Activity log & deletion requests

Two admin tools that come up rarely and matter when they do: a record of what happened in your workspace, and the queue for customers asking you to delete their data.

Both live under your admin sidebar and are workspace admins only.

Activity log

Activity shows what has happened in your workspace, newest first — useful for “did that invite actually go out?”, “who deleted that shoot?”, and answering a customer who says they never received something.

Events are grouped by what they’re about:

Customer-driven : Invite sent · Invite clicked · Account created · Gallery viewed · Media downloaded · Purchase completed

Shoots & media : Shoot created · Shoot updated · Shoot deleted · Media uploaded · Media deleted

Packages : Package created · Package updated · Package deleted

People : Customer invited · Customer removed · Team member invited · Team member removed · Team member role changed

The customer-driven events are the ones that answer most questions. Invite sent followed by no Invite clicked usually means the email is sitting in a spam folder — worth checking before you re-send.

Note

The activity log records actions, not content. It shows that a shoot was updated, not what changed inside it.

Deletion requests

A customer can ask you to erase their personal data. Those requests arrive under Deletion requests, and it’s your queue rather than ours — the data is yours to hold and yours to remove.

Each request moves through:

Pending : Newly received, not yet looked at.

In progress : You’ve marked it as being worked on. Use this when you need to check something before erasing — an outstanding order, or an agreement about how long you keep work.

Completed : The data has been erased.

Rejected : You’ve declined, with a reason. Legitimate in some cases — a legal obligation to retain records, for instance — and the reason is kept with the request.

You can add handling notes at any point. They stay on the request as a record of what you decided and why, which is exactly what you want if anyone asks later.

Before you erase

Erasing is permanent and immediate. There is no undo, and we can’t recover the data afterwards — that’s what makes it a real erasure rather than a hidden flag.

You’ll be asked to type the customer’s email address to confirm. That’s deliberate friction on an irreversible action, not a formality.

Worth checking first:

• Outstanding orders. Erasing a customer with an unrefunded order removes the person the order belongs to. Settle the money first.
• Whether they meant their account or their photos. People often ask to be “removed” when they mean “stop emailing me”. It’s worth one clarifying message before doing something you can’t take back.
• What you’re obliged to keep. Tax and accounting rules may require you to retain transaction records regardless of the request. Rejecting with that reason recorded is a legitimate answer.

What this doesn’t cover

This queue is for your customers’ data in your workspace.

Deleting your own workspace is a different thing, covered in Data, privacy & deletion.

If a customer contacts us directly, we’ll point them at you — we hold the data on your behalf and you’re the one who decides.