Delete account and data

Vexlo stores OAuth tokens (encrypted in secure storage), cached Bexio data (invoices, supplier bills, files, contacts), notification history, your push notification token, and app preferences locally on your device. A small amount of data is also kept on our backend to deliver notifications: device registration, polling state for invoices, supplier bills and files, and your notification history.

Note: This app is a client for your Bexio account. Your Bexio account itself is managed by Bexio AG at bexio.com and is never affected by anything you do in this app. To delete your Bexio account, contact Bexio directly.

In the app: Settings → Sign out. This wipes all local data on this device (cached entities, OAuth tokens, push registration for this device) and signs you out. Other devices in your organisation, the server-side notification history, and your Bexio account at bexio.com are not affected.

In the app: Settings → Delete all data. This option is only visible if you are an admin of the Bexio organisation, or if yours is the last device signed in for the organisation.

It does everything Sign out does, and in addition purges all server-side data for the entire organisation: every registered device, all polling state (invoices, supplier bills, files), the notification history, per-user read and dismissed state, and the account record. Other members of the organisation on other devices will be signed out from the app on their next request to our backend.

Your Bexio account at bexio.com is not affected. If you are not an admin and not the last device, this option is hidden, sign out instead, or ask your organisation admin to delete the account.

If no device in your organisation contacts our backend for 90 days, all server-side data for that organisation is automatically deleted: devices, polling state, notification history, and the account record.

If everyone signs out but no one explicitly deletes the account, the orphan account record is purged after a 30-day grace period from the last sign-in. Worst case, server-side data for an inactive user is removed within 90 days.

Local data on each device remains until you sign out or uninstall the app on that device.

Uninstalling the app removes all local data on the device: cache, secure storage, uploaded files, preferences. It does not touch server-side data. To purge both at once, use Delete all data before uninstalling (if available to you), or rely on the 90-day automatic cleanup.

If you can no longer open the app and want your server-side data removed sooner than the automatic 90-day cleanup, email info [at] devs-group [dot] com with subject Vexlo data deletion. Include the email address you signed in with so we can identify the right organisation. We process requests within 30 days.