Delete Contact

Delete a contact and erase their personal data everywhere it was copied.

Deleting the contacts row is not enough on its own. Every channel freezes a rendered copy of the message at enqueue time, so that sending needs no template or contact access, and the intake outbox keeps the raw trigger payload. None of that is reachable by the foreign key cascade, so a plain delete used to leave the recipient's address, device token and message content behind indefinitely.

Delivery records are kept but blanked: what was sent, when and with what outcome survives, while the personal data in it does not. Anything still queued is cancelled so it can never be delivered.