Data export & privacy tools

Your shop’s data is yours, and sometimes the law asks you to prove you can produce it, or make part of it disappear. These are the tools.

Export your workspace

Settings → System → Export Data (owners only).

• The workspace archive includes customer, ticket, invoice and message records. Review its manifest for included records, attachments and exclusions. Its checksum lets you check the downloaded file’s integrity; it is not an export of every external-provider record or retained artifact.
• Sensitive material (signatures, ID photos) requires its own explicit confirmation step before it’s included.
• Recent authentication and confirmation are required. A daily export limit applies, and downloads are logged.
• Exports remain available during a pending request or scheduled cooling period. New exports are blocked once deletion is approved or executing.

Request account deletion

Export your data before deletion begins. Exports remain available during a pending request or scheduled cooling period. New exports are blocked once deletion is approved or executing. The shop owner then follows the option available in Settings:

• Account → Delete shop, when offered: review what is deleted and retained, type the shop’s name, and confirm Delete shop in 7 days. You can cancel deletion before the date shown. Scheduling deletion stops plan renewal.
• Otherwise, use Settings → Account → Delete shop, then choose Request Data Deletion under Data deletion. BenchKey confirms the manual request with you before removal. Cancel plan renewal separately.

See Delete your shop for the full steps.

A customer asks to be forgotten

When one of your customers exercises a right to erasure, contact support with the request. The erasure:

• Removes personal details within scope: required financial and evidence records are retained, and records shared with another person may need review.
• Reports the result: support reviews the completion report for remaining data, retained records and incomplete cleanup. External providers, existing exports and routine backups are handled separately; a clean scan does not establish that every personal trace is gone.
• Is idempotent, running it twice is safe.

Consent records

SMS consent keeps the text the customer agreed to. Marketing consent and opt-outs are recorded per customer. Sending depends on current consent, suppression and campaign eligibility. Removing delivery suppression does not by itself restore marketing consent.