# Data, privacy and security

> Export your data, delete a workspace or your account, how long Google data is held after you disconnect, and how Prefera protects stored secrets.

Source: https://prefera.si/docs/account/privacy
Docs index for agents: https://prefera.si/llms.txt

You can export your data and delete it yourself. This page shows where, and what happens. For the full legal text, read the [Privacy policy](/privacy) and the [Terms of service](/terms).

## Export your data

### The whole workspace

1. Click your name at the bottom of the sidebar, then **Workspace**.
2. Find **Export data**.
3. Click **Download JSON**.

The file is a snapshot of the workspace: brands, questions, run summaries, answers, fixes, facts and proof checks. Integration secrets are redacted in it. Billing provider ids are left out.

Owners and editors can export. A member limited to some brands can't, because the file covers every brand. Exports are rate limited.

### Tables as CSV

Some screens have an **Export CSV** button: **AI answers**, **Questions** and **Proof**. Agents can read the same CSV exports with the `export_data` tool. See [MCP tool reference](/docs/agents/tools).

## Delete a workspace

Only an owner can do this.

1. Open **Workspace** from the account menu.
2. In **Delete workspace**, type the workspace name to confirm.
3. Click **Delete workspace**.

Prefera cancels billing, then deletes every brand and answer in the workspace. Deleting the workspace also removes its integrations, outreach data and any Google data. This can't be undone. Export first if you want a copy.

## Remove a brand

An owner can remove one brand from **All brands**. It disappears and stops running at once. Its answers and history are kept for 30 days, then deleted. In those 30 days an owner can restore it, if the plan has room.

## Delete your account

1. Open **Account** from the account menu.
2. In **Delete account**, type your email to confirm.
3. Click **Delete my account**.

This removes your profile and your memberships. It revokes the API keys you created. It also removes records tied to your email: your free scans' email, our emails to you, open invitations to you and your in-app feedback.

If you are the only owner of a workspace, you can't delete your account yet. Transfer ownership or delete that workspace first.

The **Account** screen also lets you change your name, email and password, and **Sign out everywhere**.

## Google data hold

When you disconnect Search Console or Google Analytics, Prefera stops using the data it derived from Google right away. By default that data is set aside for 30 days and then deleted.

- No screen, report, export or email can see it during the 30 days.
- Reconnect the same property within 30 days and the history comes back.
- Connect a different property and the held data is deleted at once.
- Tick **Also delete the Search Console data now** (or **Also delete the Analytics data now**) when you disconnect, and it is deleted at once.
- Deleting the brand or the workspace deletes held Google data too.

Steps are in [Google Search Console and GA4](/docs/integrations/google#disconnect).

## How secrets are stored

- **Integration secrets** are encrypted before they are stored, with AES-256-GCM. This covers CMS tokens and application passwords, Google refresh tokens, Slack webhook addresses, outreach mailbox passwords and webhook signing secrets. They are not shown again after you save them.
- **API keys** are shown once, when you create them. Only a SHA-256 hash is stored, so the key can't be read back from the database. Copy it when it appears.
- **Share and invite links** (client reports, team invites) are looked up by a SHA-256 hash. A client report link also keeps an encrypted copy so you can copy it again later.
- **Free scan emails** are blanked after 90 days. The scan report itself stays reachable by its link.

Prefera's own transactional emails are kept for a limited time. See the [Privacy policy](/privacy) for the periods.

> [!NOTE]
> To report a security problem, write to support. See [Support](/docs/account/support).

## Ask us instead

You can also ask for access, correction or deletion by email. Write to the support address on the [Support](/docs/account/support) page.