Delete your account

Sign in at app.permaily.com.
Open Settings, and choose Delete account. You may be asked to confirm it’s you.
You get a message at your contact address when you ask, and if you cancel.

What happens, and when

At once: the account closes. Every other device is signed out, and nothing can be changed but cancelling. Once connections exist, they are revoked at once.
After seven days, unless you cancel: your account’s record (contact address, name, passkeys, linked providers, recovery codes, settings), your sessions, the devices that signed in, and the entries that find your account are removed, and the account can’t be brought back. Your address can then sign up again as a new account.
Once mailboxes open (planned): removing your account, or disconnecting a mailbox, destroys the mailbox’s key, so its mail can no longer be read by the service. The stored copies themselves expire later: message details within days, and raw messages a day after their retention period.

What stays, and for how long

Backups: our database keeps a rolling backup of the last 35 days, so what was removed stays there until it ages out. Once mailboxes exist, that includes mailbox keys, which only the service can unlock.
The admin log: entries naming your account’s identifier, if an admin acted on it, for 400 days from each entry.
Integrity records: small records of each change to your account, with its identifier, a version, a hash and the time, locked for ten years. What happens to them after that isn’t decided yet.
Addresses that bounced or complained: AWS keeps them until we remove them; write to us if yours is one.
Records the law makes us keep, such as a government request to preserve them, for as long as it requires.
What a connection already received is in its hands: ask it to delete it.

Remove just one thing

A provider you signed in with (Google, GitHub, Facebook or Microsoft): unlink it in Settings, under Sign-in, unless it’s your only way left to sign in. We delete the identifier it gave us. If you signed up with it, your contact address came from it and stays: change it in Settings. You can also remove Permaily in your account at the provider.
A passkey or a device: remove the passkey, or sign the device out, in Settings.
Mail: once mailboxes open, delete a message in the app, or disconnect the mailbox.

If you signed in with Facebook

Facebook told us its identifier for you, your name and, if you allowed it, an address. We keep only the identifier, to sign you in, and never take Facebook’s word for an address: if you signed up with Facebook, you confirmed your contact address with a code. To delete what we keep from Facebook, unlink it in Settings; to delete everything, delete your account as above. Removing Permaily in your Facebook settings stops future sign-ins with it, and doesn’t delete your Permaily account or its data.

If you can’t sign in

Write to privacy@permaily.com from your account’s contact address. We’ll ask for your account to be deleted, which starts the same seven days; you get a message, and can still cancel if you sign in. We can’t delete an account for anyone who can’t show it’s theirs.