PII Export & Delete Workflow (GDPR-ready)

[rohitdash08]

Feature

Allow users to export and permanently delete personal data.

Why This Matters

Privacy compliance & trust.

Acceptance Criteria

• Export package generation
• Irreversible deletion workflow
• Audit trail logging

[kumargope]

"Hi @rohitdash08, I'd like to work on this issue. I understand the GDPR requirements for PII Export and Irreversible Deletion. I will be implementing the export logic and the deletion workflow with proper audit logging. Please assign this to me."

[rohitdash08]

@kumargope you can proceed

[flowerjunjie]

Hi! I'm interested in working on this GDPR-ready PII Export & Delete Workflow feature.

Could you clarify:

1. What is the bounty amount for this task?
2. Is there a BOUNTY.md or similar file with reward details?

I've just completed the Webhook Event System implementation (#77) and can implement this feature efficiently once the bounty details are confirmed.

Thanks!

[WuXieSec]

I can take this next as a compliance-focused implementation (export package + irreversible delete + audit trail).\n\nBefore I start, please confirm the bounty amount and payout method for #76 so scope and priority are aligned.

[rohitdash08]

/bounty 500

[algora-pbc]

💎 $500 bounty • Rohit Dash

Steps to solve:

1. Start working: Comment /attempt #76 with your implementation plan
2. Submit work: Create a pull request including /claim #76 in the PR body to claim the bounty
3. Receive payment: 100% of the bounty is received 2-5 days post-reward. Make sure you are eligible for payouts

❗ Important guidelines:

• To claim a bounty, you need to provide a short demo video of your changes in your pull request
• If anything is unclear, ask for clarification before starting as this will help avoid potential rework
• Low quality AI PRs will not receive review and will be closed
• Do not ask to be assigned unless you've contributed before

Thank you for contributing to rohitdash08/FinMind!

Attempt	Started (UTC)	Solution	Actions
🟢 @alexchenai	Apr 03, 2026, 08:09:51 AM	#750	Reward
🟢 @noxxxxybot-sketch	Mar 08, 2026, 02:19:27 PM	#337	Reward
🟢 @MCH-Strategies	Mar 08, 2026, 06:17:25 PM	WIP
🟢 @lucascrespo23	Mar 09, 2026, 03:50:48 AM	#345	Reward
🟢 @CorradoZDeLuca	Mar 10, 2026, 05:17:32 PM	#357	Reward
🟢 @Mohye24k	Apr 13, 2026, 10:53:35 AM	#860	Reward
🟢 @kalilynux655	Mar 14, 2026, 04:21:18 PM	#402	Reward
🟢 @lalalic	Mar 15, 2026, 12:42:53 AM	#415	Reward
🟢 @TallowX92	Mar 15, 2026, 02:25:24 AM	#424	Reward
🟢 @sinatragianpaolo-oc	Mar 15, 2026, 11:29:11 PM	#390	Reward
🟢 @tarai-dl	Apr 16, 2026, 05:02:01 PM	#905	Reward
🟢 @qiridigital	Mar 16, 2026, 08:31:43 PM	#464	Reward
🟢 @wildcattrio	Mar 18, 2026, 10:29:17 PM	#503	Reward
🟢 @Kasionchen	Apr 20, 2026, 04:38:52 PM	#919	Reward
🟢 @Ig0tU	Mar 20, 2026, 06:05:03 PM	WIP
🟢 @selenaalpha77-sketch	Mar 25, 2026, 08:30:41 PM	WIP
🟢 @chengyixu	Mar 26, 2026, 06:37:40 PM	#661	Reward
🟢 @ElromEvedElElyon	Mar 27, 2026, 02:33:37 AM	WIP
🟢 @rainlee	Mar 27, 2026, 03:39:48 AM	WIP

[rohitdash08]

@kumargope, any update on this?

[rohitdash08]

@flowerjunjie @WuXieSec , mentioned the bounty amount and payout method will be wallet transfer only.

[noxxxxybot-sketch]

/attempt #76

Implementation plan:

1. Data Export Package

• Collect all user PII (profile, transactions, budgets, goals, accounts) into a structured JSON + CSV export
• Generate signed download URL (15min expiry)
• Trigger async job to prevent timeout on large datasets

2. Irreversible Deletion Workflow

• Soft-delete with 30-day grace period, hard-delete after confirmation
• Two-step confirmation: email verification required before delete executes
• Cascading delete across all tables (profile, accounts, transactions, goals, budgets, audit logs except GDPR logs)

3. Audit Trail Logging

• Log every export request and deletion event with timestamp, IP, user agent
• GDPR-compliant audit logs retained for 7 years, exempt from deletion
• Admin dashboard view for audit trail

ETA: I will have a PR up shortly.