Deleting Your TrekMail Account

Deleting your TrekMail account is a deliberate, irreversible operation. The dashboard requires your current password (and a 2FA code if you have it enabled), then schedules deletion for 7 days out — giving you time to change your mind before all data is wiped.

This guide covers everything: what to do before clicking delete, the exact 7-day flow, how recovery works, and what survives vs what's permanently erased.

Before you delete

A few things to handle while you still have access to the dashboard:

• Download anything you'll need afterwards. Export each mailbox you care about over IMAP into a desktop client like Thunderbird or Apple Mail. Once deletion runs, there's no way to retrieve a mailbox or its messages. See Exporting Domains and Mailboxes Data for the data side of this.
• Re-point your DNS. If you're moving to a different email provider, update your domain's MX records before deletion finishes. Otherwise inbound email to your domain will bounce during the gap between TrekMail going down and your new MX going live.
• Download invoices. All Stripe invoices stay on Stripe's side forever, but you won't have a TrekMail dashboard to reach them through. Save PDFs from Invoices and Billing History before you click delete.
• Tell anyone who depends on your address. If your customers, vendors, or contacts have your TrekMail addresses in their address books, set up forwarding now and notify them.
• If you have White Label Lite, your branded URL stops serving as part of deletion — your end users see your domain go offline. Notify them and give them a switch-over path. The branded URL goes through its own 7-day grace window after the account-level 7-day grace, so you have roughly 14 days total from clicking delete to full DNS death — but plan as if it's 7.

If you're worried about losing files in your TrekMail Drive, download them too. The Drive folder structure isn't exportable in one click; you'd download files individually or in folder ZIPs from the Drive interface.

How to actually delete

1. Click your name in the top-right corner of the dashboard and go to Account.
2. Scroll to the bottom — the Danger Zone section in red.
3. You'll see a summary of what deletion affects: how many domains will be released, how many mailboxes will be wiped, whether your billing relationship will be closed, plus a note that active sessions sign out.
4. Click Delete account.
5. A confirmation modal opens. Fill in:
   • Current password — required if your account has a password set.
   • Two-factor code — required if you have 2FA on your account. Six digits from your authenticator app.
6. Click Delete account in the modal. The page redirects to the homepage with the confirmation: "Your account is scheduled for deletion in 7 days. If this was a mistake, please contact support as soon as possible."

If you signed in only via Google, Microsoft, or another social provider and never set a password, the modal lets you proceed without a password — but offers a link to set one first if you want the extra friction.

What happens immediately

The instant your deletion request is accepted:

• You're logged out of every browser session on this account.
• All API tokens are revoked (any scripts or integrations using TrekMail API stop working right away).
• All message tokens (the per-recipient links in transactional emails) are revoked.
• The Account → Danger Zone UI is no longer accessible because you're logged out.
• A counter starts: 7 days from this moment, deletion runs.

Your data is still on TrekMail's servers — domains, mailboxes, emails, files, settings, billing history — but you can't log in to use them. If you try to log in during the 7-day window, you'll see an error indicating the account is pending deletion.

During the 7-day grace window

Nothing is erased yet. The grace is a recovery window in case the deletion was a mistake or the person who triggered it changes their mind.

Recovery during grace: open a support ticket from any inbox (you can't use the dashboard while locked out). Include your account email and ask for the deletion to be cancelled. Support can flip the scheduled_for_deletion_at flag back to null, restore your tokens, and you're back to normal.

Don't wait until day 6 — the further along you are, the higher the risk that the cleanup job runs slightly early (queue timing) and starts the destructive operations.

Subscriptions during grace: your active subscriptions (mail plan, Drive Add-on, White Label Lite) remain technically active on Stripe but no charges happen — Stripe waits to see the next renewal trigger, and the cleanup job will cancel before that. If your subscription happens to renew during the 7-day window because the cycle date falls inside it, the charge goes through normally; you can request a refund through support if you've recovered the account.

