How mixpanel manage the data user deletion account request ?

Hi Sebastien C., Please stand by as I search the Mixpanel knowledge base for an AI-powered answer. I normally take about 15 seconds or so. In case AI cannot answer your question, feel free to reach out to Mixpanel support at mixpanel.com/get-support. If you have follow-up questions for this thread, please tag me again with your question: @kapa.ai <follow-up question> 👋

When a user requests deletion of their account data, Mixpanel provides tools to help you fulfill this request in compliance with privacy regulations like GDPR and CCPA. Here’s how Mixpanel manages user data deletion requests:

1. Who Can Submit Requests: Only organization owners and admins can access or submit end user export or deletion requests in Mixpanel. These requests can be made either through the Mixpanel interface or via the GDPR/CCPA API. You must generate an OAuth token from your Personal Settings to authenticate these requests Docs / Privacy / End User Data Management.

2. How to Submit a Deletion Request: - Via the Mixpanel UI: Go to Organization Settings > Data & Privacy, then use the “Request Deletion” form. You’ll need to specify the project and provide the distinct_id(s) of the user(s) whose data should be deleted. You can delete data for a single user or upload a CSV for multiple users (up to 500 per request). You can select whether the request is for GDPR or CCPA compliance. - Via API: Use the GDPR/CCPA API endpoint to submit a deletion request. You provide the project token, a list of distinct_ids, and the compliance type (GDPR or CCPA). The API requires an OAuth token for authentication. Example:

3. What Gets Deleted: All data associated with the provided distinct_id(s) is deleted, including events and user profile data. If you used the alias method, submitting either the alias or the distinct_id will delete all associated data Docs / Privacy / End User Data Management.

4. Processing Time: Deletion requests can take up to several weeks to process, though the API documentation notes it may take up to 30 days Docs / Privacy / End User Data Management.

5. Session Replay Data: Deletion requests for Session Replay use the same standard end user management process as event data Session Replay Privacy Controls.

6. Data Retention Policy:

Mixpanel automatically deletes events after a set retention period (2 or 5 years, depending on your plan and project creation date), but user data is retained for the duration of your active subscription unless deleted via the above methods GDPR Compliance: Data Retention Policy.

In summary, Mixpanel provides both UI and API-based workflows for account data deletion requests, ensuring all data tied to a user’s distinct_id is permanently removed in compliance with privacy regulations. Only authorized roles can perform these actions, and processing may take several weeks to complete.

ℹ️ Tip: Mention @kapa.ai in the thread for follow-ups or DM the app for 1-to-1 help.