GDPR data management
GDPR data management
POST Export visitor data (GDPR data subject access request) — Exports all data associated with a visitor as a JSON attachment. Admin-only. Records a gdpr_requests entry.Was this page helpful?
Export visitor list as CSV
Exports visitors for the current organization as a CSV file. The format is fixed to CSV, and the export is streamed in batches for large visitor lists. Authenticate with an organization API key sent in `X-API-Key` or as a Bearer token and carrying the exact `export:read` scope. API-key access also requires the Automation & API module (`automation_api`). Authorized dashboard sessions remain supported where the route already permits them. The request is isolated to the authenticated organization. Resource and site/project identifiers must belong to that organization; out-of-scope identifiers are not disclosed. Always returns a streamed `text/csv` attachment for visitors in the authenticated organization. The route enforces the configured maximum export row count before writing the response body. Retry behavior: This read-only operation is safe to retry.
Export visitor data (GDPR data subject access request)
Exports all data associated with a visitor as a JSON attachment. Admin-only. Records a gdpr_requests entry. The export includes the visitor profile, conversations, visitor-authored messages, and CSAT responses for that visitor. Access requires an active organization administrator session or an organization API key with the `gdpr:write` scope. API-key calls also require the automation API module. Data is isolated to the authenticated organization; identifiers from another organization or site are not disclosed.