Skip to content
Fermium

Deleting your account and data

Export everything you own as a zip, delete documents yourself, and delete your account with a typed confirmation and a grace period.

You can export everything you own and delete your account yourself. Both are one API call; the app's Data page does not have the buttons yet.

Delete documents yourself

Each document can be deleted from the inspector in the app, in bulk from the selection bar, with delete_doc from an agent, or with DELETE /api/docs/{id}. The link stops working at once; the content is removed from storage after a 7-day grace period. See Deleting.

Export

GET /api/export, signed in, downloads fermium-export.zip with every live document you own:

index.json
Customers/Acme/Q3 proposal/meta.json
Customers/Acme/Q3 proposal/index.html
Customers/Acme/Q3 proposal/img/chart.png
Runbooks/Payments on-call/meta.json
Runbooks/Payments on-call/source.md
Runbooks/Payments on-call/index.html
  • One directory per document, named after its folder path and title. Characters that are not safe in file names are replaced, and two documents that would collide get the document id appended.
  • meta.json in each directory is the document object as the API returns it (id, slug, URL, visibility, retention, expiry, tags, folder, alias, version) plus legal_hold and the list of files.
  • Every file of the current version. Earlier versions are not included.
  • index.json at the root lists every document with its id, title, folder, tags, URL, visibility, kind, timestamps and directory.

The export covers your own documents only, not other members' documents, and not the workspace's settings. It is recorded in the audit log as account.export.

The same ZIP also includes accessible conversations you own under brain-conversations/<session-id>.json, with saved entries and the conversation's index metadata. It excludes other people's conversations and visitor transcripts from public deployments.

curl -b "$COOKIE" -o fermium-export.zip https://fermium.app/api/export

Revoke access first

Before deleting an account, remove any custom domain under Settings, then Domains and delete the CNAME at your DNS provider. Tokens do not need separate attention: the moment the account is deleted, every agent and script using it is cut off.

Delete your account

DELETE /api/account with a body of {"confirm": "you@acme.com"}, where the value is the email on the account, typed exactly. Anything else is refused.

curl -X DELETE -b "$COOKIE" -H "Origin: https://fermium.app" \
  -H "Content-Type: application/json" -d '{"confirm":"you@acme.com"}' \
  https://fermium.app/api/account

What happens:

  1. Every document you own is soft-deleted. Links stop working at once, and each enters the 7-day grace period.
  2. The account is disabled at once. Your session is ended, and every static token and OAuth grant stops working.
  3. After the grace period the documents' files and metadata are purged, and then the account record itself is removed: your user record, Google account link, terms acceptance, tokens, OAuth clients' grants and consents, stars, folders, group memberships and comments. Audit events you produced stay in the workspace's log with your email as a plain string, so the log stays complete.
  4. Nightly backups roll off 14 days after purge.

The response tells you the date, purge_at, and the grace period in days. Deletion is recorded as account.delete_requested and, when it completes, account.purged. Everything is gone well within the 30 days the Privacy Policy promises.

The local hosted-work implementation also stops owned hosted work, disables owned deployments and cleans up owned runtime records and encrypted transcript objects during purge. Active work must finish or stop before destructive cleanup proceeds. Deleting an Agent removes its conversations; simply archiving a conversation does not.

Two exceptions:

  • Workspace owners must transfer first. If you own a workspace that has other active members, deletion is refused with a 409: transfer ownership (POST /api/members/transfer) or remove the members, then try again. If you are the only member, the workspace goes with you.
  • Legal hold. On Enterprise, documents under legal hold are not deleted with the account. They stay, and the account record is removed once the hold is released and they are purged.

Billing records that Fermium is required to keep for tax and accounting purposes are retained for the legally required period, typically 7 years, and nothing else.

If you belong to a company workspace and want your documents to outlive you there, hand them over before deleting: share them with a colleague at edit level (Business and above) so they can copy them, or ask an operator to move them by emailing hello@fermium.app.

In the app

Settings, then Data describes export and deletion and links to hello@fermium.app. Both work self-serve through the API today, and support will run either for you on request.

Cancel billing too

Deleting an account does not by itself cancel a subscription attached to a workspace with other members. If you are the person who set up billing, cancel in the Stripe Customer Portal from Settings, then Billing first, or ask a colleague to take over the plan. See Billing.

PreviousSign out