Account deletion & data export

Managing one business

After business deletion, active_org_id can be null if another owner removed your remaining membership. The app then shows business creation.

Use the business switcher in the header to create or select a business. In Settings, the Organization card lets owners and admins rename it. An owner can delete a business after fresh identity confirmation if it has no other members. A member or co-owner can leave if another owner remains. Both actions switch you into a remaining business. To remove your only business, delete your account instead.

Export completion emails list ready, failed and expired businesses. Use Retry beside a failed or expired export to rebuild only that business archive. POST /app/api/data-export accepts an optional org_id for this retry.

Deleting one business removes its data, billing subscription and bank connections while keeping your login and other businesses. Leaving revokes the API keys and webhooks you created for that business.

Deleting your account

You can delete your account without setting up an authenticator app. The existing identity check still applies.

In Dashboard, open Settings, then Security, then Delete your account. You'll see exactly what gets deleted before you confirm, type "delete my account" to confirm, and verify with a fresh password, two-factor, passkey, emailed code for a passwordless account, or linked provider check (step-up re-authentication). For every business where you're the only member, deletion removes: uploaded files, extraction results, transactions, statement sets, categorization data, rules, chart customizations, tax-year data, 1099 entries, share links, API keys, webhooks, and your email-in address. Any active subscription is canceled immediately. Access ends immediately. If a refund for that business is still being processed, we finish it first and then delete everything, automatically.

For a large organization, the deletion of stored files can take a few minutes to finish in the background; the account is already committed to being deleted the moment you confirm.

Confirming account deletion ends access on every device immediately. Old session and two-factor challenge cookies are ignored without clearing cookies belonging to a newer login. You can sign in to another account in the same browser while deletion finishes. You cannot sign in, reset the password, finish an earlier sign-in or verification link, or accept an invite while deletion is pending. Sign-in validation and credential errors match an unknown email. Anonymous sign-up, password reset requests, and verification email requests receive the usual generic responses without sending email or creating credentials. All API keys, share links, invitations, webhooks, and inbound addresses you created stop working immediately in every business. You can create a new account with that email after deletion finishes.

A business being deleted disappears from the business list immediately, including while a payment operation finishes. Its members and API keys lose access to that business. Deleting one business keeps your login and other businesses available.

If you're part of a team

• If you own an organization alongside other members, deleting your account is blocked until you transfer ownership to someone else or remove other members before deleting the business.
• If you're a member (not the owner) of an organization with others, deleting your account removes you from that organization, but its data is completely untouched for the rest of the team.

What's kept

A security log keeps one minimal record that a deletion happened: a one-way fingerprint of the organization's id, the date, and a document count. It never identifies who the account belonged to. See the Privacy Policy for how long a backup copy can keep deleted data before it's gone everywhere: at most 30 days.

Exporting your data

Password accounts must complete authenticator setup before creating or downloading an archive. The app prompts inline and continues the action after setup.

In Dashboard, open Settings, then Export, then Download all my data (step-up re-authentication required). Arkrel builds a separate zip file for every business you belong to, containing its original uploaded files, extracted results, every transaction with its category as a CSV, your category rules, and the tax report for every year you have data for (both CSV and PDF). You'll get one email when every export has finished. The email reports each outcome: ready, failed, expired or deleted. Each download requires current membership in that business and expires seven days after the archive is ready. Only one export can be in progress for each business at a time.

Someone else's export or deletion

An export link works only for someone signed in with a current membership in the business it was built for. You can download your business archives without switching the active business.

App API

• GET /app/api/orgs lists your businesses. POST /app/api/orgs accepts a name of 1 to 200 characters and creates and selects a business. Create, current-business and update responses include your membership role.
• POST /app/api/orgs/active accepts org_id and selects a business you belong to. GET and PATCH /app/api/orgs/current read and update the active business.
• POST /app/api/orgs/current/leave leaves the active business. DELETE /app/api/orgs/current deletes it with fresh step-up authentication. ONLY_BUSINESS returns 409 when no other business remains. BUSINESS_HAS_MEMBERS returns 409 for a shared business. The last owner cannot leave.
• GET /app/api/data-export returns a data array of exports across your memberships, including org_id. POST creates that array of requests with step-up authentication and returns 201. EXPORT_IN_PROGRESS returns 409 if any business already has an export running. GET /app/api/data-export/{id}/download downloads an archive for a current membership.