Export
A signed-in user may download a tenant-scoped JSON export from Account. Exports omit credential secrets, password hashes, sessions, one-time account-action records, workspace push keys, and billing secrets.
Request and verification
Submit or cancel a deletion request from Account or contact support@arkoncybersecurity.com. A request is pending until we verify identity, tenant authority, subscription state, applicable legal holds, and whether a team ownership transfer is required. A pending request may be cancelled before processing.
Active data
After the request is verified and approved, hosted active account and tenant records within scope will be deleted or irreversibly de-identified within 30 days. A member request removes that member’s account access; only an authorized owner can request deletion of an entire team vault.
Recovery copies
Encrypted recovery copies age out within 30 additional days after active-data deletion. They are isolated from ordinary product access and used only for disaster recovery. If a recovery copy is restored, pending and completed deletion records must be re-applied before normal service resumes.
Required retention
Limited billing, tax, fraud-prevention, security, dispute, and legal records may be retained longer where reasonably necessary or legally required. Those records are access-restricted and are not used as active vault content.
Self-hosted and local Sync
Self-hosted operators control their own hosts, backups, retention, exports, and deletion. Uninstalling Arkon Sync stops future local collection but does not itself delete records already stored in the hosted vault.