> ## Documentation Index
> Fetch the complete documentation index at: https://learn.cleftnotes.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Data Rights & Requests

> Exercise your data privacy rights - access, deletion, correction, and portability under GDPR and CCPA

## Your Data Rights Under GDPR & CCPA

At Cleft, you have complete control over your personal data. We make it easy to exercise all your privacy rights.

<Info>
  **Response Guarantee**: All data rights requests are handled within 30 days (usually within 48 hours). Our Data Protection Officer personally reviews each request.
</Info>

## Available Rights

<CardGroup cols={2}>
  <Card title="📋 Subject Access Request" icon="file-text">
    **Get a copy of ALL data we hold about you**

    * Complete personal data export
    * Processing activity details
    * Data sources and recipients

    [Submit SAR Request](https://tally.so/r/mee2dx) (accessible form with screen reader support)
  </Card>

  <Card title="🗑️ Right to Deletion" icon="trash">
    **Request complete data deletion**

    * Remove all personal information
    * Delete account and associated data
    * Permanent and irreversible

    Email: [dpo@cleftnotes.com](mailto:dpo@cleftnotes.com?subject=Data%20Deletion%20Request) or use [accessible form](https://tally.so/r/mee2dx)
  </Card>

  <Card title="✏️ Right to Correction" icon="edit">
    **Fix incorrect personal information**

    * Update profile information
    * Correct inaccurate data
    * Ensure data accuracy

    Via Settings or email DPO
  </Card>

  <Card title="📤 Right to Portability" icon="download">
    **Export your data in standard formats**

    * Already available in-app
    * JSON, markdown, or plain text
    * Take your data anywhere

    Use Export features in Settings
  </Card>

  <Card title="🚫 Right to Object" icon="shield-x">
    **Opt-out of data processing**

    * Object to specific uses
    * Withdraw consent anytime
    * Control processing purposes

    Contact DPO for assistance
  </Card>

  <Card title="⏸️ Right to Restrict" icon="pause">
    **Limit how we process your data**

    * Suspend processing temporarily
    * While disputes are resolved
    * Maintain but not use data

    Email DPO with specific request
  </Card>
</CardGroup>

## Data Protection Officer

<Card title="🛡️ Jonathan Cosgrove - Data Protection Officer" icon="user-shield">
  **Your dedicated privacy advocate**

  * 📧 **Primary**: [dpo@cleftnotes.com](mailto:dpo@cleftnotes.com)
  * 📧 **Alternative**: [privacy@cleftnotes.com](mailto:privacy@cleftnotes.com)
  * 💼 **LinkedIn**: [Connect with Jonathan](https://www.linkedin.com/in/jonnycosgrove/)
  * ⏰ **Response Time**: Within 30 days (usually 48 hours)
</Card>

## Request Types & Processing

<Tabs>
  <Tab title="Subject Access Request">
    **What you'll receive:**

    * Complete data export (JSON format)
    * List of all data categories we hold
    * Processing purposes for each data type
    * Third parties who have received your data
    * Data retention periods
    * Source of data collection

    **Processing time:** 30 days maximum (usually 2-3 days)

    **How to request:** [Use our SAR form](https://tally.so/r/mee2dx) for fastest processing
  </Tab>

  <Tab title="Deletion Request">
    **What gets deleted:**

    * All personal account information
    * All notes and voice recordings
    * All usage data and preferences
    * All backup copies across our systems

    <Danger>
      This action is **permanent and irreversible**. Once your data is deleted, we cannot recover it. You will lose access to all your notes, voice recordings, and account information forever.
    </Danger>

    **Additional notes:**

    * All backup copies are deleted across our systems
    * Anonymous usage analytics may be retained for service improvement

    **How to request:** Email \[[dpo@cleftnotes.com](mailto:dpo@cleftnotes.com)]\(mailto:[dpo@cleftnotes.com](mailto:dpo@cleftnotes.com)?subject=Deletion Request)
  </Tab>

  <Tab title="Correction Request">
    **What you can correct:**

    * Display name and profile information
    * Email address and contact details
    * Account preferences and settings
    * Billing information

    **How to request:**

    * Simple corrections: Update directly in Settings
    * Complex issues: Email DPO with details

    **Verification:** We may ask for identity verification for security
  </Tab>
</Tabs>

## Quick Actions

<CardGroup cols={4}>
  <Card title="Submit SAR" icon="external-link" href="https://tally.so/r/mee2dx">
    Official form
  </Card>

  <Card title="Request Deletion" icon="envelope" href="mailto:dpo@cleftnotes.com?subject=Deletion Request">
    Email DPO
  </Card>

  <Card title="Privacy Policy" icon="shield-check" href="/trust/privacy-policy">
    Full details
  </Card>

  <Card title="Contact DPO" icon="user" href="mailto:dpo@cleftnotes.com">
    General questions
  </Card>
</CardGroup>

## Frequently Asked Questions

<AccordionGroup>
  <Accordion title="How long does a Subject Access Request take?">
    **Maximum 30 days** as required by GDPR, but we typically complete requests within **48 hours**. You'll receive an email confirmation when submitted and another when completed.
  </Accordion>

  <Accordion title="Can I request deletion of just some data?">
    Yes! You do not have to delete everything. Contact our DPO at [dpo@cleftnotes.com](mailto:dpo@cleftnotes.com) to discuss **selective deletion** - for example, deleting certain notes while keeping your account active.
  </Accordion>

  <Accordion title="What verification is required?">
    For security, we may ask you to verify your identity by:

    * Sending the request from your registered email address
    * Providing your account username or email
    * Answering security questions about your account

    This protects your data from unauthorized access.
  </Accordion>

  <Accordion title="Can I make requests on behalf of someone else?">
    Yes, if you have **written authorization** or are a legal guardian. Please include:

    * Proof of authorization or guardianship
    * The data subject's identity verification
    * Your own identity verification

    Email [dpo@cleftnotes.com](mailto:dpo@cleftnotes.com) for assistance.
  </Accordion>
</AccordionGroup>

<Note>
  **Transparency Promise**: We believe privacy is a fundamental right. Our DPO handles every request personally, and we're committed to making the process as simple and transparent as possible.
</Note>
