Exporting and deleting your data
You can download everything Gylder holds about you, or delete your account permanently. Both are self-service, and deletion works by destroying the key rather than hunting through rows.
On this page
Both live under Settings → Data & privacy, and neither needs you to email anyone.
Exporting everything
Download export gives you everything Gylder holds about you. This is your GDPR right of access under Article 15, implemented as a button rather than a request form.
The export contains your profile, every connected account, the underlying financial facts, your net worth history, manual entries, transactions and alerts.
Provider credentials are excluded, deliberately. An export is a file that ends up in a downloads folder and gets emailed to accountants, and putting live API keys in it would turn a privacy feature into a security problem. Everything the credentials were used to fetch is in there; the keys themselves are not.
Two formats:
- JSON, a single file, best if you or someone helping you wants to process it
- CSV, a zip of tables, which opens in Excel, Numbers or Sheets
Exports are rate limited. Ask for a second one immediately and you will be told how long to wait.
Nothing about exporting changes your account. It is a copy, not a move.
Deleting your account
Delete my account permanently removes your account and financial data. This is the GDPR right to erasure under Article 17.
It cannot be undone, so it asks you to type your email address to confirm. That friction is deliberate.
How deletion actually works
Worth understanding, because it is stronger than it might sound.
Your financial data is encrypted with a key unique to your account. Deleting your account destroys that key. Without it, the stored data is not merely inaccessible by policy but mathematically unreadable, including in any backup taken before the deletion.
This approach is sometimes called crypto-shredding, and it is a recognised way of satisfying erasure. It is more reliable than the alternative of trying to find and scrub every row across every table, where the failure mode is a row someone forgot.
The one exception
Stripe invoices are retained for seven years, as Dutch tax law requires of any company issuing them. This is a legal obligation on Gylder rather than a choice, and it is why the deletion dialog says so before you confirm rather than after.
Those invoices are billing records: what you paid and when. They are not your financial data, which is destroyed with the key.
Before you delete
If you might want the numbers later, export first. Once the key is gone the data cannot be reconstructed by anyone, including us, which is the point.
Deleting your Gylder account does not cancel anything at your bank, broker or exchange, and does not revoke the API keys you created. If you connected an exchange, revoke the key on the exchange as well. Gylder can stop using a key; only the exchange can invalidate it.
Was this helpful?