klaviyo-data-handling

# Klaviyo Data Handling ## Overview Handle profile data, PII, and privacy compliance with Klaviyo's Data Privacy API, GDPR right-to-deletion, CCPA requests, and safe logging patterns. ## Prerequisites - `klaviyo-api` SDK installed - API key with `data-privacy:write` scope (for deletion requests) - Understanding of GDPR/CCPA requirements - Audit logging infrastructure ## Klaviyo Data Privacy API Klaviyo provides a dedicated **Data Privacy API** for GDPR/CCPA profile deletion. When you delete a profile via this API, Klaviyo performs a full GDPR erasure -- the profile is permanently removed and cannot be recovered. ## Instructions ### Step 1: GDPR Profile Deletion (Right to Erasure) ```typescript import { ApiKeySession, DataPrivacyApi } from 'klaviyo-api'; const session = new ApiKeySession(process.env.KLAVIYO_PRIVATE_KEY!); const dataPrivacyApi = new DataPrivacyApi(session); /** * Request profile deletion via Klaviyo's Data Privacy API. * Accepts ONE identifier: email, phone_number, or profile ID. * Providing multiple identifiers returns an error. * * WARNING: This is irreversible. Profile is permanently erased. */ async function requestProfileDeletion(identifier: { email?: string; phoneNumber?: string; profileId?: string; }): Promise<void> { // Build the profile identifier (only ONE allowed) const profileData: any = { type: 'profile' }; if (identifier.email) { profileData.attributes = { email: identifier.email }; } else if (identifier.phoneNu...