Data protection laws (GDPR in the UK and EU, PDPA in Singapore, DPDP in India, PIPEDA in Canada and others) let people ask what you hold about them, or ask you to delete it. Admins handle these in Settings → Privacy requests.
- Enter the person's email address and click Find. You'll see the clients they're a contact for, and their leads, support tickets and portal logins.
- Download their data to send them a copy (a JSON file).
- Erase removes them: their leads and ticket contact details are anonymised, they're removed as a client contact, and their portal access ends.
Invoices, credit notes and signed proposals are kept, with their details, because tax and contract laws require you to keep them. The page tells you how many there are, so you can explain this to the person.