The client says they agreed on a different deadline. The salesperson who handled it left the company. The phone with the conversation was wiped. The company has no way to prove anything and pays the difference — not because they were wrong, but because they didn’t keep records. This article covers what to do with chat history before it becomes necessary.
In this article
What chat history is for
Three uses justify the care, each with its own importance.
Continuity. Whoever takes over a client needs to know what has already been discussed. Without this, the client retells the story — and retells it annoyed. This is the most frequent use and the one that most affects the experience.
Evidence. Agreed deadlines, values, scope, and conditions are recorded in writing. In a dispute, chat history is what separates "we agreed" from "here it is, on 12, with the amount."
Management. Without centrally stored conversations, there is no quality review, no reliable indicator, and no training with real cases.
Estimate the financial risk in your case. An operation with 300 conversations per month usually has disagreement on agreements in about 2% of them: 6 monthly cases. If the average disputed amount is R$ 1,200, that’s R$ 7,200 per month discussed without basis — and without records, the company usually concedes to preserve the client. Keeping chats is not bureaucracy: it’s the cheapest defense there is.
Where chat history lives in each model
The first step is to know where your conversations are today — and the answer changes everything.
App on the phone. The history is on the device, with optional backup to the user’s personal cloud service. In other words: it belongs to the person, not the company. Lost, wiped, or replaced phone takes everything. This is the most common and most fragile scenario, covered in when the salesperson leaves.
Dashboard connected via QR Code. Conversations start being recorded in the system, with access by profile. History no longer depends on the device but depends on the provider: it’s important to know where data is stored and how to export it.
Official API with platform. Same logic, with one important detail: the platform you contract stores the message content. Meta handles transport, but storage and retention policy are the responsibility of your operation and your provider.
In any case, the question that must have a written answer is always the same: if I need a conversation from eight months ago with a specific client, how long will it take to have it in hand?
Keep reading for free
Fill out once and unlock this and all other blog articles. We don’t charge anything — we just want to know who we’re writing for.
Takes 20 seconds. Prefer to talk directly on WhatsApp?
How long to keep it
LGPD works with two guiding principles for the answer: purpose — data is only kept for a legitimate purpose — and necessity — only as long as necessary to fulfill that purpose, or the period provided by law.
In practice, a simple policy solves most cases and fits in four lines:
Active client conversations: kept during the relationship, because the purpose is the contract execution itself.
Conversations related to closed contracts: kept for the period during which there may still be discussion about the business, as advised by the company’s legal team.
Leads that did not close: shorter period, with a defined basis — usually linked to your commercial re-engagement window.
Contacts who requested deletion: specific treatment, described in the next section.
The important thing is that this policy exists in writing and is applied automatically. Companies that keep everything forever and companies that keep nothing are both wrong for the same reason: neither decided — and the decision is exactly what the law expects.
It’s worth recording the policy in your privacy statement and checking if it aligns with what is already described in LGPD on WhatsApp.
When the client requests deletion
The data subject can request deletion of their data, and the company needs to know how to respond — including when the answer is "part cannot be deleted."
A working script:
Record the request with date. This itself is proof that the company complied.
Separate what is a legal obligation from what is convenience. Data necessary to fulfill tax obligations or for defense in legal proceedings have special treatment; marketing conversations and commercial contacts do not.
Respond within the deadline, in writing, explaining what was done. "We removed your contact data from our communication lists; the tax records of the purchase remain for the legal period" is an honest and complete response.
Ensure the number is removed from active campaigns. A client who requests deletion and continues receiving campaigns is the scenario that most generates complaints — and complaints are what get numbers blocked.
A practical implication: this only works if there is a single place where deletion can be executed. With conversations scattered across five phones, there is no way to fulfill the request or prove it was fulfilled.
Exporting and switching providers
A point almost no one checks when contracting and everyone discovers on exit: how your data leaves.
Before contracting any platform, ask in writing: is there export of conversations and contacts? In what format? Does it include attachments and media? Is there a cost? How long does delivery take? How long do data remain available after contract termination?
