Deleting your account

You can delete your Banyan account at any time. Deletion is permanent — once completed, neither you nor we can restore the account.

Before you delete: export your data

Take whichever of these you need:

Canopy posts — open My Posts → Export CSV for all post text and metadata.
Outpilot leads — each lead list has a Download CSV button on its detail page.
Outpilot conversations — open the Inbox and click ⋯ → Export thread on any conversation to get a JSON transcript.
Invoices — download every PDF from Settings → Account → Manage plan → Billing history before deletion.

How to delete

Settings → Account → Delete account (at the very bottom of the page, in the red zone).
Type your email address to confirm.
Optionally tell us why you’re leaving (helps us improve, never tied to your identity afterward).
Click Delete account.

Your account is queued for deletion immediately. Login is disabled within seconds.

What gets removed

Everything tied to your user ID, across every product:

All Canopy posts, drafts, schedules, agents, sources, and runs.
All Outpilot campaigns, leads, conversations, accounts, and integrations.
All Herald mailboxes, campaigns, and analytics (if you used Herald).
Your platform user row, settings, and any uploaded media.

LinkedIn / Instantly / Mailgun / Stripe accounts owned by you are not touched — we just disconnect from them.

What we retain — and why

A handful of records are retained for legal/financial reasons:

Stripe records of paid invoices — retained ~7 years (tax law requirement). They reference your customer ID, not your name or email in our DB.
Anonymized usage events — pageviews, error counts. They’re already not personally identifiable.
Audit log of the deletion itself — a single row recording that the deletion happened, when, and from which IP. Retained 1 year.

That’s the complete list. Everything else goes.

How long until deletion completes?

The user-visible parts (login, data accessible to you, anything sharing your data with you) are disabled instantly. Background workers finish purging the underlying database rows over the following ~24 hours; backups age out within 30 days.

By 30 days after you click delete, your data has been removed from every production system and every backup we hold.

I changed my mind — can I undelete?

Within the first 24 hours, email support@banyan.app from the email that owned the account. We can usually reverse the queue if the workers haven’t run yet.

After 24 hours, no — the data is gone. You can sign up again with the same email; you’ll be a brand-new account.

If you’d prefer a formal data export or deletion under GDPR/CCPA, email privacy@banyan.app instead. We respond within the legally required window (30 days for GDPR, 45 for CCPA).