Queues a GDPR data-export build for the authenticated user.

POST 
/gdpr/data/export

Stamps the request along with the chosen scope (DataOnly vs DataAndMedia — media inclusion bloats the bundle and slows the build, so the user decides). Bot picks it up and builds a single ZIP to a private CDN location. When the build finishes, the Bot stamps DataExportReadyUrl + DataExportExpiresAt and fires the GDPRRequestReady email. Re-requesting before the URL expires is a no-op success (avoids duplicate builds); after expiry, it kicks off a fresh build.

Request

Responses

200

OK

401

Unauthorized - missing or invalid credentials.

403

Forbidden - authenticated but missing required role or policy.