Answers vary widely among providers, and they define whether you have a system or a trap. It’s worth testing export once, early in the relationship — discovering it doesn’t work on migration day is costly.
Add to that a simple routine of copying: periodic export of essential data (contacts, deals, notes), stored in a location controlled by the company. It doesn’t replace the platform but ensures that unavailability doesn’t stop operations or erase months of work context — a care also covered in how to migrate without losing clients.
Chat as evidence: what strengthens the record
A WhatsApp conversation is frequently accepted as evidence in consumer disputes and contracts — but its weight depends on how the record was made. Four precautions greatly increase solidity, and none cost money:
Confirm in writing what was agreed. After a call or long conversation, send a message summarizing: value, deadline, scope, and what’s included. "Confirming what we agreed: R$ 2,400, delivery in 9 business days, with installation included. Can you confirm?" The client’s reply is worth more than any internal note.
Avoid agreements only by audio. Audio is great for explaining but poor for proving — no one finds the excerpt later. If the agreement was made by audio, transcribe the points in text afterward.
Preserve the entire context. An isolated screenshot of a message is worth little; the complete conversation, with date and sequence, is worth much more.
Don’t delete, even if inconvenient. Edited or partial records weaken all argumentation — including the part that favors you.
For cases of significant value, the company’s legal team may advise on additional preservation methods. The point here is prior to that: none of this exists if the conversation is only on someone’s phone who might leave the company tomorrow.
Who can see what
Proper storage includes restriction. Three decisions avoid most problems:
Access by profile. The agent sees their own conversations and those in the queue; the manager sees everything; finance sees what is financial. Total access for everyone is an unnecessary risk.
Record who accessed. In operations with sensitive data, knowing who opened which conversation is part of security — and incident response.
Immediate revocation upon termination. Access revoked the same day someone leaves, without exception.
And a practice that protects the company and client: inform in your privacy policy and at first interaction that conversations are recorded for service and quality purposes. Transparency here costs one sentence and resolves any future questions.
Costly mistakes later
Leaving history on the phone. A lost device erases months of context and evidence.
Keeping everything forever. Contradicts the necessity principle and increases risk in case of incident.
Not having a written policy. Without rules, each person decides alone what to delete.
Ignoring deletion requests. Legal risk and guaranteed complaints.
Never testing export. Discovering it doesn’t work on migration day is the worst possible moment.
Unrestricted access. Everyone seeing everything turns a small incident into a big one.
Confusing personal copy with corporate backup. Copy in the employee’s personal cloud is not company backup.
Chat history is both commercial memory and document. Stored in one place, with a defined retention period, controlled access, and tested export, it ceases to be a risk and becomes what it always should have been: a company asset, available to whoever needs it when they need it.
Frequently asked questions
How long should a company keep WhatsApp conversations?
For as long as necessary for the purpose that justified collection, or the period provided by law — the two principles LGPD uses. In practice, a policy with four categories works: active client conversations kept during the relationship, conversations of closed contracts kept for the period during which business disputes may arise, unconverted leads for a shorter period linked to the commercial re-engagement window, and specific treatment for those who requested deletion. The essential thing is that the policy exists in writing and is applied automatically.
Can a client request deletion of their conversations?
They can request deletion of personal data, and the company must respond within the deadline, in writing, explaining what was done. Not everything can be deleted: data necessary to fulfill legal obligations or for defense in legal proceedings have special treatment and may be kept, provided this is informed. What cannot happen is the number continuing to receive campaigns after the request — this is the scenario that most generates complaints.
How to back up company WhatsApp conversations?
The app’s backup is on the personal account of whoever uses the phone and does not serve as corporate backup. For the company, the way is to centralize conversations in a dashboard with its own history and maintain a routine of periodic export of essential data — contacts, deals, and notes — stored in a location controlled by the company. Before contracting any platform, test export and confirm in writing format, deadline, cost, and what happens to data after contract termination.
Centralize service without changing your number
Connection via QR or official API, single queue with defined responsible, client history that stays with the company, and sales funnel on the same WhatsApp dashboard.