What deleting a chat does
Deleting may remove the conversation from your view and may start the provider’s deletion process. The exact result depends on the provider’s policy, backups, retention rules, and account settings.
What it does not do
Deletion does not contact the service that issued the API key. It does not disable the credential, change its permissions, or prevent someone with a copy from trying to use it.
What rotation means
Rotation means creating a replacement credential and disabling the exposed one. Once the old key is revoked, it should no longer grant access. You must also update the application that used it.
Use both actions when appropriate. Ask for chat deletion to limit later access, and rotate the key to remove the old credential’s power.
A simple response checklist
- Revoke the exposed key.
- Create a replacement with limited permissions.
- Update the application safely.
- Review access logs for unusual use.
- Tell the responsible person and follow incident steps.
- Request chat deletion if appropriate.
PonoLens can help you find and document the supported activity. It cannot revoke a key for you or undo information that was already sent.