Privacy & Data Export
You own your data. Export it, delete it, or control who sees it - anytime you want.
Your Privacy Rights
Export Your Data
Download all your memories, collections, and conversations in JSON format
Delete Everything
Permanently delete your account and all associated data (GDPR compliant)
Control Access
Manage who can see your collections and memories
Data Encryption
All data encrypted at rest and in transit (AES-256)
Export Your Data
- 1Go to Settings → Privacy
- 2Click "Export Data"
- 3Choose what to include (memories, collections, etc.)
- 4Click "Download" - get a JSON file with everything
Delete Your Account
Warning: Permanent Action
Account deletion is permanent and cannot be undone. When you delete your account:
- Your account, collections, and memories are soft-deleted immediately and become inaccessible
- You have a 90-day grace window to restore the account via
POST /v1/gdpr/restore-account - Associated vector indexes, BM25 indexes, and knowledge-graph nodes are cleaned up during the 90-day permanent-deletion window
- After 90 days the soft-deleted data is permanently removed and backups are scrubbed
- Once past the 90-day window, deletion cannot be reversed
Via UI: Settings → Privacy → Delete Account. Via API: POST /v1/gdpr/delete-account.
Delete just one collection
Don't need the whole account gone — just one customer / project / agent? Deleting a collection cascades to every memory, document, and media file inside it. The backing Qdrant vectors, BM25 index, and Neo4j entities are cleaned up in the same request, so nothing orphan remains.
DELETE /v1/collections/{id}— one collectionPOST /v1/collections/bulk-delete— several at onceDELETE /v1/collections/all— every collection you own
GDPR Compliant
Hebbrix is fully GDPR compliant. You have the right to access, rectify, erase, and port your data at any time. Self-serve via these endpoints (all require a valid bearer token):
POST /v1/gdpr/export— export your account data (memories, collections, profile facts, webhooks, settings). Response includes the full JSON dump inline for small accounts.POST /v1/gdpr/delete-account— soft-delete your account and everything in it (90-day grace window before permanent removal).POST /v1/gdpr/restore-account— restore a soft-deleted account during the grace window.
For custom requests, contact contact@hebbrix.com.