Processing a Data Request

Once the Data Request is verified, the Processing stage starts. This means that illow starts calling all your Data Sources to carry out the actual deletion of data. You can set up a Data Source either to make it manual or automated. Let's check the flow for both configurations.

Manual Data Source

An email is sent to the email account provided by you when the Data Source was set up. This email lets you know that a specific user needs to be deleted from that tool (be it third-party or in-house). You can then either click on the "Done" button in the email or in the platform.

Once you click that button, you are done for this Data Source.

Automated Data Source

This is the way be recommend to set up Data Sources. If you connected your source via OAuth or API Key, then illow will send the request and take care of everything for you. You should only take action, if the deletion failed (after all the retries), since you might need to check permissions or credentials on your side.

Using the Custom API Data Source

If you are using Custom API, it means that you are integrating any API of your own or that we are not supporting out-of-the-box yet. Therefore, when setting up the Data Source you must provide the platform with the API URL and the API Key. Then illow will send a POST request of the following shape:

• Method: POST
• Endpoint: API URL provided by you
• Authorization header: Bearer {ApiKey}
• Body:

{
  "requestId": "the ID illow created for the Data Request",
  "email": "the user's email",
  "siteUrl": "the url you provided at illow for the Request Form used by the user",
  "siteId": "the ID illow created for your site and for the Request Form used by the user",

  // <extra information you set up in your Request Form>
  "firstName": "<string>",
  "lastName": "<string>",
  "phone": "<string>",
  "customFields": {
    "the question you wrote": "the value the user wrote"
  }
}

Asking for the CPF

If you need to ask for the user's CPF, a simple way would be to write "CPF" as a Custom Question in your Request Form. Then, you will receive the body:

{
  // ...
  "customFields": {
    "CPF": "the value the user wrote"
  }
}

Once this Custom API has finished the deletion of data, it is your responsibility to update the Data Source state at illow via API. This is done by sending a POST request:

• Method: POST
• Endpoint: https://api.platform.illow.io/request-processor/request/{requestId}/datasource/change-request
  • where {requestId} is the requestId you received in the original body sent by illow.
• X-API-Key header: API Key we provided you (different than the one you used to set up the Data Source).
• Body:

{
  "datasource": "customApi",
  "status": "finished" | "failed"
}