Erasing a customer's personal data
Sometimes a customer asks you to delete everything you hold about them. Privacy laws such as GDPR and the California privacy rules give people that right, with exceptions for records a business has to keep. FSM Navigator handles both halves for you: it removes the customer's personal details from your account and keeps your invoices, payments and signed paperwork intact for tax and accounting.
This is different from removing a customer. Removing a customer only hides them from your active list, and you can restore them later. Erasing is permanent: the name, contact details and addresses are gone and the customer can't be restored.
Erasing can't be undone
Once you confirm, the customer is removed from your lists straight away and their personal details are erased in the background. There is no restore. Make sure you're acting on a genuine request from the customer before you start.
Who can erase a customer
- Only an Owner can erase a customer.
- It works on the website only. The mobile app doesn't offer it, and you can't start it while you're viewing someone else's account.
- If you'd rather not do it yourself, contact FSM Navigator support. Our team can erase the customer on your behalf, and you still get the receipt.
If you haven't signed in recently, FSM Navigator asks you to confirm it's you (with your passkey, authenticator code, password or an emailed code) before the erasure starts.
Before you start: settle open items
You can't erase a customer while they still have open business with you. FSM Navigator checks for these and tells you which ones are in the way:
| Open item | What to do first |
|---|---|
| An invoice that is Generated, Sent, Partially Paid, Overdue or Disputed | Collect the payment, or void the invoice if it was raised in error. A disputed invoice has to be settled first. |
| Autopay that is still set up on a service agreement | Cancel the autopay. |
| An autopay payment that is still being processed | Wait for it to finish. |
| A service agreement that is still active, paused or in draft | Cancel the agreement, or let it expire. |
| Open jobs | Complete or cancel them. |
| Open work orders | Complete or cancel them. |
Erasing never closes, voids or changes an invoice for you. Invoices are your financial records, so the decision about each one stays with you.
Erase the customer
- Open the customer's detail page.
- In the Customer Information card, click Erase personal data.
- Read the summary of what will be erased and what will be kept.
- Type the customer's number (shown as Customer ID on the page) to confirm. If the customer doesn't have a number yet, give them one first by editing the customer.
- Click Erase and confirm it's you when asked.
The customer disappears from your lists at once. The rest of the work runs in the background, usually within a few minutes. You can close the window; the status in the dialog only shows you how far it has got.
When it finishes, FSM Navigator emails a receipt to the Owner who asked for it (or to every Owner, if our support team ran it for you). The receipt lists what was erased and what was kept, so you can tell the customer their request is complete. Nothing is sent to the customer's own address, because that's one of the things being erased.
If something goes wrong
If the erasure can't finish, you'll see a notice in your notification bell and our support team is alerted. The customer stays removed while we sort it out, and the erasure picks up where it stopped.
What is erased
- The customer record: name, email and phone. The record now reads "Erased customer" followed by the customer number.
- Addresses: street details are removed from every location. The state and ZIP are kept, because sales tax depends on them.
- Notes and free text: anywhere the customer's name, email, phone or address appears in notes, job descriptions, quotes, work orders and similar text, it's replaced with [removed].
- Photos and files: job photos, and work-order files marked as photos or "other", are deleted.
- Customer portal access: the customer's portal login for your company is removed. If the same person also uses the portal for another business on FSM Navigator, their access there isn't touched.
- Email and text history: their email address and phone numbers are removed from your sending records, and those numbers won't be texted again.
- Notifications about the customer, saved payment details held with Stripe, and their entries in search.
What is kept, and why
Some records have to stay, either because the law requires you to keep them or because you may need them to settle a claim.
- Invoices and payments stay exactly as they were: same amounts, same status. Everyday views and downloads now show the erased name instead of the customer's.
- A sealed copy of each invoice as it was issued, with the customer's original name and address, is kept for 7 years from the invoice date and then deleted automatically. It's stored encrypted and separately from your everyday records. Only an Owner can open it, from the invoice list, and every view is recorded in your activity history.
- Jobs, quotes and work orders stay in your records with the customer's details removed. Signed documents, signatures and the answers on signed forms are kept as proof of what was agreed.
- Your activity history is kept for security and archived after 36 months.
- Backups still hold a copy until they rotate out under your backup settings.
Outside FSM Navigator
- QuickBooks: if you sync with QuickBooks, update or remove the customer there yourself. FSM Navigator doesn't change your QuickBooks records.
- Stripe keeps its own record of past charges.
- Copies you already have, such as downloaded exports, emails in your own mailbox and printed papers, are outside FSM Navigator. Delete those too.
Frequently asked questions
Can I undo an erasure?
No. The personal details are permanently removed and the customer can't be restored. If the same person becomes a customer again, add them as a new customer.
Why is the Erase button refused even though the customer has nothing open?
Check for a draft or paused service agreement, or an autopay that was never cancelled. Both count as open. The message in the dialog lists exactly what's in the way.
Can I see the original invoice after the erasure?
Owners can open the sealed copy from the invoice's action menu with Legal copy (restricted). You'll be asked to confirm, and the view is recorded. The copy is a one-time download link that expires after five minutes.