Data Privacy & Compliance

flowchart LR
    U([User requests export]):::app
    REQ[RequestAccountExportAsync<br/>queues async job]:::svc
    Q[(Export job queue)]:::data
    BUILD[BuildAccountExportZipAsync]:::svc
    subgraph GATHER[Gather data - redacted]
        direction TB
        P[Profile - account]:::data
        N[Notifications]:::data
        C[Content]:::data
        A[Activity capped 10k]:::data
        B[Billing - card last4 and brand only<br/>full numbers and Stripe IDs excluded]:::sec
        L[Login history capped 5k<br/>IP geo browser OS]:::data
        F[User files]:::data
    end
    ZIP[(ZIP in Blob Storage)]:::data
    SAS[24h SAS URL<br/>POST api-downloads-export-account]:::sec
    DL([User downloads ZIP]):::app
    U --> REQ --> Q --> BUILD
    BUILD --> P
    BUILD --> N
    BUILD --> C
    BUILD --> A
    BUILD --> B
    BUILD --> L
    BUILD --> F
    P --> ZIP
    N --> ZIP
    C --> ZIP
    A --> ZIP
    B --> ZIP
    L --> ZIP
    F --> ZIP
    ZIP --> SAS --> DL
    ENC[Encryption<br/>AES-256 at rest - MySQL and Blob<br/>TLS 1.2+ in transit]:::sec
    ENC -.->|protects| ZIP
classDef app fill:#1f2630,stroke:#C0894E,color:#F3EFE8;
classDef svc fill:#241c14,stroke:#E2B583,color:#F3EFE8;
classDef data fill:#22201a,stroke:#C0894E,color:#EBD3AE;
classDef ext fill:#1b1f27,stroke:#5A616B,color:#C4C0B8;
classDef sec fill:#1d2733,stroke:#5cc8e0,color:#eafaff;