Authenticated users can create a durable export job for eligible account and owned-workspace data and download the completed UTF-8 NDJSON package. Customers can request an assisted transition of no more than 30 calendar days, at least 30 days of post-transition retrieval, and deletion after successful retrieval, with no switching charge.
Starting a switch
An authorized account holder or workspace owner can start a durable in-product NDJSON export job or contact support with the account, workspace, requested destination, desired transition date, needed format, and scope. LabRat may verify identity, workspace authority, destination authorization, and shared-workspace impact before releasing data.
Any contractual notice period for switching will not exceed two months. Once the parties agree the transition start and scope, the normal transition period will not exceed 30 calendar days. LabRat will identify a completion date and the tasks assigned to each party.
Exportable data, structures, and formats
The authenticated account export is generated as a durable UTF-8 NDJSON job and includes the account profile, memberships, owned workspaces, project and research records, settings with secret values redacted, usage and billing-request records, Runner and push-device registrations, privacy preferences and requests, legal acceptance evidence, and an attachment manifest. Product-specific Markdown, PDF, package, or handoff exports remain available where the selected artifact supports them.
The online machine-readable register lists current fields by category, interfaces, media types, limitations, infrastructure jurisdictions, and safeguards. LabRat will update the register when a material export structure or switching interface changes.
Reasonable exclusions and shared data
- Passwords, access tokens, provider API keys, encryption material, and other secret values are omitted rather than exported in plaintext.
- Other members’ private profiles, unrelated tenant data, security controls, provider-confidential information, and third-party intellectual property are excluded.
- The self-service account export includes full content only for workspaces owned by the requester. For shared workspaces it may include records authored or requested by that person with other members’ identifiers removed; a broader shared-workspace export requires owner authorization and may remain available to other authorized members.
- Independently selected provider accounts and retained provider data must be exported or deleted through that provider.
Assistance, continuity, and destination responsibilities
LabRat will provide reasonable switching assistance, explain available schemas and limitations, preserve security and service continuity during the agreed transition, and avoid contract, technical, or organizational obstacles that unnecessarily prevent an authorized switch. Where a common structured format needs a documented field mapping, support will provide or agree a reasonable mapping.
Customer must maintain authorized destination credentials, provide timely instructions, validate imported data and functional equivalence, protect exported files, and avoid asking LabRat to bypass another provider’s security or intellectual property. LabRat cannot guarantee that a third-party destination implements every LabRat feature or accepts every data type.
Fees
LabRat charges EUR 0 for standard self-service export and reasonable switching assistance. A separate custom engineering project is never required for access to the standard export. If Customer asks for work outside the switching obligation, any optional scope and price must be agreed separately in writing and will not delay delivery of the standard export.
Retrieval and erasure after transition
Eligible exportable data will remain available for retrieval for at least 30 calendar days after the agreed transition completes. Customer should confirm successful retrieval promptly. After the retrieval period and a verified deletion instruction, LabRat will delete or de-identify eligible data, subject to shared-workspace rights, protected backup expiry, and limited legal retention.
An account deletion request has a separate 7-day cancellation window. Starting a switch does not cancel an external subscription automatically; Customer must also use the applicable billing cancellation route.
Personal data and confidentiality
Where an export contains personal data, the Privacy Policy, applicable data-protection law, and any incorporated Data Processing Addendum continue to apply. A business customer remains responsible for its legal basis, destination-provider contract, security, notices, and instructions after receiving the export.
Infrastructure jurisdiction and international access
The current core Supabase database and authentication project is configured in us-west-1 in the United States. Cloudflare delivers security, CDN, and Workers execution on a global network; this repository does not currently declare a Cloudflare Regional Services restriction. Optional Firebase, hosted AI, search, payment, Local BYOK, and destination providers use the locations described in their applicable agreements.
LabRat uses contractual transfer mechanisms, access control, encrypted transport, tenant isolation, minimized routing, encrypted stored secrets, and provider review to address international access. Provider government-access requests are assessed and challenged where the applicable agreement and law permit. Current details are also published in the machine-readable register.
Problems and complaints
Report a missed deadline, incomplete category, unusable format, security concern, or other switching obstacle with the request reference and desired remedy. Mandatory privacy, consumer, competition, contract, and Data Act remedies remain available.