Skip to content

GDPR Art. 17 — Right to erasure

POST
/api/v1/export/erase

Erases personal data for the requesting tenant. If contact_email is provided, only that contact’s records are deleted synchronously. If omitted, a full tenant data deletion is queued for async processing. Audit log entries are always retained per legal requirement.

Authorizations

Request Body required

Request body for POST /export/erase (GDPR Art. 17).

Attributes: contact_email: If provided, only this contact’s data is erased. If omitted, a full tenant data deletion is queued.

object
contact_email
Any of:
string format: email

Responses

202

Successful Response

Response body for POST /export/erase (GDPR Art. 17).

Attributes: request_id: Unique identifier for the erasure request (retained in audit log). scope: ‘contact’ or ‘tenant’. contact_email: Echo of the contact email erased (contact scope only). status: ‘accepted’ — deletion is processed asynchronously. message: Human-readable description.

object
contact_email
Any of:
string
message
required
string
request_id
required
string format: uuid
scope
required
string
status
required
string

422

Validation Error

object
detail
Array<object>
object
ctx
object
input
loc
required
Array
msg
required
string
type
required
string