GDPR & data rights

01Lawful basis for processing

• Contract: processing needed to provide the service you signed up for.
• Legitimate interests: securing the platform and improving features.
• Consent: optional features such as marketing communications.
• Legal obligation: retaining limited records where the law requires.

02Your data-subject rights

• Right to access — get a copy of the personal data we hold.
• Right to rectification — correct inaccurate or incomplete data.
• Right to erasure — delete your account and personal data.
• Right to portability — export your data in a portable format.
• Right to restrict or object to certain processing.

03Exercising your rights

Most rights can be exercised directly inside the product. Use the Account area to update your information, and the Security › Your Data area to export or permanently delete your data.

04International transfers

Where data is processed outside your region, we rely on appropriate safeguards (such as standard contractual clauses) with our subprocessors.

05Complaints

If you believe we have not handled your data appropriately, you have the right to lodge a complaint with your local supervisory authority. We'd also appreciate the chance to resolve it first.