Both actions live under Settings → Account, and both are owner-only. Admins and editors see a notice explaining that only the workspace owner can export or delete.

Export everything

Export my data downloads one JSON file containing what the workspace holds:

• the workspace record (name, slug, plan, subscription status, created date);
• connected Instagram accounts — without any token material;
• contacts, tags, contact–tag assignments, and contact identities;
• messages and their attachments;
• automations;
• forms and form responses;
• short links;
• media assets.

Each section carries a truncated flag. It's false in every normal case; a workspace large enough to pass the per-table export ceiling gets an honest true rather than a silently short file.

This is the GDPR Article 20 (portability) route. It's a dashboard download — it is deliberately not reachable with a personal access token, because the file contains every contact's messages and form answers, and a leaked token must not be able to pull it.

Delete the account

The Danger zone deletes the whole workspace. You have to type the workspace name exactly to confirm, and that's re-checked on the server, so the confirmation can't be skipped.

What happens, in order:

1. Your subscription is cancelled first. If cancelling fails, nothing is deleted — you'll be told to retry or contact support. Deleting the data while billing kept running would be the worst outcome, so it's the first step and it's allowed to abort the rest.
2. Uploaded files are purged from storage.
3. The workspace is deleted, and everything scoped to it goes with it: connections, contacts, messages, automations, forms, links, tokens, and memberships.
4. Your login is deleted only if this was your last workspace. If you belong to other workspaces, you keep your account and your access to them. Other members' logins are never touched — only their membership of this workspace disappears.

Your Stripe customer record and past invoices are kept. Invoices are retained for tax and accounting obligations; they're no longer linked to a live workspace.

This is the GDPR Article 17 (erasure) route, it is irreversible, and — like the export — it is owner-only and unreachable with a personal access token.

Related

• Billing — cancel a subscription without deleting anything.
• Team & roles — who can do what.