Activity log & deletion requests

Two admin tools that come up rarely and matter when they do: a record of what happened in your workspace, and the queue for customers asking you to delete their data.

Both live under your admin sidebar and are workspace admins only.

Activity log

Activity shows what has happened in your workspace, newest first. You can filter it by Event type, User, and a From and To date. It’s useful for “did that invite actually go out?”, “who deleted that shoot?”, and answering a customer who says they never received something.

Events are grouped by what they’re about:

Customer-driven : Invite sent · Invite clicked · Account created · Gallery viewed · Media downloaded · Purchase completed · Share link created · Share link revoked

Shoots & media : Shoot created · Shoot updated · Shoot deleted · Media uploaded · Media deleted

Packages : Package created · Package updated · Package deleted · Discount code created · Discount code deactivated

People : Customer invited · Customer removed · Team member invited · Team member removed · Team member role changed · Workspace owner changed · Team member profile updated

Settings & admin : Settings updated · Super-admin impersonation started · Super-admin impersonation ended

The customer-driven events are the ones that answer most questions. Invite sent followed by no Invite clicked can mean the email is sitting in a spam folder — worth checking before you re-send.

Deletion requests

A customer can ask you to erase their personal data. Those requests arrive under Deletion requests (the page is titled Customer deletion requests), and it’s your queue rather than ours — the data is yours to hold and yours to remove.

Each request shows a 30-day deadline and the page counts how many are open and how many are overdue. The Open tab is your working queue; the History tab keeps completed and rejected requests as an audit trail.

Each request has one of these statuses:

Open : Newly received, not yet looked at.

In progress : You’ve marked it with Mark in progress. Use this when you need to check something before erasing — an outstanding order, or an agreement about how long you keep work.

Completed : You clicked Delete now and the customer’s data was erased. The customer is emailed that it’s done.

Rejected : You’ve declined with Reject. Legitimate in some cases — a legal obligation to retain records, for instance. Anything you typed in the handling notes is included in the email the customer gets, so write it for them to read.

A request that’s been handled can be put back in the queue with Reopen.

You can add handling notes (optional) at any point. They stay on the request as a record of what you decided and why, which is exactly what you want if anyone asks later.

Before you erase

Erasing is permanent and immediate. There is no undo, and we can’t recover the data afterwards.

Delete now removes the customer from your workspace, deletes the galleries where they’re the only client, and anonymizes their account if this was their only workspace. Order and payment records are kept as financial history. Requests from your own team members can’t be erased this way; remove them from the Team page instead.

You’ll be asked to type the customer’s email address to confirm. That’s deliberate friction on an irreversible action, not a formality.

Worth checking first:

Outstanding orders. The order and payment records stay, but the person they belong to is removed or anonymized. Settle the money first.
Whether they meant their account or their photos. People often ask to be “removed” when they mean “stop emailing me”. It’s worth one clarifying message before doing something you can’t take back.
What you’re obliged to keep. Tax and accounting rules may require you to retain transaction records regardless of the request. Rejecting with that reason recorded is a legitimate answer.

What this doesn’t cover

This queue is for your customers’ data in your workspace.

Deleting your own workspace is a different thing, covered in Data, privacy & deletion.

If a customer contacts us directly, we’ll point them at you — we hold the data on your behalf and you’re the one who decides.