Data export & privacy tools

Your shop’s data is yours, and sometimes the law asks you to prove you can produce it, or make part of it disappear. These are the tools.

Export your workspace

Settings → System → Export Data (owners only).

• The export covers the whole workspace, customers, tickets, invoices, messages, and dozens more tables, packaged as a zip with a SHA-256 checksum so you can verify it wasn’t corrupted or altered.
• Sensitive material (signatures, ID photos) requires its own explicit confirmation step before it’s included.
• Exports are rate-limited (a few per day) and every download is logged.
• Exports are blocked while a deletion request is pending, no racing the shredder.

Request account deletion

Settings → System → Migrate Data → request permanent deletion.

A person follows up with you before anything is deleted, and removal then runs as a deliberate two-step process on our side. No single click, on either side, destroys a business’s records.

A customer asks to be forgotten

When one of your customers exercises a right to erasure, contact support with the request. The erasure:

• Scrubs the person, keeps the math: personal details are overwritten in place rather than rows being deleted, so your invoices and reports still reconcile after the name is gone.
• Certifies itself: after scrubbing, the tool re-scans every table for the identity and refuses to report success until zero traces remain.
• Is idempotent, running it twice is safe.

Consent records

SMS consent is stored with the exact text the customer saw when they agreed. Marketing consent is an explicit per-customer event log, and unsubscribes suppress permanently. When you need to evidence an opt-in, it’s a lookup, not an argument.