privacy

Submit a privacy deletion request (GDPR Art.17 / CCPA §1798.105 / PIPEDA right-to-be-forgotten).

Queues a deletion of the personal data Etymolt holds for the requester's email address. Returns a receipt with a quotable request_id and a 30-day SLA. An acknowledgement email is dispatched best-effort; ack_email_sent=False in the response just means the operator needs to reach out manually (does NOT mean the request failed — the request is queued regardless).

Retention policy (Sarah §2.3 canonical): raw personal data (email, source IP, verdict body content) is deleted within 30 days. An aggregate-anonymized name+outcome hash may be retained beyond 90 days for coexistence lookups per the ToS. The deletion-receipt row itself (this request_id) is retained forever as the audit trail proving the request was honored.

post/v1/privacy/deletion-request

Request

  • Base URL: https://api.etymolt.com
  • URL: https://api.etymolt.com/v1/privacy/deletion-request
  • Auth: none declared

Request body

emailstring email required

Email address to authenticate the request against. The ack + completion emails are sent here.

verdict_idsstring[] nullable

Optional narrow-scope: delete only the listed verdict_id records. Omit to delete ALL data for this email.

identifierstring nullable

Optional supplementary identifier (API-key hash, customer ID, phone number for voice-line users, etc.) so the drainer can locate records that aren't email-keyed.

Response

Successful Response

request_idstring required

Opaque short ID the requester can quote in follow-up correspondence. Format dsr_<12-url-safe-chars>.

received_atstring required

ISO-8601 UTC timestamp of the request intake.

ack_email_sentboolean required

Whether an ack email was successfully dispatched. False does NOT mean the request failed — the request is queued either way; it just means the operator should follow up manually. Common cause: no RESEND_API_KEY in the environment (dev / test).

sla_daysinteger

SLA under which the deletion will be completed, measured from received_at. 30 days per Sarah's BOARD_REPORT_LEGAL §2.3 for EU/CA jurisdictions; matches the GDPR Art.12 §3 one-month floor.

Changes

No recorded changes to this operation across all 1 revision of this API.