Delete Account

You may permanently delete your AtlasCore account and associated personal data. This affects Etsy and any other marketplace connections within AtlasCore but does not delete your seller accounts on third-party platforms (Etsy, Amazon, Shopify, eBay, Walmart, TikTok Shop, Instagram Shopping, Pinterest Shopping, Faire, WooCommerce, Squarespace Commerce, BigCommerce, Temu, Wayfair, SHEIN, Wish, Newegg, Magento / Adobe Commerce, Oracle NetSuite Commerce, custom and third-party marketplace integrations).

Before You Delete

• Export any reports or data you need—deletion is irreversible after the retention window
• Disconnect Etsy via the Disconnect Marketplace flow or the Etsy Command Center Safety Purge modal
• Cancel active paid subscriptions to avoid future charges

Self-Service Dashboard

The recommended path is the authenticated dashboard flow at Settings → Delete Account. You must confirm deletion and verify your identity with your account password (or a two-factor code when 2FA is enabled).

Self-Service API (Authenticated)

AtlasCore exposes a production account deletion endpoint aligned with GDPR and marketplace compliance requirements. Requests use the browser session model — not Bearer JWTs in the dashboard:

DELETE /me/delete
Credentials: "include"          // HttpOnly session cookie
X-CSRF-Token: <csrf_token>      // from GET /auth/csrf cookie bootstrap
Content-Type: application/json

{
  "confirm": true,
  "password": "<account_password>"   // required when 2FA is off
  // "totp_code": "<6-digit code>"  // required when 2FA is on
}

Bootstrap the CSRF cookie with GET /auth/csrf before the DELETE request. The frontend apiClient attaches credentials: "include" and forwards the X-CSRF-Token header automatically on mutating requests. A confirm value of true is required or the request returns HTTP 400.

Deletion Lifecycle

Account deletion is a two-phase process designed for immediate access revocation and durable background erasure:

1. Immediate deactivation: on successful DELETE /me/delete, your account is marked inactive and suspended. Active sessions and refresh tokens are invalidated — you cannot sign in again with the deleted account.
2. Queued GDPR erasure: the server returns {"status": "queued"} and enqueues a durable background job (PostgreSQL ledger) that purges:
   • All user sessions, refresh tokens, and device records
   • Encrypted OAuth tokens and cached data for all connected marketplace integrations
   • Profile, enterprise membership, stored files, and billing references
3. Retention window: personal data is deleted or anonymized within 90 days, except where law requires longer retention. Encrypted backups may persist up to 35 additional days (see Data & Retention Policy).

Email Request

Email privacy@atlascore-market.com from your registered address with the subject "Account Deletion Request" if you cannot access the dashboard or API.

What Gets Deleted

• Profile, credentials, and authentication records
• Encrypted OAuth tokens and connection metadata for all linked marketplaces (Etsy, Shopify, Amazon, eBay, TikTok, WooCommerce, BigCommerce, and others)
• Cached listings, orders, analytics, and sync history

Need Help?

Contact support@atlascore-market.com before deleting if you need assistance exporting data.