Closed beta: Data Protection Plus is in closed beta and is only available in select regions.

This flow to erase customer data is in alpha testing stage, available only for select clients. Do not share this documentation with people outside of your company. If you do not have access yet, please refer to the Erasing customer data guide instead.

This feature is part of VTEX Shield, meaning additional fees may apply.

If you are already a VTEX customer and want to adopt VTEX Shield for your business, please contact Commercial Support.

If you are not yet a customer but are interested in this solution, please complete our contact form.

According to data protection policies, such as GDPR and LGPD, companies using customer personal data are required to delete collected information upon the customer's request. Data Subject Rights API allows stores using the PII data architecture to erase user data collected by Checkout, Orders, VTEX ID and Profile System, without depending on the VTEX Support flow described in the Erasing customer data guide.

To begin the data erasing process, make a POST request to the Erase customer data endpoint from the Data Subject Rights API. This action deletes a given customer's data collected in your store by Checkout, Orders, VTEX ID and Profile System.

Only orders with invoiced or canceled status are erased in this request.

A successful response is 200 OK with Completed status, and all items in the applications array should have the Deleted status.