Customer Sovereignty: Export Anytime, Delete Permanently

You own your data. We provide both programmatic self-serve endpoints and a guaranteed human SLA for data export and permanent workspace deletion.

ProgrammaticSelf-Serve

Self-Serve Data Export

Workspace Owners can retrieve a comprehensive JSON archive of all tenant data at any time by issuing an authenticated request to:

GET /api/v1/organizations/export

The export includes your organization metadata, user memberships, tasks, decisions, brief history, and connection records (with all credentials and tokens securely stripped).

IrreversibleOwner-Only

Self-Serve Workspace Deletion

Workspace Owners can initiate an immediate hard-cascade deletion of their organization and all associated data by sending:

DELETE /api/v1/organizations

Deletion is immediate and permanent. All memberships, tasks, decisions, facts, briefs, and OAuth connection tokens are purged with cascading foreign keys in PostgreSQL.

Assisted Deletion & Privacy SLA (security@xray.tech)

If you prefer manual handling or have custom compliance obligations (such as GDPR Article 17 Right to Erasure or CCPA deletion requests):

24-Hour Response SLA: Our security team confirms receipt of your written deletion request sent to security@xray.tech within 24 hours.
7-Day Verification & Complete Purge: Following identity verification of the workspace owner, all production database records, active session keys, and ephemeral storage are permanently purged within 7 business days.
Certificate of Destruction: Upon request, we issue a formal signed Certificate of Data Destruction confirming the date, scope, and completion of the purge.
Disaster Recovery Rolling Expiry: Continuous database snapshots and WAL archives in Neon expire automatically across the rolling retention window (6 hours standard, up to 7 days on production tier), after which no residual traces exist anywhere in infrastructure.