Export, erasure, and closing the church
A person can be exported or erased. The whole workspace can be deleted. Audit logs are append-only.
Settings holds data export, person erasure, and workspace deletion. Donations are not edited away — corrections are reversing rows. Audit logs have no update or delete.
01
Export the church
Request an export from the data privacy / export control on Settings. It is built in the background by the same worker that sends messages — it will not delay a real send. Download from the private export when it is ready.
02
Erase a person
Erasure is for a genuine right-to-be-forgotten request. It is not merge, and it is not archive. Read the confirmation. Giving history is handled as reversing / anonymising according to the screen, not as a silent DELETE on donations.
03
Delete the workspace
Workspace deletion is the offboarding path. It is irreversible. Do not use it to “start over” a trial you can clear with Remove sample data.