Your data

Exporting

Under Your data, an admin exports as JSON (everything: members, invitations, accounts, slots, posts, logs, images, keys, credits) or as CSV, which holds only the posts and opens in a spreadsheet. The CSV imports back as is.

No secret ever leaves in an export. Not network access tokens, even encrypted, not API key fingerprints, not invitation link fingerprints, not passwords. An export goes out by email, sleeps on a laptop, ends up in a shared drive: if it held what is needed to publish in your name, it would no longer be an export, it would be a copy of the keys.

The export is done from the browser, by an admin. An API key cannot obtain it, even a valid one, even an admin one.

Deleting an organization

An admin deletes it by typing its exact name. Erased: posts and their logs, connected accounts and their access, slots, images, API keys, members and invitations. The subscription is cancelled along with it.

At our payment provider, it depends on whether you ever paid. If you never paid anything, your customer record there is deleted too. If you did, the record and its invoices stay with the payment provider for ten years: that is an accounting obligation, and the privacy policy says so.

It is immediate and permanent. There is no grace period and no trash can. Export first if you want to keep anything.

One thing survives: a log line attesting that the deletion took place, with its date and the number of items erased. It holds no content anymore.

Deletion is refused as long as a subscription is still live at our payment provider: cancel it first.

Deleting your own account

Anyone deletes their own by typing their email address. The posts they wrote stay in the organization, without their name.

It is refused if you are the last admin of an organization: appoint somebody else, or delete the organization.