Your library is yours. Here is the mechanism, not the slogan.
Your library is yours. Here are the six mechanisms that keep it that way.
Everything exports, in formats you can read without us.
One click in Settings downloads your whole library as a ZIP: every note as plain Markdown with its metadata in frontmatter, attachments and AI cards included, plus a manifest.json and a README that documents the layout. Single notes export as Markdown from the note itself.
Export is free on every plan. Forever.
There is no export fee, no plan gate, and no rate trick on the way out. The free tier exports exactly like the paid tiers. We will never charge you to leave.
The format round-trips.
The same bundle the exporter writes, the importer reads back. Leaving XESO and coming back preserves the content and metadata covered by the documented format.
Exports can carry a signature anyone can check.
Verified exports sign their manifest, and each cited source's content is hash-verified at export time. A recipient with no XESO account can paste the manifest at /verify to check the signature against our published key.
Deletion means deletion, on a written clock.
Account deletion is self-serve from Settings with a 72-hour grace window to change your mind. After that, your personal information and content are deleted within 30 days, and encrypted backups age out within 90. These are the same terms our privacy policy commits to.
No hostage patterns.
No feature exists to make leaving harder: no export throttles, no proprietary-only formats, no 'contact sales to get your data'. If we ever sunset a capability your data depends on, the export path outlives it.
Check us, don't trust us
Verify a signed export at /verify. Read the security and compliance posture at /trust. The deletion terms above are the same ones written into the privacy policy.