Last updated: October 23, 2026
AppGenetics, Inc. — AppGenetics (appgenetics.com) and AppModeler (appmodeler.com)
Version history
| Version | Effective date | Author / owner | Approved by | Summary of changes |
|---|---|---|---|---|
| 1.0 | October 23, 2026 | Thomas Gray, Founder | Thomas Gray, Founder | Initial published version |
1. Purpose
This policy explains how long AppGenetics, Inc. ("AppGenetics", "we", "us") keeps data related to its customers, and how that data is deleted or anonymized when it is no longer needed. Its goals are to keep data only as long as there is a clear reason to, to give customers a predictable experience when they cancel or ask for deletion, and to meet our legal, tax, and accounting obligations. If this policy and our Terms of Service disagree about the retention or deletion of customer data, the Terms of Service prevail.
2. Scope
This policy applies to:
AppGenetics (appgenetics.com), the customer-facing website where customers sign up and manage subscriptions billed through Stripe (a 14-day free trial, followed by $20 per seat per month, where a seat is each active user account on the customer’s AppModeler tenant);
AppModeler (appmodeler.com), the platform where each customer receives its own tenant for building custom enterprise applications;
all customer data, account and billing records, backups, and logs associated with these services, wherever they are stored, including with third-party processors; and
the founder, the engineering team, and any contractors or others who handle this data on behalf of AppGenetics.
This policy does not cover internal company records unrelated to customers (for example, HR records), which are handled separately and are outside the scope of this policy.
3. Definitions
Customer: An organization or individual that has signed up for AppGenetics, including during a free trial.
Customer data: All data a customer, or its users, stores in or creates through the platform, including the apps, configurations, records, files, and user information held in its tenant.
Tenant database: The separate database dedicated to a single customer on AppModeler. Each customer's data lives in its own database and is not shared with other customers (per-tenant isolation).
Account and billing records: Information needed to run the customer relationship, such as account contact details, subscription history, invoices, and payment records. Payment card details are held by Stripe, not by AppGenetics.
Backups: Copies of databases and systems kept so that data can be restored after an error, failure, or incident.
Logs: Automatically generated records of system activity, such as application, access, security, and error logs, and usage analytics.
Anonymize: To irreversibly remove or alter information so that it can no longer be linked to a specific customer or person.
Grace period: The 90-day period after cancellation during which customer data is kept so the customer can reactivate.
4. Data categories and retention periods
| Data category | Examples | Retention period |
|---|---|---|
| Customer data (tenant database) | Apps, configurations, records, files, user accounts within the tenant | While the account is active, plus 90 days after cancellation; then deleted. Sooner on written request. |
| Account records | Account owner name, email, company, subscription status | While the account is active, plus 90 days after cancellation; then deleted or anonymized, except where needed as legal or tax records. |
| Billing and tax records | Invoices, payment and refund records (held by Stripe), tax records | 7 years, then securely deleted or anonymized, unless a legal hold applies. |
| Contracts and agreements | Signed agreements, order forms, accepted terms of service versions | 7 years after the agreement ends, then securely deleted or anonymized, unless a legal hold applies. |
| Backups | Database and system backups | Purged on the normal backup rotation cycle after the source data is deleted. |
| Logs and analytics | Application, access, security, and error logs; usage analytics | Kept only as long as needed to operate, secure, and troubleshoot the Service, generally for a shorter period than customer data, unless needed to strengthen security or required by law; after customer deletion, any retained logs and analytics are anonymized. |
| Deletion request records | Copy of the request, verification, and completion confirmation | 7 years, as evidence that the request was handled. |
5. Active customers
While a customer has an active subscription (including the 14-day free trial), we keep its customer data for as long as needed to provide the service. Customers control the content of their own tenant and may delete individual records or apps at any time; data deleted by a customer is removed from live systems promptly and from backups on their normal rotation cycle.
If a free trial ends without the customer subscribing, the account is treated as cancelled at the end of the trial, and Section 6 applies.
6. Cancellation and the 90-day grace period
When a customer cancels its subscription, or its subscription is cancelled for non-payment as described in our Terms of Service, its account becomes inactive and its customer data is kept for 90 days from the cancellation date.
During this 90-day grace period, the data is not used for any purpose other than storage and potential restoration, and access is limited to authorized staff.
The customer can reactivate its subscription at any time during the grace period, and its tenant and data will be restored intact.
At the end of the 90-day grace period, all customer data is deleted or anonymized as described in Section 8, except legal and tax records kept under Section 9.
