Privacy & Data Export
You own your data. Export it, delete it, or control who sees it, anytime.
01. Your Privacy Rights
Export Your Data
Download all your memories, collections, and conversations in JSON format
Delete Everything
Permanently delete your account and all associated data (GDPR compliant)
Control Access
Manage who can see your collections and memories
Data Encryption
All data encrypted at rest and in transit (AES-256)
02. Export Your Data
- Go to Settings → Privacy
- Click "Export Data"
- Choose what to include (memories, collections, etc.)
- Click "Download" to get a JSON file with everything
03. Delete Your Account
Warning: Permanent Action. Account deletion is permanent and cannot be undone. When you delete your account:
- Your account, collections, and memories are soft-deleted immediately and become inaccessible
- You have a 90-day grace window to restore the account via
POST /v1/gdpr/restore-account - Associated vector indexes, BM25 indexes, and knowledge-graph nodes are cleaned up during the 90-day permanent-deletion window
- After 90 days the soft-deleted data is permanently removed and backups are scrubbed
- Once past the 90-day window, deletion cannot be reversed
Via UI: Settings → Privacy → Delete Account. Via API: POST /v1/gdpr/delete-account.
04. Delete just one collection
Don't need the whole account gone, just one customer / project / agent? Deleting a collection cascades to every memory, document, and media file inside it. The backing Qdrant vectors, BM25 index, and Neo4j entities are cleaned up in the same request, so nothing orphan remains.
DELETE /v1/collections/{id}: one collectionPOST /v1/collections/bulk-delete: several at onceDELETE /v1/collections/all: every collection you own
GDPR Compliant. Hebbrix is fully GDPR compliant. You have the right to access, rectify, erase, and port your data at any time. Self-serve via these endpoints (all require a valid bearer token):
POST /v1/gdpr/exportexports your account data (memories, collections, profile facts, webhooks, settings). Response includes the full JSON dump inline for small accounts.POST /v1/gdpr/delete-accountsoft-deletes your account and everything in it (90-day grace window before permanent removal).POST /v1/gdpr/restore-accountrestores a soft-deleted account during the grace window.
For custom requests, contact contact@hebbrix.com.