Data export, retention and erasure

• Personal data export. Every person can export their own data as JSON, for the rights of access and portability.
• Retention. Deleted items stay in a project's trash for a period the organization sets, from 7 to 365 days, then are purged.
• Erasure. Erasing a person anonymizes them in place, so histories stay consistent without naming them.
• Leaving the hosted service. An organization can be exported in full, then deleted after a grace period.