Data Rights & Requests

Exercise your data privacy rights - access, deletion, correction, and portability under GDPR and CCPA

Your Data Rights Under GDPR & CCPA

At Cleft, you have complete control over your personal data. We make it easy to exercise all your privacy rights.

Response Guarantee: All data rights requests are handled within 30 days (usually within 48 hours). Our Data Protection Officer personally reviews each request.

Available Rights

📋 Subject Access Request

Get a copy of ALL data we hold about you

• Complete personal data export
• Processing activity details
• Data sources and recipients

Submit SAR Request (accessible form with screen reader support)

🗑️ Right to Deletion

Request complete data deletion

• Remove all personal information
• Delete account and associated data
• Permanent and irreversible

Email: [e-mail] or use accessible form

✏️ Right to Correction

Fix incorrect personal information

• Update profile information
• Correct inaccurate data
• Ensure data accuracy

Via Settings or email DPO

📤 Right to Portability

Export your data in standard formats

• Already available in-app
• JSON, markdown, or plain text
• Take your data anywhere

Use Export features in Settings

🚫 Right to Object

Opt-out of data processing

• Object to specific uses
• Withdraw consent anytime
• Control processing purposes

Contact DPO for assistance

⏸️ Right to Restrict

Limit how we process your data

• Suspend processing temporarily
• While disputes are resolved
• Maintain but not use data

Email DPO with specific request

Data Protection Officer

🛡️ Jonny Cosgrove - Data Protection Officer

Your dedicated privacy advocate

• 📧 Primary: [e-mail]
• 📧 Alternative: [e-mail]
• 💼 LinkedIn: Connect with Jonny
• ⏰ Response Time: Within 30 days (usually 48 hours)

Request Types & Processing

Subject Access Request

What you’ll receive:

• Complete data export (JSON format)
• List of all data categories we hold
• Processing purposes for each data type
• Third parties who have received your data
• Data retention periods
• Source of data collection

Processing time: 30 days maximum (usually 2-3 days)

How to request: Use our SAR form for fastest processing

Quick Actions

Submit SAR

Official form

Request Deletion

Email DPO

Privacy Policy

Full details

Contact DPO

General questions

Frequently Asked Questions

How long does a Subject Access Request take?

Maximum 30 days as required by GDPR, but we typically complete requests within 48 hours. You’ll receive an email confirmation when submitted and another when completed.

Can I request deletion of just some data?

Yes! You do not have to delete everything. Contact our DPO at [e-mail] to discuss selective deletion - for example, deleting certain notes while keeping your account active.

What verification is required?

For security, we may ask you to verify your identity by:

• Sending the request from your registered email address
• Providing your account username or email
• Answering security questions about your account

This protects your data from unauthorized access.

Can I make requests on behalf of someone else?

Yes, if you have written authorization or are a legal guardian. Please include:

• Proof of authorization or guardianship
• The data subject’s identity verification
• Your own identity verification

Email [e-mail] for assistance.

Transparency Promise: We believe privacy is a fundamental right. Our DPO handles every request personally, and we’re committed to making the process as simple and transparent as possible.