Skip to content
IndexDesign corpus

Data export & deletion request

Account & Settings · 7 checks · 15 resources

The self-serve surface that satisfies a user's right to take their data out or have it erased.

Before you ship7 checks
  1. 01Scope statement — exactly which data is included in the export and which is not (for example logs or third-party-held data)
  2. 02Asynchronous generation with notification — the export is prepared in the background and the user is emailed when the archive is ready
  3. 03Time-limited, authenticated download link — the archive is not on a public URL and expires after a stated period
  4. 04Open, documented format — JSON or CSV with a manifest, not a proprietary blob the user cannot read
  5. 05Deletion request path separate from export — with a stated grace period before erasure becomes irreversible
  6. 06Consequences of deletion enumerated — what is destroyed, what is retained for legal reasons, and for how long
  7. 07Request history — past exports and deletion requests with their status and dates
Resources that help you build this15