Account and security
GDPR requests: access and erasure
What a subject access export returns, what erasure removes, and what the law keeps.
Updated
Subject access
On the contact's page, Download data gathers everything the system holds about the person into one JSON: timeline, tasks, emails, deals, documents, records, shop orders and consent history. Only somebody who may see the record anyway may download it.
Erasure
Permanent erasure does not archive; it deletes. What the law keeps — an issued invoice for eight years, a shop order as a sale — has the person taken out of it: the link, email and name are cleared, and the order's original JSON (with the delivery address) is emptied. Webhook deliveries that carried a copy of the person are deleted too.
Both operations are recorded in the audit log, and neither can be undone.