Privacy and security
When a customer asks for their data, or to be forgotten
Export everything as one file; erase with one confirmation. Both are logged with the details masked.

Privacy and securityRead it in the appThe same article opens from Help inside app.dotask.io, beside the screen it describes.
GDPR (EU/UK) and PDPA (Malaysia, Singapore) give a customer the right to see what you hold about them and to have it removed. doTask answers both from the same place.
- Find the person under Customers → All contacts, or open one of their conversations and look at the Privacy block in the side panel.
- Export data downloads one JSON file: contact details, every conversation and message, files, bookings, email tickets, ratings and website sessions. Owners and admins.
- Erase removes the contact, conversations, messages, files, tickets and website sessions. Bookings keep their slot with the customer details replaced by “Erased”. Type ERASE to confirm. Owner only; it cannot be undone.
- Settings → Privacy and data keeps a record of every export and erasure with the person’s details masked (z***@example.com), so you can show a regulator what was done without the log becoming a copy of what you erased.
- Not covered: Meta’s own copies of WhatsApp and Instagram messages, and the customer’s phone. Say so if they ask.