Data & Privacy
Byline gives you full control over your data. You can export everything, delete your account, and understand exactly how your information is used.
Exporting Your Data
Download a complete copy of all your personal data stored in Byline:
1
Go to Profile > Security tab.
2
In the Data & Privacy section, click Export My Data.
3
A JSON file will download containing your profile information, all signatures, and any domain-specific overrides.
Deleting Your Account
This action is permanent
Account deletion cannot be undone. All your data — profile, signatures, settings — will be permanently removed. Consider exporting your data first.
1
Go to Profile > Security tab.
2
In the Data & Privacy section, click Delete My Account.
3
Enter your password to confirm.
4
Your account and all associated data will be permanently deleted. You'll receive a confirmation email.
Team owners
If you're the sole owner of a team workspace, you must either transfer ownership or delete the organization before you can delete your personal account.
Organization Data Export
Team owners can export all organization data:
1
Switch to your team workspace using the tenant switcher.
2
Go to Team > Settings > General tab.
3
In the Data Export section, click Export Organization Data.
The export includes: organization profile, domains, active members, corporate signatures, and member customization overrides.
Deleting Your Organization
Destructive action
Deleting an organization permanently removes all team data, corporate signatures, domain records, and member associations. This cannot be undone.
Only the team owner can delete an organization:
1
Go to Team > Settings > General tab.
2
Scroll to the Danger Zone and click Delete Organization.
3
Follow the multi-step confirmation process:
- Choose whether to cancel the subscription immediately or at period end.
- Choose whether to notify members by email.
- Confirm the deletion.
4
You'll see a summary of the impact — how many members were affected, whether the subscription was cancelled, and whether your personal account was also removed.
Privacy Practices
- Data minimization — We only store what's needed to provide the service.
- No data selling — Your data is never sold to third parties.
- Encryption — Sensitive data (MFA secrets, API keys) is encrypted at rest using AES-256.
- Click tracking privacy — See the Click Tracking page for details on IP hashing and data retention.
- Inactive accounts — Accounts inactive for 90 days may be suspended. You'll receive email warnings at 70 and 85 days before any action is taken. Logging back in reactivates your account.
For full details, see our Privacy Policy and Terms of Service.