Plans, trials and your data
When a trial or a plan ends, nothing is deleted at once. Your organization first becomes read-only, then it closes, and only after that is it scheduled for deletion. We email you before each step, and choosing a plan at any point brings everything back.
When a trial or plan ends
| Step | Trial | Paid plan | What you can do |
|---|---|---|---|
| Read-only | 30 days after the trial ends | 30 days after the plan ends | Sign in, see your results and export them. Scanning, notifications and integrations stop. |
| Closed | the next 30 days | the next 60 days | The data is hidden but kept. You see only billing and your account settings. API keys and MCP stop with ORG_CLOSED. |
| Scheduled for deletion | after day 60 | after day 90 | We delete the organization and its data. It cannot be restored. |
A paid plan ends at the end of the billing period after you cancel it, or 7 days after a payment fails if the payment is not fixed by then.
Choose a plan in Settings → Billing at any time before the deletion, and the organization opens again with all of its data.
The emails you get
- Trial: 3 days before it ends, when it ends, a week later, 7 days before the organization closes, and 7 days before it is deleted.
- Paid plan: when you cancel, when a payment fails, 7 days before a cancelled plan ends (2 days before, if a payment failed), when it ends, 7 days before the organization closes, and 30 and 7 days before it is deleted.
An organization never closes, and is never deleted, before its email has been out for 7 days. If an email goes out late, the step moves with it.
Delete your data yourself
You can ask us to delete your data at any time:
- Settings → Account → Delete account deletes your user account. If you are the only person in your organization, it deletes the organization too.
- Settings → Organization management → Delete organization deletes one organization. Deleting the last one deletes everything.
- Settings → Organization management → Delete organization group deletes every organization, if you have more than one.
You confirm with the name of what you delete and a 6-digit code we email you. It closes at once: for an account, you are signed out and its API keys stop working. We delete it within 30 days. Until then you can reply to our email to cancel the request.
If your plan still renews, cancel it in Settings → Billing first. The time left on a cancelled plan is not refunded.
What we keep
After a deletion we keep invoices, payment records and a short record of the account — its name, its organizations, the names and email addresses of its people, and its dates — for 10 years. They hold no scan data.
Some records we collect are shared: a domain or an IP address and what we observed about it on the internet can belong to several customers. Deleting your organization deletes your links to them, your scope decisions, findings and notes; the shared records themselves stay.
Database backups are kept for 14 days, so deleted data also leaves the backups within 14 days.