Data Protection & Account Export: Secure sessions, and your data always exportable

Server-side sessions, sanitized error responses and a data export that’s always one click away. Nothing about your account is a black box.

Sessions that can’t be replayed

Sessions are cookie-based and server-side, with hashed tokens. Nothing is bearer-style, so a leak gives nothing to reuse. API errors are typed and sanitized before they reach the client, so no stack trace or internal detail gets out.

Session token7f3a9c...e21b (hashed, server-side)API RESPONSE{ "error": "not_found" }Export my dataJSON · ready in secondsArgon2id password hashing · no plain text, ever

You control what you share, and can leave with it

Export a JSON file of your profile, organization memberships and the messages you’ve sent, any time from Settings → Security. Deleting your account permanently anonymizes your profile, removes you from every organization you’re a plain member of and signs you out everywhere. No support ticket is required.

  • Full data export, on demand
  • Account deletion is permanent, not a soft flag
  • No stack traces or internal errors ever reach the client

How long are messages kept?

It depends on the plan. Free keeps 15 days of message history and Starter keeps 180 days. Business, Enterprise and Education keep it forever.

Where do card details and AI requests go?

Card details go straight into Stripe’s own hosted fields and never pass through our server. AI features send their content to a third-party AI provider, Claude or Gemini.

Keep reading

Bring the whole conversation together.

Set up a workspace in a couple of minutes. Free for up to 5 members, no credit card required.

Start freeSee pricing