API ReferencePrivacy
Privacy
End-user data-export, account-deletion, and CCPA opt-out requests.
Privacy
PrivacyService implements the end-user-facing side of GDPR Articles 15-22 and CCPA. These RPCs are called from your in-product "My Data" settings page (or the built-in /account/privacy route if you use the hosted Universal Login).
Base URL: https://<Domain id="api"/>
Authentication: User session token. Privacy requests act on the authenticated identity -- there is no admin override.
RPCs
| Method | Path | Purpose |
|---|---|---|
| ExportMyData | POST /v1/privacy:exportMyData | Request a signed ZIP of all data held about the caller |
| RequestAccountDeletion | POST /v1/privacy:requestAccountDeletion | Queue a 30-day grace account deletion |
| GetDataCategories | GET /v1/privacy:getDataCategories | List the data categories the platform holds about the caller |
| OptOutOfSale | POST /v1/privacy:optOutOfSale | CCPA Do-Not-Sell flag |
Retention & cancellation
Account deletion is queued with a 30-day grace window. The user can cancel via the Admin IdentityService CancelDeletion RPC (admin action) or by signing in during the grace period (auto-cancels if cancel_on_login was enabled at submission).
Audit trail
Every privacy action emits an audit event:
privacy.export.requestedprivacy.deletion.requestedprivacy.deletion.cancelledprivacy.opt_out.recorded