GDPR Data Export & Account Deletion

Exporting Your Data (GDPR Article 20)

Blueprint supports full data portability under GDPR Article 20. You can request an export of all your data at any time from Account Settings → Security → Data Export.

What's included

The export generates a ZIP file containing 17 JSON files:

• Profile — your account information, email, and preferences
• Notification preferences — your alert and email settings
• Workspaces — workspaces you own with their settings
• Memberships — all workspace memberships (owner, member, viewer)
• Ad accounts, campaigns, spend, conversions, quality scores — all synced PPC data for workspaces you own
• Budget targets, alert configs, anomalies — workspace configuration data
• Reports, client reports, experiments — generated content
• Audit log, sessions — activity history

Data is scoped by your role: for workspaces where you're an Owner, you get the full operational data. For workspaces where you're a member (Manager, Analyst, Viewer), the export includes only your membership record as proof of access.

How the export works

1. Click "Export My Data" on the Security page.
2. Blueprint queues an async export job. A progress bar shows real-time status (0–100%) with step labels.
3. When complete, a download link appears. The ZIP file is available for 24 hours.
4. After 24 hours, the file is automatically deleted. You can request a new export at any time (up to 3 per 24 hours).

If the export fails, an error banner appears with a retry button. Exports stuck in a pending state for more than 10 minutes show an amber warning — this is rare but can happen during heavy sync periods.

Deleting Your Account

Account deletion is available from Account Settings → Security → Delete Account. The process is designed to be deliberate and reversible within a grace period.

The deletion lifecycle

1. Request: Click "Delete Account." Blueprint sends a confirmation email with a secure link.
2. Confirm: Click the link in the email. This requires being logged in (second factor). The request moves to CONFIRMED status and all your sessions are invalidated.
3. Grace period: You have 30 days to cancel the deletion. During this time, you can log back in and click "Cancel Deletion" on the Security page.
4. Execution: After 30 days, a daily job executes the deletion permanently.

What happens during deletion

• Workspace ownership transfer: If you're the sole Owner of a workspace, ownership transfers to the oldest Manager. If there are only Viewers/Analysts, the deletion is blocked until you assign a new Owner or delete the workspace.
• Stripe subscription: Active subscriptions are cancelled automatically.
• OAuth tokens: All encrypted platform tokens are purged.
• Sessions: All sessions are denied via the JWT denylist.
• User record: Your user account is permanently deleted. Related data cascades (sessions, memberships, notification preferences).
• Audit trail: The deletion request record itself is preserved with timestamps (using SetNull foreign keys) for GDPR compliance disputes — it survives user deletion.

Cancelling a deletion request

During the 30-day grace period, log in and navigate to Account Settings → Security. A banner shows the pending deletion with a "Cancel Deletion" button. Cancellation is immediate — your account returns to normal status.

Email Notifications

Blueprint sends 4 emails during the deletion lifecycle:

1. Confirmation request — contains the secure confirmation link
2. Deletion scheduled — confirms the request was confirmed and the 30-day countdown started
3. Deletion cancelled — if you cancel during the grace period
4. Deletion completed — final notification that the account has been permanently deleted

The confirmation email uses a POST-based confirmation (not a GET link) to prevent email client prefetch from accidentally triggering confirmation.