LEGAL
Your Privacy Rights
Last updated: April 2026
Overview
The following rights may apply under data protection laws such as the GDPR, UK data protection laws, and India's Digital Personal Data Protection framework. The exact scope of your rights depends on the law that applies to you, the role we play in the processing, and any lawful exemptions.
1. Right of Access
You have the right to obtain a copy of all personal data we hold about you, including the purposes of processing, categories of data, recipients, and retention periods.
How to exercise: Use available self-service export controls or email us at privacy@passthebot.dev.
We aim to respond within applicable legal deadlines, commonly within 30 days.
2. Right to Rectification
You have the right to have inaccurate personal data corrected and incomplete data completed.
How to exercise: Update available profile fields in-product, or contact us at privacy@passthebot.dev for data we control directly.
We aim to respond within applicable legal deadlines, commonly within 30 days.
3. Right to Erasure ("Right to be Forgotten")
You may request deletion of personal data where the law gives you that right, including when the data is no longer necessary, consent is withdrawn, or you validly object to processing.
How to exercise: Use available account-deletion controls or email privacy@passthebot.dev. Our current workflow may place accounts into a soft-delete period before permanent purge or anonymization, subject to legal and operational retention needs.
We aim to respond within applicable legal deadlines; completion timing depends on the nature of the data and any lawful retention obligations.
4. Right to Restrict Processing
You have the right to request that we restrict (pause) processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing pending verification.
How to exercise: Email us at privacy@passthebot.dev with your request.
We aim to respond within applicable legal deadlines, commonly within 30 days.
5. Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
How to exercise: Use available export controls or contact us at privacy@passthebot.dev. Exports may be subject to security checks, rate limits, file-format constraints, and temporary download windows.
Timing varies by request type and system availability.
6. Right to Object
You have the right to object to processing of your personal data based on legitimate interest, including profiling and direct marketing. We will stop processing unless we demonstrate compelling legitimate grounds.
How to exercise: Email us at privacy@passthebot.dev. For marketing emails, use the unsubscribe link where available.
We aim to respond within applicable legal deadlines, commonly within 30 days.
7. Right Not to Be Subject to Automated Decision-Making
You may have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. PassTheBot is intended to provide assistive outputs that you review before you use them.
How to exercise: Review AI-generated content before use and contact privacy@passthebot.dev if you want us to review a privacy-related concern about automated processing.
We aim to respond within applicable legal deadlines, commonly within 30 days.
8. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority if you believe your personal data is being processed unlawfully or if your rights have been violated.
Where to complain:
- EU: Your national data protection authority (see EDPB list)
- UK: Information Commissioner's Office (ICO) — ico.org.uk
- India: Data Protection Board of India
We will cooperate fully with any supervisory authority investigation.