Export or Delete End User Data

Mixpanel supports account holders’ ability to request the deletion or export of end user data.

Requests can be submitted through either a form found in a Mixpanel project or through a personal data export and deletion API that is available here.

Only organization owners and admin can access or submit end user export or deletion requests.

These tools can be used to exercise Right to Access, Right to Portability, and Right to be Forgotten for end users or “data subjects” as part of the General Data Protection Regulation (GDPR). Learn more about GDPR here.

These tools also can help satisfy requirements stated in the California Consumer Privacy Act (CCPA). Learn more about CCPA here

View this article in the Help Center to view how to delete account usage data.

Requests to export or delete end user data can take multiple weeks to process. 

Gather the Project Information and Distinct_ids

Mixpanel exports or deletes end user data according to the user's distinct_id. To export or delete end user data, first select a project that you own and collect the distinct_id of the user(s). This Help Center article contains more information about locating the distinct_ids for users in projects.

Like all data in Mixpanel, the distinct_id can be custom specified in a tracking implementation. As this is the case, it is necessary to ensure that any provided distinct_id is accurate and stored in a project. Any incorrect identifiers submitted as part of export or deletion requests will result in inability to process the request.

It is possible to submit a request from Mixpanel once you gather the distinct_ids of end users requesting exports or deletions.

It is possible to submit either the end user’s alias or their distinct_id as part of a deletion request. All data associated with a submitted alias will be deleted. In addition, all data associated with the distinct_id(s) that the alias maps to will be deleted.

Submit Requests via API

Mixpanel accepts requests to export or delete personal data via API. Refer to the documentation on Managing Personal Data for information regarding access to the APIs and submitting personal information export or deletion requests.

Accessing Data & Privacy

To access the "Data & Privacy" modal containing the end user data request form:

  1. Navigate to "Data & Privacy" by clicking on your initials in the top right of Mixpanel and selecting the name of the organization you are a part of. This will take you to the organization settings.
  2. Select Data & Privacy on the left hand side.

OrganizationsDataPrivacy.gif

Exporting User Data

You must submit an export request to export end user data. This is done to satisfy a GDPR right to access request from your users.

  1. In the “Data and Privacy” section, click Request Export.
  2. In the “Export User Data” box:
    • Select the either CCPA or GDPR under type of export.  
    • Select a project in the "Project" dropdown.
    • Under “User Data To Export”, select to export data for a single user or multiple users.
       - For a single user, provide the distinct_id of the user.
       - For multiple users, upload a list of distinct_ids as a .csv file. There is a limit of 2000 Users.
  3. Click Submit Request. Note that requests can take multiple weeks to process.

    Screen_Shot_2020-01-02_at_10.59.04_AM.png

Deleting User Data

You must submit a deletion request to delete end user data. This is done to satisfy a GDPR right to erasure request from your users. 

  1. In the “Data and Privacy” section, click Request Deletion.
  2. In the “Request User Data Deletion” box:
    • Select the either CCPA or GDPR under type of export.  
    • Select a project in the "Project" dropdown.
    • Select to delete data for a single user or multiple users.
       - For a single user, provide the distinct_id of the user.
       - For multiple users, upload a list of distinct _ids as a CSV file. There is a limit of 2000 users per request.
  3.  Click Submit Request. Note that requests can take up to several weeks to process.

Screen_Shot_2020-01-02_at_10.59.42_AM.png

GDPR Requests

GDPR requests are specifically designed to satisfy requirements as outlined in the General Data Protection Regulation.

Export

A GDPR export contains all data connected to the requested distinct_id. 

Deletion

A GDPR deletion includes all data connected to the requested distinct_id. 

CCPA Requests

CCPA requests are specifically designed to satisfy requirements as outlined in the California Consumer Privacy Act.

Export

A CCPA export contains all data from the previous year connected to the requested distinct_id. 

Deletion

A CCPA deletion includes all data connected to the requested distinct_id. 

Disclosure types

There are three different disclosure types as outlined in the CCPA. To export or delete everything, you can select “Data” as the disclosure type. Select “Categories” to export or delete the data table headers. Select “Sources” to export or delete data connected to the means of data collection.

Opt Out Users

Deleting data from Mixpanel will remove it permanently, but it will not prevent the data from being collected moving forward. If you wish to prevent personal data from being sent to Mixpanel, this logic must be built into a tracking implementation. See here for more information about opting users out of tracking.

Did this answer your question?

Comments

0 comments

Please sign in to leave a comment.