Privacy requests

Privacy requests

When someone asks your organisation to delete their personal data, Settings → Privacy requests finds that person in every tool you've connected to Moral Fabric and deletes them where the tool allows it. Owners and admins handle requests. Everyone else sees who to forward them to.

Handling a request

    Open Settings → Privacy requests and enter the person's email address.
    Each connected tool gets its own row. Most answer within a second; Typeform reads every form and can take half a minute.
    Where a row shows Delete, click it and type the email again to confirm. Moral Fabric asks the tool to delete the person, then checks again.
    Where a row shows Open [tool], that tool can't delete through its API. Follow the steps under the row.
    Click Copy confirmation email and send it to the person. It lists the tools they were removed from.
The law gives you one month from the request to reply.

https://slite.com/api/files/oFjMLI6JpWljED/privacy-requests.png?apiToken=eyJhbGciOiJIUzI1NiIsImtpZCI6IjIwMjMtMDUtMDQifQ.eyJzY29wZSI6Im5vdGUtZXhwb3J0IiwibmlkIjoiZ1cyRFQwY01oWFhfRDQiLCJpYXQiOjE3OTIxOTk2OTQsImlzcyI6Imh0dHBzOi8vc2xpdGUuY29tIiwianRpIjoiZ1NZa3BzMVBTdEtkdXgiLCJleHAiOjE3OTQ3OTE2OTR9.nwgC7ppurNa5UGoXFojyOJ-Ws0Z_mH3oz7r7u_RvWe4

What happens to the data

  • The email address is used for that one search and then discarded. It is never written to our database, our logs or our error reports.
  • The search runs live: our server asks each tool directly, using the connections you set up in  Integrations⁠ . The result reflects what the tool holds at that moment.
  • The results say where the person is found, like "Subscriber since 25 Sep 2026" or "2 form responses". Donation amounts, form answers and other details stay in the tool.
  • Moral Fabric's own copy is the anonymous profile in  Community⁠ : a scrambled fingerprint of the email and a made-up name. The lookup scrambles the address you type the same way and compares the two. The Moral Fabric row deletes that profile.
  • The deletion log records who deleted, when, and from which tools. It holds no email address or fingerprint, so an entry can't be traced back to the person.

What each delete does

Tool
What happens
Mailchimp
Permanently deletes the contact from every audience. Mailchimp then blocks re-importing the address; the person can still sign up again themselves.
Circle
Deletes the member and everything they posted.
Typeform
Deletes every response that contains the address.
MailerLite
"Forgets" the subscriber: removed from all groups at once, personal data wiped within 30 days.
Moral Fabric
Deletes the anonymous Community profile.
Donorbox, Luma
Found automatically, deleted by hand in the tool. Donorbox may have to keep donation receipts for tax reasons.
Mollie, Zoom, Hivebrite
Checked by hand. The row gives the steps.

Who can use it

Owners and admins of the workspace. Moral Fabric staff follow the same rule: they need to be a member with an admin role, visible in your Members list. Support access through impersonation can't look people up or delete them. See  Who can see your data⁠ .

Other places to check

The page covers the tools connected to Community. Personal data can also sit in your email inbox, shared drives, spreadsheets and tools you haven't connected. Check those by hand before you send the confirmation.