Delete my account, now and for good

POST 
/api/account/deletion

Immediate, no grace period, no restore. Proves intent three ways: the account email typed exactly (case-insensitive), the password, and — when two-factor is on — a current code. Refused with 409 blocking_workspaces (and the list in workspaces) while the account owns a live workspace or is the last admin of one.

Every seat becomes a former member (personal mailbox archived), then loses its personal data; the account becomes a tombstone (no name, email, phone, avatar, 2FA secrets, recovery codes, sessions or tokens). Messages and notes stay, attributed to "Former member". A confirmation is e-mailed to the old address before it is wiped. Throttled (6/min).

Request

Responses

200

Deleted. The session is over.

401

Not authenticated. code: account_disabled means the member's seat was deactivated in this workspace: the session is over even though the token was not revoked (clients sign out and clean up).

409

blocking_workspaces (with workspaces: id, name, reason owner|last_admin), or no_account.

422

The request failed validation.

429

Too many attempts.