> ## Documentation Index
> Fetch the complete documentation index at: https://trysalty.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Data & deletion

> Soft-delete trash, full export, and workspace deletion — your data stays yours.

Salty lets agents read and write your CRM, so the data-control guarantees are part of the product. In short: deletes are reversible, you can hand out look-but-don't-touch keys, and you can take all your data out — or delete it entirely — at any time.

## Deletes are reversible (30-day trash)

Every record `DELETE` **soft-deletes** to a [30-day trash](/docs/api-reference/trash); restore anytime within the window. There is deliberately no agent tool — and no API route — that hard-deletes a record, so an agent can never irreversibly destroy your data. After 30 days, trashed records are purged by a daily job.

## Least-privilege keys

Create a [read-only API key](/docs/concepts/authentication) (`read_only: true` on `POST /api-keys`) for any agent or tool that should only read. It can call `GET` endpoints, but every write returns `403 insufficient_scope`.

## Export everything

[`GET /workspace/export`](/docs/api-reference/workspace) returns a single JSON document with every active record (people, companies, deals, notes, tasks, activities, custom objects) plus your schema — no lock-in, no support ticket.

## Delete everything

[`POST /workspace/delete`](/docs/api-reference/workspace) (admin/JWT only, type-to-confirm) immediately revokes all API keys and OAuth tokens and schedules your workspace for removal. You can also do this from the dashboard **Account** page.

<Note>
  A read-only key can still call `GET /workspace/export`, so a hands-off agent can take a backup without being able to change anything.
</Note>