Under Article 5(1)(c) of the GDPR (Regulation (EU) 2016/679), personal data must be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (data minimisation).
When using ManyChat for marketing communication via messaging platforms, the only data necessary for us to contact a subscriber is their username (or platform ID).
The automatic collection of additional data such as:
-
profile picture,
-
full name,
is not necessary for the purpose of sending marketing messages or handling subscriber communication.
As data controllers, we are responsible for ensuring compliance with the GDPR, including the data minimisation principle. Collecting data that is not required for the defined purpose creates unnecessary compliance risks.
We would like to request:
-
The possibility to disable the automatic collection of profile pictures and names.
-
The option to limit collected data strictly to username/platform ID.
-
Clear documentation explaining which data fields are mandatory and which can be technically disabled.
This functionality would significantly support GDPR compliance for EU-based users of ManyChat.