We may send a reminder email to the account owner before the grace period ends.
A customer can ask for its data to be deleted before the 90 days are up by submitting a written deletion request under Section 7.
7. Written deletion requests
Customers may ask, at any time, for their data to be deleted sooner than the end of the 90-day grace period, including while their account is still active (which will end their use of the service).
How to submit: Send the request in writing by email to support@appgenetics.com. Include the account name, the account email address, the domain or tenant concerned, and a clear statement that you want the data deleted.
Verification: Before acting, we verify the identity of the requester and that they have authority to request deletion for the account, for example by confirming the request from the account owner's registered email address. We may ask for more information if needed.
Confirmation of receipt: We will acknowledge the request in writing within 5 business days of receiving it.
Completion target: We aim to complete deletion within 30 days of verifying the request. Backup copies are purged on their normal rotation cycle after that.
What is kept anyway: Records we must keep for legal or tax reasons (such as invoices, payment records, and contracts) are retained under Section 9, as is a record of the deletion request itself.
Written confirmation: When deletion is complete, we will confirm it in writing to the requester.
8. Deletion and anonymization methods
Tenant database: Because each customer has its own database, deletion is carried out by dropping the customer's entire tenant database, along with any files or storage associated only with that tenant.
Backups: Backups are not edited individually. They are purged on their normal rotation cycle, so deleted data is fully removed from backups once those backups reach the end of their rotation cycle. If a backup is restored before then, any deleted customer data is removed again before the system returns to service.
Account records: Account records that are not needed as legal or tax records are deleted or anonymized.
Logs and analytics: Identifiable information in retained logs and analytics (such as names, email addresses, and IP addresses) is removed or anonymized, so that only aggregate or non-identifying data remains.
Third-party systems: Where data is held by a processor, we use the deletion tools or processes the processor provides, subject to the processor's own retention obligations (see Section 11).
Record of deletion: We keep a short record of when deletion was completed, without retaining the deleted content.
9. Legal and tax records (7 years)
Some records must be kept after a customer leaves to meet applicable tax, accounting, and legal requirements. These are kept for 7 years and include:
invoices and receipts;
payment, refund, and chargeback records, including those held by Stripe;
contracts, order forms, and the version of terms accepted by the customer; and
other records required by applicable tax and accounting laws.
Only the information needed for these purposes is kept, and access is restricted to authorized staff. At the end of the 7-year period, these records are securely deleted or anonymized, unless a legal hold applies (Section 10). Disposal is reviewed at least once a year.
10. Legal holds
If AppGenetics is involved in, or reasonably expects, litigation, a government investigation, or an audit, the Founder may place a legal hold on relevant data. Data under a legal hold is not deleted, even if its retention period has ended, until the hold is formally released in writing. Normal retention and deletion resume once the hold is lifted. Legal holds are documented, including their scope and the date they were placed and released.
11. Third-party processors
We use third-party service providers to operate the platform. They process data on our behalf and are expected to protect and delete it in line with our agreements with them.
| Processor | Purpose | Retention notes |
|---|---|---|
| Stripe | Subscription billing and payment processing | Holds payment card data and payment records under its own legal obligations; these records may be kept by Stripe after we delete our copy. |
| Hosting provider | Hosting tenant databases, application servers, and backups | Data deleted per this policy; backups purged on their normal rotation cycle. |
| EmailJS | Delivering contact form messages to us | Processes contact form submissions only to deliver them to us. |
| Analytics providers (Google Analytics) | Website and product usage analytics | Usage data generally kept for a shorter period than customer data; anonymized after customer deletion. |
The table above lists the main categories of processors we use. A current list of processors is available on request by emailing support@appgenetics.com.
12. Roles and responsibilities
Founder: Thomas Gray approves this policy and any changes to it, is accountable for its implementation, places and releases legal holds, and manages billing and tax records and their disposal after 7 years.
Support (support@appgenetics.com): Written deletion requests and questions about retention are received at this address and handled by the Founder.
Engineering team: Runs the technical deletion, backup rotation, and log anonymization processes, and keeps records that they were completed.
Engineers and contractors: Follow this policy and report any data kept longer than it should be, or any suspected deletion failure, to the Founder or by email to support@appgenetics.com.
13. Policy review
This policy is reviewed at least once a year, and also whenever there is a significant change to the platform, our processors, or applicable legal requirements. Changes are approved by the Founder and recorded in the version table at the top of this document. The next scheduled review is due by October 23, 2027.
14. Contact
Questions about this policy, or written deletion requests, should be sent to support@appgenetics.com.