# Account lifecycle (/extras/account-lifecycle)

<!-- agent-signals: reading_time_min: 3 · est_tokens: 1318 · updated: 2026-09-06 -->
Related: [Labels and system labels](/extras/labels-and-system-labels.md), [Deliverability fundamentals](/extras/deliverability-fundamentals.md), [Security and compliance](/extras/security-compliance.md), [SDKs and CLI](/integrations/sdks-and-cli.md)

This page covers the end of the lifecycle: deleting resources and their data through the API, what AgentMail retains and for how long, exercising your data protection rights, and closing an account.

## Deleting data through the API [#deleting-data-through-the-api]

Deletion covers every resource your agents create and is **permanent**: there is no undelete.

| Resource | Endpoint                                                                                         | What happens                                                                                                                  |
| -------- | ------------------------------------------------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------- |
| Thread   | `DELETE /v0/inboxes/{inbox_id}/threads/{thread_id}`                                              | Permanently deletes the thread and its messages.                                                                              |
| Inbox    | `DELETE /v0/inboxes/{inbox_id}` (also pod-scoped: `DELETE /v0/pods/{pod_id}/inboxes/{inbox_id}`) | Permanently deletes the inbox; its threads, messages, and attachments are cleaned up asynchronously after the delete returns. |
| Draft    | `DELETE /v0/inboxes/{inbox_id}/drafts/{draft_id}`                                                | Permanently deletes the draft.                                                                                                |
| Domain   | `DELETE /v0/domains/{domain_id}` (also pod-scoped)                                               | Removes the domain from AgentMail. Existing mail data is retained.                                                            |
| Pod      | `DELETE /v0/pods/{pod_id}`                                                                       | Deletes the pod. A pod that still contains inboxes or domains cannot be deleted; empty it first.                              |
| Webhook  | `DELETE /v0/webhooks/{webhook_id}`                                                               | Stops event delivery immediately.                                                                                             |
| API key  | `DELETE /v0/api-keys/{api_key}`                                                                  | Revokes the credential immediately.                                                                                           |

<Warning>
  Deleting is different from trashing. Adding the `trash` label to a message or thread only hides it from default list results and is reversible: remove the label and it comes back. `DELETE` removes the data permanently.
</Warning>

## What AgentMail retains [#what-agentmail-retains]

From the [privacy policy](https://www.agentmail.to/legal/privacy-policy), the current retention periods for service data:

* Email messages, drafts, attachments, and inbox records remain available until you delete them.
* Database point-in-time recovery provides recovery points for up to 35 days.
* Metrics are retained for up to 90 days.
* Email open-tracking records are scheduled to expire after 90 days.
* Most application, security, and diagnostic logs are retained for up to 365 days.

This means data you delete can persist in encrypted backups for up to 35 days after deletion before it ages out of the recovery window.

## GDPR and data protection rights [#gdpr-and-data-protection-rights]

If you are a resident of the EU or EEA, you have data protection rights under GDPR, including the right to access, update, or delete the information AgentMail holds on you; the rights of rectification, objection, and restriction; the right to data portability; and the right to withdraw consent.

To find out what personal data AgentMail holds about you, or to have it removed, email [support@agentmail.cc](mailto:support@agentmail.cc). You may be asked to verify your identity before the request is processed, and some data necessary to provide the service cannot be removed while your account remains open.

## Closing an account [#closing-an-account]

There is no self-serve "delete my account" API. Closing out fully looks like this:

1. **Delete your resources.** Remove inboxes, domains, and pods through the API or the [console](https://console.agentmail.to) so mail data is permanently deleted rather than left dormant.
2. **Revoke credentials.** Delete all API keys so nothing can authenticate against the organization.
3. **Leave or close the organization.** In the console you can leave an organization that has other members. If you are the organization's only member, the leave action is blocked; this is the one step that cannot be done self-serve.
4. **Request closure.** Email [support@agentmail.cc](mailto:support@agentmail.cc) from the account's email address and ask for the organization to be closed and its data deleted. This is also the path for GDPR erasure of the account itself.

<Note>
  Billing stops mattering once the paid subscription is cancelled. Do that in the console's billing settings (or through the Vercel dashboard, if you installed AgentMail through the Vercel Marketplace) before requesting closure.
</Note>