After 7 days — what actually gets deleted

When the 7 days are up, an automated cleanup processes all expired deletion requests. For each account:

1. Stripe subscriptions are cancelled immediately — no period-end grace at this point. Mail plan, Drive Add-on, and White Label Lite all stop billing right then.
2. Domains are released from the mail server. Each domain in your account is removed from our mail-server configuration. After this step, inbound email to those domains stops being accepted by our servers. Your DNS still points at us until you change it.
3. Mailboxes are wiped. Every mailbox is deleted, taking all stored email (inbox, sent, drafts, archives, spam, trash) with it. Folder structure goes too.
4. Affiliate snapshot taken if you were an affiliate. Commission counts, total earned, payouts, attributed accounts are recorded for post-deletion accounting — we keep this for tax reasons.
5. Your account record is removed, along with related data, in a single coordinated pass so nothing lingers.

The cleanup runs in batches and may take a little while on accounts with hundreds of domains. If it gets interrupted partway through, the next scheduled run picks up where it left off.

What survives deletion

A few things are not deleted, by design:

• Stripe records. Invoices, payment methods, customer profile remain in Stripe's vault. Stripe is your record-of-charge legally; we don't (and can't) instruct Stripe to wipe historical billing data. If you want Stripe-side data deleted too, that's a separate request via Stripe support.
• Affiliate snapshots (if applicable) — the financial summary stays in our audit log so commissions paid before deletion remain traceable.
• Internal operational logs — short retention (90 days typical), then auto-expired. Not user-data, just internal records.
• Routine backups — our routine backups roll over on a 30-day window. Your data lives in those backups until they age out. Backups are not accessible to support staff for restore on request after deletion completes — the 7-day window before the destructive step is the recovery point.

If you need a documented data-removal letter for regulatory compliance (GDPR Article 17 — right to erasure), open a support ticket; we'll send a written confirmation listing exactly what was removed and what was retained for legitimate-interest reasons.

Common questions

Can I delete just one mailbox or just one domain instead of the whole account? Yes — see Deleting a Mailbox and the Domains page's "Remove" option. The "Delete account" button is for wiping the entire workspace.

I deleted my account but realised I need an invoice. Can I get it? Send the invoice number (or your old account email) to support via the support page. We can pull Stripe records and email the invoice PDF. We can't reactivate the account — invoices are the only thing reachable post-deletion.

Will my recurring referral commissions stop? If you're an affiliate, commissions on attributed accounts continue to accrue on Stripe's side even after your deletion, but with no account to pay them to, they aren't released. We snapshot the financial picture at deletion time; if you reactivate before this happens, your affiliate state restores in full. After deletion completes, those commissions are technically unclaimable.

What about my dashboard sessions on shared computers? Immediately invalidated. Anyone who had your account open on a public/shared device gets logged out at the moment you confirm deletion. Save them the awkward "wait, why am I logged out" moment by signing out manually first on those devices.

Can a malicious actor with my password delete my account? They'd need:

• Your current password.
• A live 2FA code from your authenticator (if you have 2FA enabled).

If you have 2FA on, account deletion is as protected as your other security-critical operations. If you don't have 2FA, turn it on now — see Two-Factor Authentication. Anyone with just your password could theoretically schedule deletion, and you'd have 7 days to catch it before destruction starts.

Does deletion erase my data from Backblaze B2 (Drive files)? Yes. When your account row is deleted, the linked Drive files are scheduled for B2 deletion via our standard delete-pipeline. B2 holds the bytes for a brief retention window (typically a few days) before they're permanently purged — beyond our control after that.

What's next

• Privacy and Data Retention — the full policy backing what we keep and for how long.
• Exporting Domains and Mailboxes Data — pre-deletion export workflow.
• Deleting a Mailbox — narrower scope than full account deletion.
• Cancelling or Downgrading Your Plan — if you only want to stop billing but keep the workspace.
• Two-Factor Authentication — protect this and every other destructive operation with 2FA.