Skip to main content

​
Your Data Rights Under GDPR & CCPA

At Cleft, you have complete control over your personal data. We make it easy to exercise all your privacy rights.
Response Guarantee: All data rights requests are handled within 30 days (usually within 48 hours). Our Data Protection Officer personally reviews each request.

​
Available Rights

📋 Subject Access Request

Get a copy of ALL data we hold about you
  • Complete personal data export
  • Processing activity details
  • Data sources and recipients
Submit SAR Request (accessible form with screen reader support)

🗑️ Right to Deletion

Request complete data deletion
  • Remove all personal information
  • Delete account and associated data
  • Permanent and irreversible
Email: [email protected] or use accessible form

✏️ Right to Correction

Fix incorrect personal information
  • Update profile information
  • Correct inaccurate data
  • Ensure data accuracy
Via Settings or email DPO

📤 Right to Portability

Export your data in standard formats
  • Already available in-app
  • JSON, markdown, or plain text
  • Take your data anywhere
Use Export features in Settings

🚫 Right to Object

Opt-out of data processing
  • Object to specific uses
  • Withdraw consent anytime
  • Control processing purposes
Contact DPO for assistance

⏸️ Right to Restrict

Limit how we process your data
  • Suspend processing temporarily
  • While disputes are resolved
  • Maintain but not use data
Email DPO with specific request

​
Data Protection Officer

🛡️ Jonny Cosgrove - Data Protection Officer

Your dedicated privacy advocate

​
Request Types & Processing

  • Subject Access Request
  • Deletion Request
  • Correction Request
What you’ll receive:
  • Complete data export (JSON format)
  • List of all data categories we hold
  • Processing purposes for each data type
  • Third parties who have received your data
  • Data retention periods
  • Source of data collection
Processing time: 30 days maximum (usually 2-3 days)How to request: Use our SAR form for fastest processing

​
Quick Actions

Submit SAR

Official form

Request Deletion

Email DPO

Privacy Policy

Full details

Contact DPO

General questions

​
Frequently Asked Questions

Maximum 30 days as required by GDPR, but we typically complete requests within 48 hours. You’ll receive an email confirmation when submitted and another when completed.
Yes! You do not have to delete everything. Contact our DPO at [email protected] to discuss selective deletion - for example, deleting certain notes while keeping your account active.
For security, we may ask you to verify your identity by:
  • Sending the request from your registered email address
  • Providing your account username or email
  • Answering security questions about your account
This protects your data from unauthorized access.
Yes, if you have written authorization or are a legal guardian. Please include:
  • Proof of authorization or guardianship
  • The data subject’s identity verification
  • Your own identity verification
Email [email protected] for assistance.
Transparency Promise: We believe privacy is a fundamental right. Our DPO handles every request personally, and we’re committed to making the process as simple and transparent as possible.