Deleting your account

You can delete your own Tessule account from Account Settings at any time. Deletion takes effect at once and cannot be undone: every way into the account stops working, on every device.

If you only remember one thing: your account is yours, but the workspaces you work in belong to their organizations. Deleting your account removes you; it does not remove the records, comments and history you added to an organization’s workspaces.

---

Before you start

If you own an organization, check who else depends on it. Deletion is refused while you are the only owner of an organization that has other members or a current subscription. The refusal names each such organization. Make another member an owner (Organization settings → Members), then try again. To have the organization itself erased instead, ask support@tessule.com (see below). An organization with a second owner never blocks you.

An organization where you are the only member, and that has no current subscription, does not block you. It is scheduled for deletion together with your account: its workspaces become unavailable straight away, and the organization and everything in it are deleted 35 days later. To keep it, contact support@tessule.com before that date.

Deleting your account

1. Open Account Settings from the user menu.
2. In the Delete account card, choose Delete account….
3. Type your account’s email address to confirm.
4. Enter your password. An account without a password (one that signs in with Google, Microsoft, GitHub, Apple or single sign-on) has nothing to type here; instead, the sign-in you are using must be less than ten minutes old. If it is older, choose Sign in again, sign in, and come back.
5. Choose Delete my account.

You are signed out, and the sign-in page confirms the deletion with a reference. Quote it when you ask support to confirm that the deletion took place.

What is removed

What	What happens
Your sign-in account	Deleted: your password, linked social and single sign-on accounts, passkeys, two-factor authentication and backup codes.
Sessions	Every session on every device ends. Access tokens already issued stop working.
API tokens and connected apps	Your API tokens are deleted, and AI assistants and integrations you connected lose access.
Memberships	Your organization and workspace memberships end.
Your own settings	Preferences, push notification subscriptions and pending invitations to your address are deleted.

What stays

What	What happens
Records, comments, approvals and history you added to workspaces	They stay with the workspace’s organization, attributed to the email address your account had.
The audit trail of actions taken with your account	It stays with the organization’s workspaces.
Billing records of your organizations	Invoices and usage are kept as accounting records.

To have personal data inside an organization’s workspaces removed, such as a contact record about you, ask that organization’s administrators. They control those workspaces and can edit or delete the records.

Getting a copy of your data, or deleting an organization

To receive a copy of the personal data Tessule holds about you, or to have a whole workspace or organization erased, email support@tessule.com from the address on your account; an organization’s erasure is requested by one of its owners. An erasure requested this way makes the workspace or organization unavailable at once, and 35 days later deletes it together with its stored files and the backups taken of it. The request can be withdrawn until then. Records inside a workspace are the organization’s data, so a copy of those comes from the organization’s administrators, who can export them from the workspace.

Through the API

Deletion is also available as POST /auth/account/delete. Like the endpoints that manage two-factor authentication and passkeys, it authenticates with the session token in the request body rather than an access token, and takes the same step-up:

curl -X POST https://api.tessule.com/api/auth/account/delete \
  -H "Content-Type: application/json" \
  -d '{"refreshToken": "<session token>", "password": "<password>", "confirmEmail": "alex@example.com"}'

A successful response carries deletedAt, the erasureRecordId to quote, and scheduledErasures: the organizations scheduled for deletion because you were their only member. A 409 with code SOLE_OWNER lists the organizations blocking the deletion and why; nothing has been deleted.