Account data and deletion - AstroM8 API

Account privacy operations use the dashboard session token, not an API key. Send Authorization: Bearer astrom8_sess_....

Export account data

curl --fail-with-body \
  -H "Authorization: Bearer $ASTROM8_SESSION_TOKEN" \
  -o astrom8-account-export.json \
  https://api.astrom8.com/auth/privacy/export

The JSON export includes account and key metadata, usage and credit history, reports, delivery settings, Visual Reading job metadata, and Cultural Intelligence organizations and structures. It never includes credential hashes, webhook signing secrets, or private storage object keys.

Delete an account

Deletion revokes access immediately and queues permanent cleanup. It requires the current password and an exact email confirmation to prevent accidental requests.

curl --fail-with-body -X DELETE \
  -H "Authorization: Bearer $ASTROM8_SESSION_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "password": "current-password",
    "confirmation": "DELETE owner@example.com"
  }' \
  https://api.astrom8.com/auth/account

A 202 response means access has been revoked and the retry-safe deletion job was accepted. Astrom8 then cancels owned work, deletes report and Visual Reading objects, removes delivery settings, and anonymizes retained billing and usage audit records.

Account deletion is permanent. Create an export first when you need a copy of your account data.