Data Retention Policy

This Data Retention Policy describes how MiseCentral LLC ("MiseCentral," "we," "us," or "our") retains Customer Data, including Personal Data, in connection with the Services. This policy supplements the Agreement and the Data Processing Agreement ("DPA") where applicable.

1. Customer Ownership and Control

1.1. Customer retains all right, title, and interest in Customer Data. MiseCentral retains Customer Data only as necessary to provide the Services, meet legal obligations, resolve disputes, enforce the Agreement, and maintain security and audit integrity.

1.2. Within the Services, Customer may configure retention settings for certain operational records, Operational Evidence, and workflow artifacts where such controls are available in the Documentation. Customer is responsible for retention settings that satisfy Customer's regulatory, food-safety, quality, and business recordkeeping requirements.

2. Retention During Subscription

2.1. Operational and Hospitality Records. Customer Data submitted to the Services, including inventory, scheduling, work execution, quality, food-safety, and traceability records, is retained for the duration of the Subscription Term unless deleted by Customer through available product controls or through a deletion request under the Data Deletion Policy.

2.2. Account and User Data. Authorized User profiles, role assignments, and account metadata are retained while the user account is active and as needed for administration, billing, and audit purposes.

2.3. Operational Evidence and Audit Logs. System-generated audit logs, configuration change history, Support Mode session records, API activity logs, and security event records are retained to support accountability, investigations, and compliance with MiseCentral's security commitments. Default retention periods for platform audit logs are twelve (12) months unless a longer period is required by law, specified in an Order Form, or extended by Customer where product controls permit.

2.4. Operational Recommendations History. Historical advisory outputs, explainability artifacts, and related metadata may be retained with associated Customer Data to support auditability and Customer review of past recommendations.

2.5. Support and Professional Services Records. Support tickets, communications, and Professional Services deliverables are retained for the Subscription Term and up to twenty-four (24) months thereafter to support continuity of service and dispute resolution.

2.6. Billing Records. Subscription, invoicing, and payment records are retained for seven (7) years or longer if required by applicable tax and accounting law.

3. Backups and Disaster Recovery

3.1. Customer Data in production systems is backed up on a recurring schedule to support disaster recovery as described in the Disaster Recovery Statement.

3.2. Backup copies may persist for up to ninety (90) days after deletion from production systems before being overwritten through normal backup rotation, unless earlier purge is technically feasible and requested.

3.3. Restoration from backup is performed only in accordance with the Disaster Recovery Statement and authorized procedures.

4. Retention After Termination

4.1. Upon termination or expiration of the Agreement, Customer may export Customer Data during any applicable post-termination access period stated in the Agreement or Order Form.

4.2. After export periods expire, MiseCentral will delete or return Customer Data in accordance with the Data Deletion Policy, subject to limited retention described in Section 5.

5. Exceptions to Deletion

5.1. MiseCentral may retain Customer Data or portions thereof where retention is:

(a) required by applicable law, regulation, legal process, or governmental request; (b) necessary to establish, exercise, or defend legal claims; (c) contained in immutable audit or security logs retained under Section 2.3 to the extent such logs cannot be segregated without disproportionate effort; or (d) transformed into Aggregated Data that cannot reasonably identify Customer or any individual.

5.2. Data retained under this Section 5 is protected under the Agreement and DPA and is accessed only for the purpose for which it was retained.

6. Regulatory and Customer Compliance

6.1. Customer is solely responsible for determining retention periods required for hospitality operations, food-safety programs, quality management, traceability, employment records, and other regulatory obligations in Customer's jurisdictions and facilities.

6.2. MiseCentral's default retention practices do not constitute legal advice regarding Customer's recordkeeping obligations. Customer should configure the Services and export archives accordingly.

7. Contact

MiseCentral LLC Attn: Privacy 8 The Green, Suite A Dover, DE 19901 United States privacy@misecentral.com