Export & deletion

GDPR-friendly data export and account deletion.

Export everything

GET /api/account/export-data produces a ZIP with everything KrowForge has on you:

export.zip
├── account.json          # profile, sessions, audit log
├── workspaces/
│   └── <slug>/
│       ├── files/        # all your code
│       ├── receipts/     # full audit chain
│       ├── snapshots/    # ring-buffer contents
│       ├── vault/        # vault notes
│       └── runs/         # agent run history
├── api-keys.json         # key metadata (not the keys themselves)
└── README.md             # explains the structure

Generation is async. Once ready, a download link appears in your email and in Account → Data → Exports.

Downloads are valid for 7 days, then deleted. You can request as many exports as you like.

Delete your account

Account → Danger zone → Delete account.

POST /api/account/request-delete initiates a 30-day deletion window:

  • Account is marked for deletion.
  • You're logged out.
  • Login is blocked (with a "your account is scheduled for deletion on …" message).
  • All API keys are revoked.

Within the 30 days, POST /api/account/cancel-delete cancels the deletion.

After 30 days, deletion runs:

  • All workspaces are removed.
  • All receipts and snapshots are removed.
  • All vault notes are removed.
  • All API keys are removed.
  • The account row is removed.
  • Audit logs are removed.

Result: full GDPR right-to-erasure compliance.

What persists after deletion

Almost nothing. Specifically:

  • Stripe subscription history — kept by Stripe per their retention policy. KrowForge can't delete this.
  • Aggregate analytics — totally anonymized counts (e.g. "total runs across all users"). No personal identifier.
  • Server logs — rotated on the standard log rotation (default 30 days). After rotation, gone.

Team accounts

If you're the owner of a team:

  • Deleting yourself transfers ownership to the longest-tenured editor (with their consent).
  • If no editors exist, the team is also deleted (after the 30-day window).

If you're a member:

  • Deleting yourself removes you from the team. The team and its workspaces persist for the other members.