Account deletion

You can permanently delete your account (tenant) and all of its data. This is irreversible.

Delete a tenant

DELETE /tenants/{tenantId}
Authorization: Bearer <accessToken>
X-Tenant-Id: {tenantId}

Only the tenant Owner can delete the tenant. The deletion runs in a single transaction that first writes a tenant.deleted audit record, then removes the tenant.

What is erased

All operational data is hard-deleted, including email logs with recipient addresses, contacts, API keys, projects, templates and versions, suppressions, campaigns, sequences and webhook endpoints — closing the right to erasure.

What is retained (anonymized)

Two append-only ledgers are kept for integrity and billing history, but de-linked from the tenant — their tenantId is set to null, so no personal data stays attached:

• the audit log
• the AI token ledger

Erase a single contact (GDPR)

To erase one recipient without deleting the whole account:

DELETE /contacts/{externalId}

Requires the contacts:write scope. The contact's personal data is hard-deleted and the address is added to your suppression list (reason: unsubscribe) so it is not emailed again. An audit record contact.erased is written.

Past email-log entries for that address are removed by retention or when the tenant is deleted.

See GDPR erasure and Data residency.