Three questions, answered in the order people ask them: how do I get my work
out, what happens if I leave, and how long do you keep things.
Exporting everything you own
On the account page, Export my data builds a zip and emails you a
link. The link reaches only the address on your account and works for 7
days; after that the file is deleted. One export at a time: asking again
within ten minutes says the first is already on its way. The zip contains:
| File | Contents |
|---|---|
profile.json |
Your name, email, sign-in method, organizations and spaces with your role in each |
pages/ |
Every research page you own, as markdown, with each cited value as a numbered footnote carrying its transaction hash; the images and files those pages hold are under pages/files/, where the markdown links them |
comments.json |
Your comments on research pages |
annotations.json |
Your transaction annotations and value notes |
citations.csv |
Every value you cited, with block, transaction hash, log index, and its verification state |
“Own” means a page you are the owner of, or one inside a project you
created. Other people’s work in spaces you share is theirs, and is not in
your export. A single page can also be exported on its own, with the data
behind it, from the page’s menu (see Research pages).
Deleting your account
Also on the account page: type your current password and press Delete my
account (the new app, /app/account, asks the same). A wrong or missing
password deletes nothing and says so. The rule, in full, so there is nothing
to guess:
Deleted at once. Your profile, password and second factor. Your personal
organization, with its API keys, webhook endpoints and open invitations.
Your personal space and every project in it: pages, their version history,
comments on them. Any other space in which you were the only remaining
member, likewise. Your memberships of every organization and space. Your
notifications, alerts, saved queries and watchlist. Your data requests and
their export files.
Kept. Work you created in a space you share with other people: projects,
pages, comments, annotations, value notes and citations stay with the space,
shown as by a deleted user, because your colleagues’ pages may cite them.
Billing records of an organization you administered stay for as long as tax
law requires. Rows in the audit log stay for the log’s retention period, with
the actor recorded as a deleted account. Nightly database backups age out
within 30 days.
Refused, until you hand over. If you are the last admin of a shared
organization, or the only owner of a shared space that still has members,
the account page says so and the button waits until you have promoted
someone else. An organization with nobody able to run it is worse than one
admin’s inconvenience.
How long things are kept
Retention follows the plan that covers you, and a person covered by several
organizations gets the best window among them, the same way features are
resolved (see Plans). A space’s window is the best plan among
its members, so a department paying for a space keeps the longer window for
everyone in it.
| What | Window | Then |
|---|---|---|
| Discarded pages and projects (the trash) | The space’s trash_retention_days: the best plan among its members (Free: 30 days) |
Deleted by the nightly sweep. Restore from Research → Trash before then |
| Page version history | The space’s best plan’s version_history_days (Free: 30 days), for every reader of the space |
Older versions are neither listed nor opened, and are deleted nightly. The current text is never touched |
| Data exports and account exports | 7 days from completion | The file is deleted; the request stays listed as expired |
| Audit log | 2 years | Deleted |
| Database backups | 30 days | Age out |
The sweep runs at 03:40 UTC and writes a Retention purge row to the
audit log with what it removed, so an admin can see that it happened. A
space with a staff member in it is never swept: staff have no limits, and
the best plan wins.