Dev.to
7/11/2026

GDPR retention and erasure for an agent mailbox
Short summary
A technical walkthrough for implementing GDPR retention and erasure on Nylas Agent Account mailboxes. Retention is configured via control-plane policy settings that auto-delete aged mail, while erasure uses data-plane DELETE calls to hard-delete specific messages on request. The author emphasizes that derived copies in databases, logs, and vector stores must be purged separately.
- •Retention is a control-plane policy setting with inbox and spam time limits
- •Erasure requires hard-deleting individual messages via DELETE with hard_delete=true
- •Derived data in your own DB, logs, and vector stores must be purged separately
Generated with AI, which can make mistakes.
Is this a good recommendation for you?



