>It may be convenient, but under the GDPR is illegal. When an user deletes an account, all the personal data associated with that user must be deleted There's

>It may be convenient, but under the GDPR is illegal. When an user deletes an account, all the personal data associated with that user must be deleted There's a grace period of 30 days. We hard-remove after 2 weeks allowing a user to change their mind if they deleted it by accident. More than enough.