Merchant-initiated GDPR Art. 17 erasure of a personal invite whose addressee never registered
POST/api/v1/programs/:programId/invites/:inviteId/erase
Revokes every invite addressed to the same email across the merchant's programmes, nulls the stored address and scrubs ip/user_agent from the invite events. Use participant erasure once the person has registered. Requires typed confirmation phrase "DELETE".
Request
Responses
- 200
- 400
- 401
- 403
- 404
- 409
- 429
Erasure completed
Confirmation phrase missing or invalid (CONFIRMATION_INVALID)
Unauthorized
Access denied (ACCESS_DENIED) or example programme (EXAMPLE_PARTNER_READONLY)
Invite not found (INVITE_NOT_FOUND)
Already erased (ALREADY_ERASED), not a personal invite (INVITE_NOT_PERSONAL) or already redeemed (INVITE_HAS_PARTICIPANT)
Rate limit exceeded