Deleting your account

Account deletion is self-serve from Settings → Account. Click Delete account, confirm with your password (or OAuth re-auth), and the request is queued.

What happens after you confirm #

1. You're immediately signed out.
2. Your sessions are invalidated; existing API tokens stop working.
3. Within minutes, your account is marked deleted and is no longer visible in the UI.
4. Within 30 days, all personal data is purged from production storage: email, password hash, OAuth identifiers and stored OAuth access tokens (including the GitHub App user access token and its refresh token, if you had a GitHub connection), signup attribution, sources, lockfiles, analysis history, billing records. The deletion does not itself revoke the grant on github.com or uninstall the App from your account. To also remove DevUpdate.io from your GitHub authorized applications and uninstall the App, visit github.com → Settings → Applications.
5. Backups follow the same 30-day rotation; data is fully gone after the next rotation cycle completes.

What's preserved #

• Your PostHog analytics profile. Product analytics are keyed to your account number, never your email address or username (see PostHog in the privacy page). Deleting the account does not delete that profile today: PostHog keeps the account number and the events attached to it under the data retention of our PostHog project, where they no longer match anything we hold. If you want it removed too, email info@devupdate.io from your account address before you delete the account; afterwards we can no longer tell which profile was yours.
• Aggregate usage metrics: counts only, no user identifier. This does not include your signup attribution: the campaign that brought you in is stored on your account row and is deleted with it, not rolled into a surviving channel tally.
• Tracked-source counts for the Explore catalog: your individual contribution drops, but the public catalog itself isn't affected.
• Billing records: the PayPro payment notifications behind your orders and subscription changes are kept for 8 years, counted from the end of the calendar year they arrived in, for German tax and commercial compliance (§147 AO, §257 HGB), then deleted automatically. A subscription's records are never deleted while it is still running; once it has ended, the 8 years count from the end of the calendar year of the last change we recorded on it (normally the year it ended), when that is later. Deleting your account does not remove them earlier. Subscription history and withdrawal-waiver consent, which sit on the subscription record, are kept while the subscription is running and, once it has ended, for 10 years, counted from the end of the calendar year of the last change we recorded on the subscription (normally the year it ended), then deleted automatically. Deleting your account neither shortens nor extends that. Both are reduced to the minimum required by law.
• Security audit entries (sign-ins, sign-outs, password changes and resets, AI-client authorizations) keep their timestamp, so a past incident can still be investigated, and their IP address and browser user agent for 90 days from the event, after which those are cleared. Deleting your account unlinks them from it, and none of them holds an email address. The entry recording an account's deletion keeps only the time and the address's domain: no account number, IP address or user agent. See the audit log entry in the privacy page.

Active subscriptions #

While a subscription you manage or pay for can still charge, your account can't be deleted. Both the deletion request in Settings and the confirmation link in the email refuse it and say why:

• Your own subscription, or your team's if you own the team. Cancel it under Settings → Subscription first. Inside the 14-day window, Request Refund cancels it with a pro-rata refund and shows the amount before you confirm. Once it is cancelled you can delete your account, even while the paid period is still running.
• A subscription paused at our payment provider. A pause is not a cancellation: it can start renewing again. Settings shows it as Paused; cancel it there, then delete your account. A pause has no paid period left, so cancelling it ends it at once. If the provider has resumed it in the meantime, it is cancelled like a running subscription instead and ends with the period you paid for.
• A team handover still settling. When you hand over a paid team, your old subscription is cancelled at our payment provider as soon as the new owner has paid. Until that has gone through, deletion waits and says so. Nothing is needed from you: we retry automatically, and once it has ended nothing about the team holds your account.
• A subscription you bought for a team someone else now owns (handed over before handovers moved the billing). It is still billed to the payment details you bought it with, so it holds your account too. Ask the team's owner to cancel it under Settings → Subscription, or write to info@devupdate.io.
• An older subscription of yours that still renews though your account no longer uses it (one you replaced, say). Settings shows only your current subscription, so it can't cancel that one: write to info@devupdate.io and we'll cancel it.

Deleting the account never cancels anything with our payment provider by itself.

Team accounts #

• Members can delete their personal account at any time, whatever the team's subscription is doing, unless they bought it (see above). The team isn't affected; your seat opens up for re-assignment, and a handover of the team that was waiting for you is cancelled.
• Owners of a team that has other members can't delete their account until one of them takes the team over: make them an admin on the team page, then transfer ownership (see roles; for a paid team, they check out with their own card first). Both deletion steps refuse until then and link you to the team page.
• Owners of a team with nobody else in it can delete their account once no subscription renews, and the team is deleted with it, pending invitations included.

A refused confirmation link keeps working once the reason is resolved, until it expires 24 hours after you asked for it.

Recovery window #

There is no recovery window. Once the deletion is queued, the data is gone. If you think you might want to come back, downgrading to the Hobbyist tier preserves your account at no cost.

Automatic cleanup (we delete the account for you) #

Two automatic sweeps remove abandoned accounts so the platform stays tidy. Both are described in the Terms of Service and in the Privacy policy.

• Unverified signups (day 7). Accounts created with email and password that never verify the email address are removed 7 days after signup. A reminder email goes out around day 4. OAuth signups (GitHub, Google) are created already verified and are never affected.
• Inactive verified free-tier accounts (day 30). Verified accounts on the free Hobbyist tier that never add a tracked source and never connect a lockfile are removed 30 days after signup. You'll get up to five reminder emails first (around day 2, 5, 10, 20, and 27), and the day-27 mail is an explicit deletion warning. After deletion we send a final notification to the address on file.

Adding a single source or lockfile, upgrading to a paid plan, or joining a team takes your account out of these cohorts at any point in the sequence. If your account is removed under either policy, you are welcome to sign up again.