affect other integrations and workspaces for that Google account. Gmail and Drive connections for that account in the current workspace are disconnected together. This action does not delete the service account, cases, delivered emails or files on Drive.

Check the displayed result. Limited background retries are provided for temporary failures; the key is isolated and is not used for sending or exporting. If ‘Completion in Google required’ is shown, perform the next step manually. Old copies of keys in backup archives do not authorise reinstating revoked access.

2. Revoking permission in Google

Open https://myaccount.google.com/connections using the account you connected. Select BEAUTY FAMILY, review the permissions and remove the relevant access. Button names depend on the language and Google's current interface.

Google may revoke all permissions for that Google account within the same Google project, including other integrations and OAuth clients. The owner must consider the consequences for the authorised team. This does not delete the BEAUTY FAMILY account or data previously stored in the service.

3. Disconnecting Instagram and Telegram

In the CRM, open ‘Messages’ → ‘Channels’, find the connection and click ‘Disconnect’. Read the notice and confirm. An authorised manager may manage the channel. New use of the channel in the CRM stops; correspondence history and client records remain until separately deleted.

For Instagram, the CRM requests cancellation of the app's subscription to account events and deletes the active key. This is not the same as fully revoking all OAuth permissions in Meta. Separately open the connected-app settings of the relevant Instagram account and remove access for the LEGAL FAMILY or BEAUTY FAMILY app you connected. Check the account and app names; menu names depend on the Instagram version.

For Telegram, the CRM removes the bot's webhook and active key. If using Telegram Business, separately disconnect the bot in your business account settings. If necessary, the bot owner revokes or replaces its key in BotFather; this may affect other uses of that bot.

If the CRM reports that the external action was not confirmed, CRM access is disabled, but completion must be checked on the relevant platform. The current social channel module does not promise automatic retries of external revocation. An operation submitted to the platform before disconnection may still complete.

4. Deleting Instagram and Telegram data

Send a request to familylawcompany@gmail.com or, if you have a service account, use https://beauty.familylawcompany.online/data-controls/requests . Emailing does not require a CRM account, Google sign-in or acceptance of the Terms. Specify BEAUTY FAMILY, Instagram or Telegram, the business profile or bot you communicated with, your identifier and the desired scope: individual messages, a conversation, social data or all related data.

The Operator acknowledges receipt, verifies identity proportionately where needed and coordinates actions with the relevant controller. The request covers live messages, conversation data, links to records, connection data, relevant logs and backups. Deleting a key or unlinking a record does not replace fulfilment of the request. Mandatory retention is assessed for the particular data; the requester receives the reason, scope and duration of any restriction.

Registering a request does not constitute automatic erasure. The Operator communicates the actions actually completed and any remaining restrictions. If the requester has no account, the response is sent through an agreed channel. A request does not require payment or acceptance of new terms.

Clearing the CRM does not delete copies held by Meta, Telegram, the correspondent or in independently downloaded files. Use the relevant platform's tools for external copies. If you need help identifying the data, contact the Operator without sending passwords, keys or the full correspondence history.

5. Requesting a copy, deleting data or closing an account

Submit a request at https://beauty.familylawcompany.online/data-controls/requests or email familylawcompany@gmail.com. Choose a copy, correction, deletion of specified data, Google data or account closure and briefly clarify the scope. The form identifies you and your address from your session. An email request does not require sign-in or acceptance of the Terms.

Do not send a password, API token, connection key or a full client file. We will verify identity and authority proportionately to the request. Client data is also processed by the relevant practitioner, attorney or company as controller; where needed, the request will be coordinated with the appropriate party.

The Operator will communicate fulfilment or the specific lawful reason, scope and duration of a deferral. Time limits for personal data access are set out in the Privacy Policy. Mandatory retention of individual documents does not justify arbitrary retention of the entire account.

‘My data requests’ shows the reference number, status and the Operator's response. Registration does not mean automatic deletion. If you cannot access this section, a deadline has passed or clarification is needed, use the contact email.

6. External copies and backups

Sent emails may remain in Gmail, and exported files may remain in Google Drive. The User manages them separately in Google; deleting a record in BEAUTY FAMILY does not clear Drive or recipients' mailboxes.

Automatic rotation of all backup archives has not yet been implemented. A full deletion request must cover live records, files and backups. Where deferral is justified, the Operator communicates the reason and duration. Restoration must not reinstate revoked permissions or reverse completed deletion.

GDPR rights and requests without an account

You may also use familylawcompany@gmail.com to object, withdraw consent, request restriction of processing or request data portability. A corresponding button in the form is not a prerequisite for making a request. Conditions, time limits, exceptions and the right to complain are set out in section 9 of the Privacy Policy; under the GDPR, the period is calculated as one month, not automatically as 30 days.

7. Related documents

https://beauty.familylawcompany.online/privacy

https://beauty.familylawcompany.online/terms

Operator: sole proprietor Kozachenko Valeriia Ihorivna, taxpayer identification number 3590800369. Contact: familylawcompany@gmail.com.