Export and delete your data
Take a copy of your workspace's records, or delete the workspace, and what deletion keeps.
HeyCMO is an invitation-only, $0 operational Alpha for Stripe and Resend recovery emails. A person approves every message before it is sent. The guides also describe implementation capabilities outside the Alpha. Their presence here does not make them available in the pilot. Start with the Alpha checklist. Help: alpha@heycmo.ai.
An admin does these on Settings → Advanced → Your data (anyone else
is told only an admin can), or with an API key that has the admin scope.
Each acts on the workspace you are in.
- Export your data: Export my data downloads one JSON file of your
workspace's records, table by table: settings, loops and their runs,
everything that reached your Inbox and what became of it, the audit trail,
your suppression list, usage, your connections, reviews, knowledge,
creative asset records, the brand kit, strategy, your members and billing
records: every table but a few of internal bookkeeping. It never holds a
stored secret, an API key, a push-device key or a keyed token of one of
your customers. A table is cut at 10,000 rows, and the file's
truncatedfield names any that were. (API:POST /v1/tenant/export. The audit trail on its own:heycmo audit export.) - Delete this workspace: Delete workspace… says what is deleted and
what is kept, and asks you to type the workspace's exact name. It takes
effect at once and signs everyone out: HeyCMO refuses every request for
the workspace from then on, turns the kill switch on, revokes every API
key, removes every stored secret and connected account, stops your hosted
landing pages (the dialog lists the DNS records to remove) and deletes or
redacts your contacts, drafts, connections, reviews, knowledge, creative
assets and files, brand kit, strategy and settings. (
API:POST /v1/tenant/deletewith{"confirm": "<your workspace id>"}.) - Erase one of your customers (a data-rights request):
heycmo subjects erase <email>(admin key;API:POST /v1/subjects/erase) removes the address from your workspace's data and keeps its suppression, so nothing is sent to it again. A message already approved or sending is left as it is (the command says so, and the answer'scompleteis false): run the command again once it has finished. The audit log keeps any address it already recorded, such as the recipient of a draft edited before 24 October 2026 (see below).
What deletion keeps, and why: the audit log, the record of what HeyCMO did and why (required evidence); billing and tax records; and records without message content (decision histories, run and usage counts, experiment results): run and usage counts are deleted after 24 months, and the rest is kept. Copies in database backups are deleted when those backups expire (at most 35 days). There is no paid subscription to cancel in the Alpha.