GDPR Compliance

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that applies to organizations operating within the European Union and those that offer goods or services to EU residents.

As a data subject, you have several rights under GDPR:

• • Right to be informed about data collection and processing
• • Right of access to your personal data
• • Right to rectification of inaccurate data
• • Right to erasure (right to be forgotten)
• • Right to restrict processing
• • Right to data portability
• • Right to object to processing
• • Rights related to automated decision making

We process personal data for the following purposes:

• • Providing our platform services
• • User authentication and account management
• • Communication with users
• • Analytics and platform improvement
• • Legal compliance and security

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place:

• • Adequacy decisions by the European Commission
• • Standard contractual clauses
• • Binding corporate rules
• • Other appropriate safeguards

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• • Account data - until account deletion or 3 years of inactivity
• • Communication data - for 2 years after last interaction
• • Analytics data - for 26 months
• • Legal compliance data - as required by applicable laws