GDPR data-subject tooling: full data export and PII erasure.
Erase a customer's PII (GDPR Art. 17, right to be forgotten)
Tombstones the customer's PII (name, email, billing address, tax identifiers, bank display data) and redacts their audit trail in one call. Transaction records (payments, refunds, invoice amounts) are retained as required by GoBD/UStG; row envelopes stay so integrity audits can prove nothing was deleted. Idempotent. Admin-only.
path Parameters
idCustomer UUID
Customer UUID
Headers
Idempotency-KeyUnique key that makes this POST safe to retry: repeats with the same key replay the first response instead of re-executing. Replays are scoped to the retrying principal (same API key / user) and kept for 24 hours. Required on every POST.
Client-generated idempotency key (e.g. a UUID).
X-Workspace-IdSelects the workspace this request operates in, by workspace UUID or slug (e.g. a sandbox workspace for test integrations). Omitted: the organization's default live workspace. Unknown workspace: 404; workspace outside your organization: 403. Discover workspaces via GET /workspaces.
Workspace UUID or slug.
Erase a customer's PII (GDPR Art. 17, right to be forgotten) › Responses
OK
Export all data held about a customer (GDPR Art. 15/20)
Returns a machine-readable JSON document containing every record held about the data subject: the customer row, subscriptions, invoices, credit notes, payments, payment methods (provider tokens excluded), wallets, wallet transactions, and verification records. Admin-only.
path Parameters
idCustomer UUID
Customer UUID
Headers
X-Workspace-IdSelects the workspace this request operates in, by workspace UUID or slug (e.g. a sandbox workspace for test integrations). Omitted: the organization's default live workspace. Unknown workspace: 404; workspace outside your organization: 403. Discover workspaces via GET /workspaces.
Workspace UUID or slug.
Export all data held about a customer (GDPR Art. 15/20) › Responses
OK