GDPR export and deletion
One-click export and erasure for any guest, plus a workspace-wide export for portability.
Onboard bakes GDPR rights into the guest CRM. Article 15 (right of access) and Article 17 (right to erasure) are both single-click actions on a guest profile. A workspace-wide export is available for data portability or migration to another system.
Per-guest export
- 1
Open the guest profile
Search by name, email or phone, then open the profile from the results. - 2
Click Export
TheExportaction in the profile menu generates a JSON and PDF bundle. The JSON is the raw data; the PDF is a human-readable rendering suitable for mailing to the guest. - 3
Download or email
The bundle is available for download for 24 hours. Optionally, Onboard can email the PDF directly to the guest at the address on file.
Full-restaurant export
From Settings → Data → Export a workspace owner can request a full export of every guest, reservation, voucher and audit-log entry for a single restaurant or for the entire workspace. The export runs asynchronously and a signed download link is emailed when the archive is ready (usually within a few minutes, longer for very large data sets).
Erasure
The Erase action on a guest profile scrubs all PII (name, email, phone, notes) while preserving anonymized analytical aggregates such as cover counts. Past reservations remain in reports as "deleted guest" entries, which keeps daily totals consistent.
Settings → Data → Retention.