Skip to content

Upgrade & Downgrade

In the web app: SettingsBilling. Pick the tier you want. Paddle handles the checkout flow. The change applies immediately for upgrades and at end-of-period for downgrades.

  • Effective immediately
  • Paddle prorates the new tier against the remaining period
  • New caps unlock right away
  • Card is charged the prorated difference at checkout
  • Effective at the end of the current billing period (not immediately)
  • No proration — you stay on the higher tier for the time you already paid for
  • Auto-renew bills at the new lower rate at period end

If your usage exceeds the lower tier’s caps, Engram handles it gracefully — nothing is deleted automatically. Specifically:

  • Vault still syncs — sync continues to work even over the cap
  • Read access stays open — you can always read your existing data
  • New writes may be limited — once over cap, the next write may fail with a friendly error pointing you to either trim down or re-upgrade

There is no silent data loss. The downgrade enforces caps on new writes only — once you’re over the new tier’s cap, the next write fails with HTTP 402 quota_exceeded and the client surfaces a friendly prompt. Existing notes stay readable. You have a 30-day grace window to either trim down or re-upgrade; after 30 days over-quota data moves to a read-only restricted state. Hard-delete does not apply to tier changes — only cancellation triggers deletion.

  • All notes, attachments, vault structure
  • MCP OAuth tokens — the mcp scope is the same across tiers, so existing connectors keep working without re-auth
  • Search index
  • Sync state
  • Storage and write caps — once over the lower tier’s cap, see the “Data implications” section above
  • Embedding priority — moves you to the new tier’s queue depth
  • Downgrade to Free keeps your account active and your vault reachable
  • Cancel deletes your subscription record. Engram keeps the vault intact for a 30-day grace period, then soft-deletes (recoverable by admin until day 60), then hard-deletes after day 60. See Refund & Cancel for the full timeline.

If you’re not sure, downgrade to Free first. You can always cancel later.