Deleting your account and exporting master data

Under Settings → Account you find the download of your own data, the account master data export and account deletion.

Downloading my data (any role):

1. Open Settings → Account → “Download my data”. This works as owner, admin, analyst and viewer.
2. The JSON file contains only data about you personally: account and profile, roles, accepted legal texts, settings, invitations (with the addresses you entered yourself), your messages and support requests, log entries about your actions, the status of two-factor sign-in and your devices. Passwords, codes, tokens as well as business data and company details of the organisation are not included; the owner downloads those in the account export. The download is recorded in your organisation’s log without its content.

Account export (JSON):

1. Open Settings → Account → “Account export (JSON)”.
2. The download contains your account, profile and shop master data in machine-readable form. Secrets and access tokens are expressly not included.
3. You export business data separately in the respective released areas: orders, invoices and receipts. DATEV review data currently has no productive file download. For a complete data subject access request under GDPR Art. 15, support@northprofit.eu will help.

Deleting the account:

1. First end an active subscription under Settings → Subscription (“Abo”).
2. If there are other active members in the workspace, you choose the new owner in the deletion dialog as the owner. Transfer and account anonymisation happen atomically.
3. Open Settings → Account → “Delete account”. Type the confirmation phrase shown and your current password. Accounts without a password confirmed for security actions set it beforehand through the one-time email link.
4. The deletion takes effect immediately and cannot be undone.

What happens immediately:

• Login and all existing sessions are blocked; profile and account identifiers are anonymised.
• Personal push, reset and verification tokens, settings and personally created API keys are removed or revoked.
• When the last member of the workspace is removed, all platform connections are disconnected, stored provider credentials are removed, external access and invitations are revoked and background syncs are stopped.

What is kept for legal reasons:

• Receipts, invoices and posting data subject to tax and commercial retention duties remain archived and locked until the statutory period ends. Deletion afterwards only happens in a reviewed deletion run.
• Required audit evidence may be kept for GoBD, security or legal claims.

Questions or special cases (e.g. deleting only one shop): support@northprofit.eu with the subject “GDPR Art. 17”.