Both are under Your data on the Security page.
Exporting
Download my data produces a file in JSON format containing what phas holds about you: your profile, billing details, plans, domains, DNS zones, tickets and the security log. Secrets such as passwords and API tokens are not included. The export is generated on the spot and is yours to keep.
This is the reasonable-access right under Australian privacy law, made self-serve.
Deleting the account
Delete my account erases the account and its personal data. It is blocked while live services exist, because deleting an account that still hosts a website or holds a domain would take those down without warning. The page tells you what is still active.
To delete:
- Cancel any hosting plans and let them reach the end of their period. See Cancel a plan.
- Transfer domains away or let them expire. See Transfer a domain away.
- Return to the page, retype your account email to confirm, and delete.
Erasure is permanent. Invoices are kept as required by tax law, with the personal details removed from everything else.