Skip to content
Pathwatch Docs

Data export & GDPR delete

PathWatch exposes self-service data export and deletion. Both flow through the WebUI and the REST API — no support ticket needed.

Exporting check data

Per-monitor results are exportable as CSV or JSON from the monitor detail page → Export → CSV / JSON. The download includes:

  • Each check result row (timestamp, status, duration, region, error message).
  • The monitor configuration snapshot.

For org-wide bulk export, use the REST API endpoints listed in the API reference with the appropriate read scopes.

Exporting the audit log

Business plan only. Settings → Audit log → Export opens a dialog with optional date / action / actor filters and CSV or JSON output. See Audit log.

Exporting your account

Settings → Account → Export my data triggers a full export of data attributable to your user across every org you’re a member of:

  • Profile (email, name, OAuth provider links).
  • Audit log entries authored by you.
  • API keys created by you (hashed; the raw key was already irretrievable).
  • Sessions log.

The export is generated asynchronously and emailed to you as a download link valid for 7 days. The link is single-use; we don’t keep the export on disk after you’ve downloaded it.

Deleting your account

Settings → Account → Delete account schedules deletion with a configurable grace period (default 30 days). During the grace window:

  • Your sessions stay valid; you can sign in and cancel the deletion.
  • Monitors and data continue to operate normally.
  • Your personal org is included in the deletion.

After the grace period expires, an automated job runs:

  1. Cancels every Paddle subscription tied to orgs you own.
  2. Cascade-deletes your personal org and every team org where you’re the sole owner.
  3. Removes you from team orgs where you’re not the sole owner (other members keep working).
  4. Hard-deletes your user record, sessions, OAuth links, API keys.

Audit log entries you wrote on team orgs are retained (per compliance) but the actor pointer becomes a tombstoned deleted-user reference rather than your name + email.

Deleting a team org

Team orgs delete independently of users. Settings → Org → Delete organisation:

  1. Cancels Paddle subscriptions tied to the org.
  2. Schedules deletion with the same grace period.
  3. Notifies every member by email.

During grace, the org is read-only — checks pause, status pages return 503, members can still sign in to retrieve data.

After grace expires the org and everything in it is hard-deleted.

GDPR / right to be forgotten

EU residents can request deletion at any time via the self-service flow above. The grace period satisfies the “right to withdraw” requirement (you can cancel the deletion mid-flight). After the grace period, deletion is irreversible.

If you need a verifiable proof of deletion for your own compliance audit, contact support after the grace period — we’ll issue a signed attestation.

Data residency

Application data — user accounts, monitor configuration, check results, audit log — is hosted in the EU. Cloud check runners execute worldwide for region coverage; the results they record are streamed back to the EU origin for storage regardless of where the check ran. See techdocs.pathwatch.app/security/sub-processors (subscriber-gated) for the full sub-processor list.