2.1 Right of Access (Article 15)

You have the right to obtain confirmation of whether your personal data is being processed and to receive a copy of the data we hold about you.

How to exercise: Email support@replaysenseai.com with your request. We will respond within 30 days.

2.2 Right to Rectification (Article 16)

You have the right to correct inaccurate or incomplete personal data.

How to exercise: Contact us with the corrected information, and we will update our records within 30 days.

2.3 Right to Erasure (Article 17) - 'Right to be Forgotten'

You have the right to request deletion of your personal data under certain circumstances.

When applicable:

• Data is no longer necessary for the original purpose
• You withdraw your consent
• You object to processing
• Data was unlawfully processed

How to exercise: Email support@replaysenseai.com requesting erasure. We will delete your data within 24 hours of account disconnection.

Exceptions: We may retain data if required by law (tax, accounting records up to 7 years).

2.4 Right to Restrict Processing (Article 18)

You have the right to request that we limit how we process your data.

How to exercise: Email support@replaysenseai.com with details of what processing you want restricted. We will comply within 30 days.

2.5 Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly-used, machine-readable format and to transmit it to another controller.

How to exercise: Email support@replaysenseai.com requesting your data in portable format (CSV, JSON, etc.). We will provide it within 30 days.

2.6 Right to Object (Article 21)

You have the right to object to processing of your data on grounds relating to your particular situation.

How to exercise: Email support@replaysenseai.com with your objection. We will stop processing within 30 days unless we have compelling legitimate grounds.

2.7 Right to Withdraw Consent (Article 7)

If we are processing your data based on consent, you have the right to withdraw that consent at any time.

How to exercise: Email support@replaysenseai.com to withdraw consent. Withdrawal does not affect the lawfulness of processing before withdrawal.

2.8 Right to Lodge a Complaint

If you believe we are violating your GDPR rights, you have the right to lodge a complaint with a supervisory authority (data protection authority) in your country.

Slovakia Data Protection Authority: https://www.dataprotection.sk/

3.1 Contract (Article 6(1)(b))

Processing is necessary to provide the Service and fulfill our contractual obligations to you.

Data processed: Email, connected account credentials, conversation extracts

3.2 Consent (Article 6(1)(a))

Processing is based on your explicit consent.

Data processed: Analytics data (PostHog, Google Analytics), marketing communications

3.3 Legal Obligation (Article 6(1)(c))

Processing is necessary to comply with legal obligations.

Data processed: Payment records (tax/accounting purposes for 7 years)

3.4 Legitimate Interest (Article 6(1)(f))

Processing is necessary for our legitimate interests.

Data processed: Service improvement, security, fraud prevention

4.1 Retention Policy

• Social Media Credentials & Conversation Data: Deleted within 24 hours of account disconnection
• Email & Account Settings: Retained until you request deletion
• Analytics Data: Retained for 90 days, then anonymized
• Payment Records: Retained for 7 years (legal requirement)
• No backups: Deleted data is not retained in backups

4.2 Automatic Deletion

Your connected account data and conversation extracts are automatically deleted within 24 hours of:

• Disconnecting your social media account from our Service
• Deleting your ReplaySense AI account

7.1 How to Submit a Request

All GDPR rights requests should be sent to:

Email: support@replaysenseai.com
Subject: "GDPR Rights Request - [Your Name]"

Include:

• Your full name
• Email address used for account
• Specific right you are exercising (access, deletion, portability, etc.)
• Any supporting documents

7.2 Response Timeline

• Confirmation: We will acknowledge your request within 3 business days
• Response: We will fulfill your request within 30 days (extendable by 60 additional days for complex requests)
• Proof of Identity: We may request proof of identity to verify your request

7.3 Verification

We will verify your identity before fulfilling data subject requests to ensure we are releasing data to the rightful data subject.

12.1 Internal Complaint Process

If you have a complaint about our data processing:

1. Contact us: Email support@replaysenseai.com with details
2. Investigation: We will investigate within 30 days
3. Response: We will provide our findings and any remedial actions

12.2 Supervisory Authority

If we cannot resolve your complaint, you have the right to lodge a complaint with your national data protection authority:

Slovakia Data Protection Authority
- Website: https://www.dataprotection.sk/
- Email: uoou@uoou.sk
- Phone: +421 2 5098 5600