The cloud account authorizes hosted operations and billing. It does not hold the private keys required to decrypt an existing workspace.
Entitlement behaviour
Personal Sync and Team subscriptions are updated from signed, idempotent Stripe webhooks. Personal Sync is one personal workspace subscription. Team is billed by paid seat quantity, and the server rejects a new invitation when active members and outstanding invitations have reached that quantity. Workspace owners and administrators can start Checkout or open the billing portal.
Active and trial subscriptions can upload encrypted revisions. A payment problem starts the documented grace period. After grace, new uploads stop, while pull and export remain available during the final download window.
Local Docmancer never stops working because of hosted billing state.
Export
Use the local CLI for a readable local export:
docmancer cloud export ./docmancer-export
The dashboard can also queue a hosted export containing ciphertext, wrappers, public keys, cursors, and a checksummed manifest. Hosted exports are short-lived and still require your device or recovery key to decrypt memory.
Delete hosted data
docmancer cloud delete-remote --confirm DELETE
Deletion is scheduled with a cooling-off period and owner notification. It removes the remote workspace and related primary rows when the worker completes. Any provider-managed backup copies expire under the Supabase backup policy configured by the operator. Local records are unaffected.