GDPR data retention and right to be forgotten

Built-in GDPR data retention controls plus a self-service right to be forgotten flow. A public DPA form at /dpa lets customers request and download a data processing agreement without contacting support.