[relaybell docs › Audience › Compliance / GDPR](https://relaybell.com/docs/compliance) · [All docs as Markdown](https://relaybell.com/docs.md) · [Index for AI assistants](https://relaybell.com/llms.txt)

# Compliance / GDPR

> GDPR/CCPA: export or erase one subscriber, consent records, data retention.

relaybell records consent (time, page, policy version) on opt-in. For data-subject requests:

- `GET /api/v1/subscribers/:externalId/data` — export everything held about a subscriber (right to access). The id is your `externalId`, or relaybell's subscriber id; an unknown one answers `404 not_found`.
- `DELETE /api/v1/subscribers/:externalId` — erase all of it (right to erasure): `{ ok: true, erased: true, subscriberId }`.
- Set a **retention window** (Settings → Privacy) to auto-prune old event logs. See our [Privacy Policy](https://relaybell.com/privacy) and [DPA](https://relaybell.com/dpa).