Your Data Rights
We respect your privacy and your rights over your personal data. Here's what you need to know.
Right to Access
Request a copy of all personal data we hold about you.
Right to Rectification
Correct inaccurate or incomplete personal data.
Right to Erasure
Request deletion of your personal data ("right to be forgotten").
Right to Portability
Receive your data in a portable format to transfer elsewhere.
GDPR Rights (EU/EEA Residents)
If you're located in the European Union or European Economic Area, you have the following rights under GDPR:
- Right to Access (Art. 15) - Obtain confirmation of whether we process your data and access to it
- Right to Rectification (Art. 16) - Have inaccurate data corrected
- Right to Erasure (Art. 17) - Have your data deleted under certain circumstances
- Right to Restrict Processing (Art. 18) - Limit how we use your data
- Right to Data Portability (Art. 20) - Receive your data in a machine-readable format
- Right to Object (Art. 21) - Object to processing based on legitimate interests
- Right to Withdraw Consent - Withdraw consent at any time where processing is based on consent
CCPA Rights (California Residents)
If you're a California resident, you have the following rights under CCPA:
- Right to Know - What personal information we collect, use, and share
- Right to Delete - Request deletion of personal information
- Right to Opt-Out - Opt out of the sale of personal information (we do not sell your data)
- Right to Non-Discrimination - Equal service regardless of exercising your rights
Note: We do not sell your personal information to third parties.
Other Privacy Laws
We also respect privacy rights under:
- UK GDPR - For UK residents
- LGPD - Brazil's General Data Protection Law
- PIPEDA - Canada's privacy law
- Australian Privacy Act - For Australian residents
How to Exercise Your Rights
To exercise any of your data rights, you can:
- Email us at privacy@p15r.io
- Include your full name and email address associated with your account
- Specify which right(s) you wish to exercise
- Provide any additional information that helps us process your request
We will respond to your request within 30 days as required by law. We may need to verify your identity before processing certain requests.
What Data We Collect
For transparency, here are the categories of data we may collect:
- Account Information - Name, email, password (encrypted)
- Billing Information - Payment details (processed by Stripe)
- Usage Data - How you use our services
- Content - Audit reports and data you upload
- Device Information - Browser type, IP address, device identifiers
- Communications - Support tickets and correspondence
Data Retention
We retain your data for as long as needed to provide our services:
- Active accounts - Data retained while your account is active
- After cancellation - Data retained for 30 days, then deleted
- Legal requirements - Some data may be retained longer if required by law
- Anonymized data - Aggregated, anonymized data may be retained indefinitely
Supervisory Authority
If you're not satisfied with how we handle your data rights request, you have the right to lodge a complaint with your local data protection authority. For EU residents, you can find your local authority at European Data Protection Board.
Questions?
If you have questions about your data rights or our privacy practices, please contact our Data Protection Officer at dpo@p15r.io.