A world
within msg.

Yours, and a product's

Some records exist for you alone: your account, your sign-ins, your notifications, your saved views, your private notes, your assistant conversations and the mail msg.OS sent you. They are yours, whole.

Other records belong to a product and name you among other people: a deal, a board, a comment, a meeting, a task, an audit line. They carry other people's words and work, so a copy lists each by its id and time, never its content, and deleting your account leaves them as the deletion section below says.

If you turn on two-factor sign-in: your authenticator app's secret, stored encrypted, and your recovery codes, stored only as one-way hashes; turning it off deletes them.

When you choose a password, msg.OS sends the first five characters of its SHA-1 hash to Have I Been Pwned's Pwned Passwords service to check it against known data breaches. The password itself never leaves msg.OS.

A copy of your data

To ask for a copy, write to your contact at msg. An operator prepares it in msg.OS and gives you its parts. Each request and each download is recorded.

A copy comes as one or more ZIP files. Unzip every part into one folder. It holds:

• account.json Your account as msg.OS keeps it: your name, address, role, products and settings, without any password or security field.
• own/ Records that exist for you alone, whole: your sign-ins, notifications, saved views, private notes, assistant threads, feedback, AI usage, connections, memberships and the mail msg.OS sent you.
• references/ One line for each record of a product that names you (a deal, a board, a comment, a meeting, a task, an audit line): which collection, which field, the record's id and its time, never its content. msg.knowledgeOS rows are read as you: a row you cannot read today is left out.
• files/ The files attached to your own records, as they were uploaded.
• manifest.json What the copy holds: each source, how many lines it wrote, the sources left out and why, and each file with its size and checksum.
• README.txt How to read the copy, in plain words.

A copy can be downloaded for 7 days after it is ready.

Its stored files are deleted from 8 days after they were written.

A note that the copy was prepared (when, its parts and their counts, never the records themselves) is kept for 30 days after it stops downloading.

Deleting your account

You can delete your account yourself, in User settings, by typing your name and your password. It happens at once, signs you out everywhere and cannot be undone.

msg.OS does not delete an account others still depend on. In this order, it first asks you to:

1. Give up a tier of the operator console you hold.
2. Make another account an owner, when you are the last active owner of msg.OS.
3. Make someone else a manager of every board you alone manage, or delete those boards.
4. End an open support access that lets Support view msg.OS as you.

What a deletion leaves:

• Removed: your sign-ins and their history, notifications, saved views, assistant conversations, private one-on-one notes and agenda templates, feedback, AI use, connections, Hub memberships, mail records, invitations to your address, access tokens, app authorizations, and the memory your AI kept for you in msg knowledge.
• Ended: your active one-on-ones. The other person keeps them.
• Kept, shown as a former member: what you wrote or did in shared work (comments, deals, projects, boards, tasks, files you added, Hub posts).
• Kept for 730 days, then removed: the audit record's lines naming your account.
• Kept: your People directory entry, if you have one (ask msg to remove it), your feedback on msg.knowledgeOS answers, and a record that your address must not be mailed, if there is one.