Skip to main content
GDPR’s “right to erasure” is supported. Account deletion is two-step (confirmation modal + email confirmation), permanent after a 30-day grace period.

​
How users delete

1

Settings → Account → Delete account

Reveal the delete UI.
2

Confirm intent

Modal: type your email to proceed.
3

Email confirmation

Magic-link-style email; click to confirm.
4

30-day soft-delete period

Account is disabled but recoverable. Sign-in attempts show “Account deleted; click here to recover.”
5

Permanent purge

After 30 days, all data is hard-deleted from primary storage. Backup data is purged within 90 days.

​
What’s purged

  • Profile (name, email, avatar)
  • All messages / posts / comments / etc. owned by the user
  • Sessions and active devices
  • Audit log entries that name the user

​
What’s retained

  • Aggregated/anonymized analytics (no PII)
  • Audit-required records (per legal retention obligations) — anonymized
  • Backups until they roll out (90 days max)

​
Workspace owners

A workspace owner cannot delete their account if they’re the only owner — they must transfer ownership first or delete the workspace.

​
Member impact

When a user is deleted from a workspace, their authored content (posts, comments, etc.) remains, but the author becomes “Deleted user”. Workspace admins can opt to delete the user’s content too.

​
Tips

For your apps, implement the same pattern. GDPR applies to every app that processes EU users’ data. Add a “Delete my account” feature with the same shape.

Data export

Companion right.

Compliance

GDPR context.

Auth flows

Deletion flow architecture.
Last modified on April 18, 2026