Your data, exportable and deletable — in writing

Your data is yours. That was always the posture; now it's a button.

Under Settings → Data & Privacy, an admin can request a complete export: every record as plain JSON Lines, every uploaded file in its original format — contracts, photos, signed tickets, the lot — packaged as standard .tar.gz archives with a manifest, checksums, and a README that explains the layout so the archive is usable with no STrOp software at all. Downloads are time-limited links generated on demand, never email attachments.

The same page carries the other half of the promise: permanent deletion. It's deliberately hard to do by accident — admin password confirmation, the company name typed exactly, a grace period during which any admin can cancel, and every member notified. A fresh verified export is generated first, always. Then the deletion sweeps everything: records, files, search and AI index entries, member accounts — and finishes by re-checking every store directly before writing you a completion record of what was removed and when.

No soft-delete flags, no "deactivated" limbo. When it says deleted, it means deleted — and you get that in writing.