Privacy Center

The Privacy center makes it easy to handle data access and data removal requests. Requests must be submitted for every app separately and must provide a valid data subject identifier (e.g. customer-level or device-level ID). You can also use Batch REST API to do the same thing (know more on the GDPR API):

GDPR request information is available via our Dashboard and APIs for 20 to 30 days after request creation. After this time, you will not be able to query its status anymore. Pending requests are always available.

The dashboard also shows the status of all your data access/removal requests. You can also filter these requests by origin (Dashboard or API):

Requesting Data Access

As soon as the request is completed, users with the Privacy and Administrate rights will receive an email (e.g. "[BATCH] Your GDPR request [request token] has been processed") with a link to an archive containing all the data Batch has stored for the provided identifier (e.g. list of sent notifications, list of installs attached to the id along with the data collected for each install, etc).

That file can also be downloaded from the Privacy center:

Requesting a Data Removal

All the data Batch has stored for the provided identifier will be deleted.

Batch will blacklist the ID for one month after the data removal. If you request a data removal for a specific ID and your user keeps or reinstall the app, Batch will not accept the data coming from that install. Batch will also discard the data sent from the Profile API for that specific ID.

The Privacy center requests applies to the installation base that powers Push V1, siloed by platform (iOS, Android, Web) but also to Profiles leveraged to send emails, SMS and pushes via Push v2.