Deleting your account

Only the account owner can delete an account, and deletion is designed to be hard to trigger by accident and reversible for a full month. This page walks through exactly what happens.

How to delete your account

1. Open Settings and scroll to the Danger zone.
2. Click Email me a confirmation code. Sill emails a single-use code to the owner’s verified email address. (Because the code goes to your email, someone with only your open dashboard cannot delete the account.)
3. Enter the code, then type the confirmation phrase delete my account exactly.
4. Click Confirm account deletion.

The code expires in 10 minutes. If it expires or you mistype it, just request a new one — a wrong code never signs you out.

What happens right away

The moment you confirm:

• Your sites go offline — agents can no longer reach them.
• Everyone is signed out of the account, including you.
• A 30-day grace window starts. Nothing is permanently erased during this window.

You will land back on the sign-in screen with a note confirming the account is scheduled for deletion.

Changed your mind? Cancel within 30 days

Recovering is simple: sign back in with your usual magic link at any time in the 30 days.

As soon as you are back in, a banner appears at the top of the dashboard:

Deletion scheduled — this account is scheduled for permanent deletion in N days. Cancel now to keep it and bring your sites back online.

Click Cancel deletion & restore. Your sites that were taken offline come back automatically, and the account returns to normal. You can also cancel from Settings → Danger zone.

After the 30 days

Once the grace window closes, deletion is permanent and cannot be undone. At that point:

• All personal data is erased — owner and team member identities, connector credentials, buyer details, and contact information.
• The signed, tamper-evident audit records are kept in anonymized form. These records are the product’s integrity backbone and are designed to hold no personal data; keeping them lets the audit chain stay verifiable without retaining anything about you.
• Encrypted backups roll on a 35-day cycle, so anything erased from the live system is also gone from the most recent backup within about a month.

At a glance

Stage	When	State
Request	You confirm with the emailed code	Sites offline, everyone signed out, grace clock starts
Grace window	Next 30 days	Reversible — sign back in and cancel to restore
Permanent deletion	After 30 days	Personal data erased; anonymized audit records retained

See also

• Users and roles — who can do what; only the owner can delete an account
• Security — the retention and deletion posture in full