User Data Export and Account Deletion

Specify a data export and an account deletion flow. Export must be complete enough to be honest. Deletion must have a defined cascade. PRODUCT User data lives in: [TABLES] Files in: [BUCKET] Third parties that also have data: [EMAIL TOOL, ANALYTICS] Legal hold exception: [YES | NO] Soft delete today: [YES | NO] EXPORT 1) The job: authenticated request, rate limited, emailed link that expires, file contains the categories I listed. Format: JSON plus a CSV per table where that is readable. 2) What is excluded and why (other users' content, server logs beyond [N] days). 3) How we prove the export belongs to the requester. DELETION 1) The distinction between deactivate and delete. 2) The order of deletes and the foreign keys. Anonymize rows we must keep for other users (comments become "deleted user") versus hard-delete rows that are only theirs. 3) Files, sessions, and the third parties: the API call or the manual step, listed honestly. 4) The confirmation email and the grace period: [DAYS OR NONE]. 5) A test plan on a fixture user. Do not claim a third party is deleted if I did not name an API for it. Mark those as manual.