Legal

Data Deletion Policy

Last updated: July 31, 2026

This policy explains what data we hold, how long we keep it, and exactly how to request deletion — for all users of GenieHaus and GenieTracker.

Table of Contents
  1. What Data We Hold
  2. Retention Schedule
  3. How to Request Deletion
  4. Social Media Platform Data (Facebook, Instagram & TikTok)
  5. What Happens After Your Request
  6. Data We Cannot Delete
  7. Third-Party Data
  8. Contact

1. What Data We Hold

  • Account data: Name, email, hashed password, profile picture.
  • Workspace data: Contacts, contracts, envelopes, tasks, notes, and all records in GenieTracker.
  • Billing data: Subscription status, invoice history, payment tokens (QB/Intuit — no raw card numbers).
  • Usage & log data: Session logs, feature events, error reports.
  • Communications: Support tickets and correspondence.

2. Retention Schedule

Immediately
Access revoked
Login is blocked and the workspace is queued for deletion.
Within 30 days
Active data permanently deleted
All workspace records, contacts, contracts, envelopes, and user profile data are removed from production systems.
Within 90 days
Backups purged
Encrypted backups are overwritten during routine rotation cycles.
Up to 7 years
Financial records retained
Billing records and invoices retained to comply with IRS requirements and QuickBooks/Intuit obligations.

3. How to Request Deletion

Option A Self-Service — Recommended
  1. Log in to GenieTracker at app.geniehaus.io.
  2. Go to Settings → Account → Danger Zone.
  3. Click Delete My Account and confirm via the verification email.
  4. Deletion begins immediately; confirmation sent within 24 hours.
Option B Email Request
  1. Email mohamed.safa@mgfgrp.com — subject: Data Deletion Request.
  2. Include your full name, registered email, and scope of data to delete.
  3. We may verify your identity before proceeding.
  4. Acknowledged within 2 business days; completed within 30 days.
Send Deletion Request →

Social Media Platform Data (Facebook, Instagram & TikTok)

If you connected a social media account to GenieHaus Social, we hold: the OAuth access token for that account, its profile info (name, username, ID, picture), cached copies of its posts and performance metrics, and comment/message threads synced for the inbox.

Option A Disconnect inside GenieHaus
  1. Open the client's Settings in GenieHaus Social.
  2. Find the connected account and click Disconnect.
  3. The access token is invalidated immediately and that account's platform data is deleted from our systems within 30 days.
Option B Remove the app from the platform itself
  1. Facebook / Instagram: go to Settings & Privacy → Apps and Websites, find GenieHaus, and remove it.
  2. TikTok: go to Settings → Security → Apps and revoke GenieHaus.
  3. The platform notifies us automatically. We invalidate stored tokens and delete the account's platform data, and — for Meta-initiated deletion requests — issue a confirmation code with a status URL you can revisit to verify the deletion completed.

You can also email mohamed.safa@mgfgrp.com to request deletion of social platform data without deleting your GenieHaus account.

4. What Happens After Your Request

  • Account locked from further login immediately.
  • All workspace data and user-generated content queued for deletion.
  • Active data deleted within 30 days; backups within 90 days.
  • Final confirmation email sent on completion.
  • Deletion is irreversible — data cannot be recovered afterward.

5. Data We Cannot Delete

  • Financial records: Invoices retained up to 7 years per IRS requirements.
  • Fraud prevention: Information related to confirmed violations may be retained.
  • Legal hold: Data under pending litigation cannot be deleted until the hold is lifted.
  • Anonymised aggregates: Statistical data with no personal identifiers may be retained indefinitely.

We will inform you of any data we are unable to delete, with reasons, within 30 days of your request.

6. Third-Party Data

Deleting your account does not automatically delete data held by processors. Contact them separately:

7. Contact

For questions or manual deletion requests:

mohamed.safa@mgfgrp.com

Response within 2 business days · Completed within 30 days