Account & data management¶

Your profile, your email address, a copy of your data, and how to leave.

Before you start: you need nothing but your own signed-in account — every control on this page is personal rather than organizational, and none of it needs a role. Long-lived tokens are refused throughout, so these are web-app or interactive-session tasks. When you're done you will know how to change your email safely, take a copy of your data, and delete the account without stranding anything that outlives it.

Profile¶

Account settings holds:

Display name — what other members see.
Profile picture — PNG, JPEG, or WebP, up to 1 MiB. Removable.
Email address — see below.

Changing your email address¶

Changing your email is a security-relevant action, so it asks for:

your current password, and
a second factor if you have one enrolled.

The new address is held as pending until you verify it from a link sent to the new address. Your existing address keeps working until then, which means a typo can't lock you out.

If you use SSO, your email may be governed by your identity provider.

Downloading your data¶

Download my data produces an archive of the personal data AppGantry holds about you.

Request the export.
AppGantry prepares it in the background.
When it's ready, download the archive from the same page.

The download link is available until it expires, and the page shows the date.

How often you can do this¶

Generating a fresh copy is deliberately rate-limited, because each export concentrates your whole footprint into one archive:

Limit	Value
Minimum gap between two new requests	24 hours
Maximum new requests in a rolling 30 days	5
Downloads of any one ready archive	20

Three things follow from that:

Re-requesting while one is still being prepared costs you nothing. A repeat request collapses onto the job already in flight rather than starting a second one, and it does not consume quota.
A refused request answers HTTP 429, with a details.reason of repeat_export_rate_limited plus an explanation of the refusal and of your right to complain to a supervisory authority. Your most recent export stays downloadable throughout — the limit is on generating another copy, never on reading the one you have.
The download cap is separate. Once an archive has been fetched 20 times it answers 429 as well, and the fix is to request a fresh export rather than to retry the link. Save the file the first time rather than treating the link as storage.

Your first request in any period always succeeds. See Errors → 429 for the exact bodies.

Every stage — requested, completed, failed, downloaded — is recorded in your audit trail, so you can prove what was exported and when.

The export covers your account's data. Organization-level data — builds, audit feed, member lists — belongs to the organization, not to you personally; export those from the organization instead. See Audit events → Exporting.

What AppGantry does with personal data more broadly, and the California "do not sell or share" determination, are set out on the marketing site: the privacy policy and the do-not-sell notice.

Deleting your account¶

Deletion is deliberate and reversible for a short window.

What happens:

Your account is locked out immediately.
It is scheduled for permanent deletion after a grace period.
You get an email with a cancellation link.
When the grace period ends, deletion is permanent.

What is removed:

Your developer profile and sign-in credentials.
Your personal access tokens and sessions.
Your membership of every organization you belong to.

What is not:

Project access tokens. They belong to the project, not to you. Revoke any that shouldn't outlive you from each project's Access tokens page before deleting.
Organizations, projects, and builds. They belong to the organization. Deleting your account removes your access, not the organization's data.
Pre-paid credit. It belongs to an organization. Eligible credit is settled when the organization is deleted from its settings page, not when you delete your account.

What blocks deletion:

If you're the only administrator of an organization, deletion is blocked until you promote another admin or delete the organization. That's deliberate: an organization with no admin is an organization nobody can run.

Confirming requires typing your email address and your password.

Changing your mind¶

Use the cancellation link in the email while the grace period is still open. Your account is reactivated and everything comes back.

Once the grace period ends, it's gone. There is no undo.

Before you leave: a checklist¶

Export your data, if you want a copy.
Export organization audit logs you're responsible for.
Revoke project access tokens you created that shouldn't survive you.
Promote another Admin in every organization where you are the only one. Admin is ownership in AppGantry, so this is the same act as handing an organization over, and deletion is refused until it is done. See Ownership.
Tell your team about webhooks and store connections you set up.
Then delete.

Troubleshooting¶

Symptom	Cause	What to do
The verification email for a new address hasn't arrived	You requested another email change within the last ~5 minutes, so the second one was absorbed rather than sent (this cooldown is separate from the signup-verification and password-reset ones)	Use the link from that earlier change email — it is still valid, and it completes the change to the address that request named — or wait out the window and ask again for the address you want. See Authentication → Email verification
Requesting an export answers 429	You already requested one in the last 24 hours, or five in the last 30 days	Download the export you already have; it stays available. Try again after the period
Downloading the archive answers 429	That archive has been downloaded 20 times	Request a fresh export
The export never becomes ready	Preparation is a background job; a failed attempt is recorded on the request	Check your audit trail for the failure, then request again after the 24-hour gap
Account deletion is refused	You are the only Admin of an organization	Promote another Admin, or delete that organization, then retry
A personal access token still works after you delete your account	Only personal tokens go with the account; project access tokens belong to the project	Revoke them from each project's Access tokens page before deleting
The cancellation link doesn't work	The grace period has ended	There is no undo after that point — contact support to discuss options