Data Controls
Everything below is in the app today (Hydra v39).
Private and temporary chats
Temporary (top bar) chats are never saved to your account, never create memories and never appear in history. The provider that answers still receives the messages, and an answer in a long-running mode (Deep Think, Fusion, Compare, Think) is held on the server for up to 24 hours so the page can collect it. Ordinary chats for signed-in accounts are stored so they sync across devices; guests' chats stay in the browser.
Memory
Settings → Memory: switch memory on or off, read every stored memory, edit or delete any of them, or clear all. Memories are per account and never shared between accounts. Temporary chats never add memories. When memory is on, or you are working in a project, the assistant can also use a search_my_knowledge tool to keyword-search your own saved chats, projects and memories when you refer to earlier work; it only ever searches your own account, and the snippets it finds are sent to the model answering that chat.
Providers
Settings → Account & privacy → block any provider. A blocked provider gets no key on the server, so no mode (Smart, Fusion, Compare, Deep Think and the rest), tool or scheduled task can send your content to it. The model picker shows which provider answers each message, and every answer shows provider, model, token estimate, cost estimate, whether web search ran and which tools were used.
Connected apps
Settings → Connectors: see what is connected, disable or remove any connector; OAuth tokens can be revoked by removing the connector (and in the app you connected). Connectors are only called when the assistant uses that tool in your conversation.
Shared links
Settings → Account & privacy → "Show my shared links" lists links you created; Remove deletes the public copy immediately.
Export
Settings → Data → "Export all chats" gives you one JSON file with every chat on this device/account, importable back into Hydra.
Deletion
Per chat (the bin icon next to the chat in the sidebar, with undo); everything on this device (Settings → Data); the whole account (Settings → Account & privacy → Delete my account, password required). See Account & Data Deletion.
Sessions and password
Change password (signs out other devices), "Sign out everywhere", and admin-issued reset codes if you forget your password.
What you cannot change
Daily and monthly spending records (totals only) and the admin audit trail are kept for the operator's protection. Hosting-platform logs and backups follow Netlify's retention.