DSAR-erase a sales-agent lead's PII (destructive)

POST 
/api/v1/chatbots/:chatbotId/sales-agent/leads/:leadId/dsar-erase

DESTRUCTIVE. GDPR DSAR hard-erase of a single lead's PII: scrubs the encrypted captured-fields envelope, HMAC hashes, and PII-adjacent geo (IP/region/city/timezone) to null while RETAINING the anonymous row (disposition, capturedAt, geo.countryCode) so aggregate metrics stay intact. Idempotent — a repeat erase on an already-erased lead returns 409 and preserves the original piiErasedAt (GDPR Article 17 audit-trail integrity). Owner/admin gated. Required scope: security:write.

Request

Responses

200

PII scrubbed; anonymous row retained.

400

Bad Request — invalid input

401

Unauthorized — missing or invalid API key

403

Forbidden — key lacks required scope

404

Not Found

409

Lead PII was already erased; the original piiErasedAt is preserved (idempotent no-op).

429

Too Many Requests — rate limit exceeded