🛡️ Privacy & Security
Data Rights & Requests
Exercise your data privacy rights - access, deletion, correction, and portability under GDPR and CCPA
Your Data Rights Under GDPR & CCPA
At Cleft, you have complete control over your personal data. We make it easy to exercise all your privacy rights.Response Guarantee: All data rights requests are handled within 30 days (usually within 48 hours). Our Data Protection Officer personally reviews each request.
Available Rights
📋 Subject Access Request
Get a copy of ALL data we hold about you
- Complete personal data export
- Processing activity details
- Data sources and recipients
🗑️ Right to Deletion
Request complete data deletion
- Remove all personal information
- Delete account and associated data
- Permanent and irreversible
✏️ Right to Correction
Fix incorrect personal information
- Update profile information
- Correct inaccurate data
- Ensure data accuracy
📤 Right to Portability
Export your data in standard formats
- Already available in-app
- JSON, markdown, or plain text
- Take your data anywhere
🚫 Right to Object
Opt-out of data processing
- Object to specific uses
- Withdraw consent anytime
- Control processing purposes
⏸️ Right to Restrict
Limit how we process your data
- Suspend processing temporarily
- While disputes are resolved
- Maintain but not use data
Data Protection Officer
🛡️ Jonny Cosgrove - Data Protection Officer
Your dedicated privacy advocate
- 📧 Primary: [email protected]
- 📧 Alternative: [email protected]
- 💼 LinkedIn: Connect with Jonny
- ⏰ Response Time: Within 30 days (usually 48 hours)
Request Types & Processing
What you’ll receive:
- Complete data export (JSON format)
- List of all data categories we hold
- Processing purposes for each data type
- Third parties who have received your data
- Data retention periods
- Source of data collection
Quick Actions
Submit SAR
Official form
Request Deletion
Email DPO
Privacy Policy
Full details
Contact DPO
General questions
Frequently Asked Questions
How long does a Subject Access Request take?
How long does a Subject Access Request take?
Maximum 30 days as required by GDPR, but we typically complete requests within 48 hours. You’ll receive an email confirmation when submitted and another when completed.
Can I request deletion of just some data?
Can I request deletion of just some data?
Yes! You do not have to delete everything. Contact our DPO at [email protected] to discuss selective deletion - for example, deleting certain notes while keeping your account active.
What verification is required?
What verification is required?
For security, we may ask you to verify your identity by:
- Sending the request from your registered email address
- Providing your account username or email
- Answering security questions about your account
Can I make requests on behalf of someone else?
Can I make requests on behalf of someone else?
Yes, if you have written authorization or are a legal guardian. Please include:
- Proof of authorization or guardianship
- The data subject’s identity verification
- Your own identity verification
Transparency Promise: We believe privacy is a fundamental right. Our DPO handles every request personally, and we’re committed to making the process as simple and transparent as possible.