# Account and data

This page brings together everything about your account: your profile, exporting your data, deleting your account. It doesn't rewrite the privacy policy — it points to it, and describes the screen that applies it.

## Your profile

From the settings (the account menu, top right of the screen, then "Preferences"), you can:

- under *Settings › My account › Profile*, change your name and e-mail address;
- under *Settings › My account › Sign-in and security*, set or change your password (changing your password closes your other sessions), link or unlink a Google account if the instance offers it, see your open sessions and sign out everywhere in one click.

## Your data

Under *Settings › My account › My data*, the **Your data** section shows a table: every category of data PalmaPlan holds about you, and how long it's kept. This table isn't a separately maintained list — it's exactly the one from the privacy policy, which itself carries over the repository's technical document (`legal/retentions.md`): the three can't tell different durations.

Two actions are offered at this spot:

### Export my data

An **Export my data** button downloads a file containing: your account, your preferences, your sessions, your tokens, the agents you've authorized, your access to other people's schedules, **your own schedules in PalmaPlan's exchange format** (re-importable as is), your comments, your notifications, your invitations, and your change-log entries in plain text. It contains neither password hashes nor token secrets, nor schedules owned by other people.

### Delete my account

A **Delete my account** button starts a multi-step account closure, never accidental:

1. If you still own schedules, the screen lists them and asks you to transfer them to a member or delete them before continuing — an account that owns schedules can't be closed.
2. An export step reminds you that you can take your data with you before you go.
3. You must **type your own e-mail address** to confirm — not just a checkbox.
4. A final screen repeats that the action is immediate and irreversible before the last button.

What happens on deletion, in brief (the full detail is in the privacy policy, section 5):

- your e-mail, your name, your password hash, your sessions, your tokens, authorized agents, your notifications, your preferences and your access rights are **erased immediately**;
- what you wrote in **other people's** schedules stays — change-log entries, your comments, actions you were responsible for — but your name there is replaced with **"Deleted user"**. That's what lets those schedules keep a consistent undo history and audit trail;
- deletion is immediate within the service, and effective in backups within fourteen days (the time it takes for the daily copies to cycle through).

## The privacy policy

The full text — who has the right to see what, what PalmaPlan never does (no selling data, no advertising, no tracker), cookies, security — is at [/privacy](/privacy) (or [/confidentialite](/confidentialite) in French). This page is only an operational summary; in case of a difference, the policy is authoritative.