Skip to main content

​
Overview

The MoEngage GDPR / CCPA API ensures that all user data rights are respected and managed for compliance with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This API allows you to submit data requests, including the permanent erasure of personal data for specific users.
For detailed implementation guides on how MoEngage handles these regulations, refer to our GDPR Implementation and CCPA Implementation documentation.

​
GDPR API Endpoints

The compliance suite includes the following core functionality:

​
Supported Request Types

Request TypeDescription
ErasurePermanently deletes personal data associated with the specified user identities.

​
Supported User Identities

You can target users for data requests using the following identity keys:
  • id (Unique Customer ID)
  • email (User Email Address)
  • mobile (Phone Number)
  • user_secondary_id
  • google_advertising_id
  • advertising_identifier

​
Constraints & Limits

Important Note on Deletion: - Multiple users cannot be deleted in a single payload.
  • If an email ID associated with multiple user profiles is passed for erasure, all profiles associated with that email will be deleted.

​
Technical Limits

  • Max Request Size: 100 KB
  • Max Payload Size: 128 KB (Exceeding this returns a 413 Payload Too Large error)

​
FAQs

No. Multiple users cannot be deleted using this API in a single payload. You must send individual requests for different users unless they share the same email identity (see note above).
If multiple users have the same email ID and that email ID is passed in the erasure request, MoEngage will delete all users associated with that specific email ID.
The maximum payload size is 128 KB. If this limit is exceeded, a 413 error response will be sent.

​
Postman Collections

Test your compliance workflows using our pre-configured Postman collection. View Postman Collection →