Skip to main content

Export all data held about an end user

GET 
/v1/applications/:id/users/:userId/export

Returns a machine-readable JSON bundle of everything stored about one end user, for answering a GDPR Art. 15 (access) or Art. 20 (portability) request.

Zyphr is a processor: we do not answer data subjects directly. This endpoint gives you, the controller, the data needed to respond to your own end user.

Credentials are deliberately excluded and are listed in export_metadata.excluded: password hashes, session refresh-token hashes, MFA secrets, OAuth access/refresh tokens and WebAuthn public keys. These are authentication artifacts rather than personal data about the subject, and including them would turn this endpoint into a credential-exfiltration path.

Message history is capped at the 1,000 most recent messages; export_metadata.message_history_truncated reports whether the cap was hit.

Request​

Responses​

Export bundle generated