Erase Customer (GDPR)

Use this endpoint to fulfill a GDPR (or similar privacy law) right-to-erasure request from one of your end-customers. It anonymizes every piece of personal data Anderro stores about that customer, while preserving the structural and financial records needed for accounting and affiliate commission integrity.

What gets anonymized

For every tracking event in your SaaS product matching the given email:

• customer_email is set to null
• provider_customer_id is set to null
• ip is set to null
• user_agent is set to null
• visitor_id is replaced with a random anon_* token
• anonymized_at is stamped with the current time

For every webhook delivery payload that referenced the email:

• The data.customer_email field inside the stored payload is rewritten to null

For a user with the matching email, the affiliate profile's country_last_ip is cleared. This profile is shared across products. Matching customer emails in audit metadata for this product's commissions and tracking events are replaced with [erased]; affiliate fields are preserved.

What is preserved

Financial and structural fields are kept intact so commissions and payouts remain auditable:

• amount_cents, event_type, created_at, partnership_id, saas_product_id on tracking events
• All commissions and payouts rows referencing the anonymized event

Request body

Example request

curl -X DELETE https://anderro.com/api/v1/customers \
  -H "Content-Type: application/json" \
  -H "x-api-key: sk_your_secret_key" \
  -d '{
    "email": "[email protected]"
  }'

Responses

{
  "data": {
    "anonymized": {
      "tracking_events": 3,
      "webhook_deliveries": 2,
      "affiliate_profiles_scrubbed": 1
    }
  }
}

{
  "error": "Validation failed",
  "details": {
    "fieldErrors": {
      "email": ["Invalid email address"]
    },
    "formErrors": []
  }
}