What are my rights under GDPR and CCPA?
Vitros respects your data privacy rights under both GDPR (European Union) and CCPA (California). Here's what you're entitled to:
Right to access
You can request a copy of all personal data we hold about you. This includes your profile information, journal entries, activities, lists, and usage data. Export your data anytime from your account settings.
Right to rectification
You can update or correct your personal information at any time. Go to Profile → Settings to edit your details, or edit individual journal entries, activities, and lists.
Right to erasure (Right to be forgotten)
You can request complete deletion of your account and all associated data. Go to Profile → Settings → Delete Account. We will permanently delete your data within 30 days, except where we're legally required to retain certain records.
Right to data portability
You can export your data in a machine-readable format (JSON) from your account settings. Pro users can also access our API for automated exports.
Right to object
You can object to processing of your data for marketing purposes. Opt out of marketing emails in your account settings or via the unsubscribe link in emails.
Right to restrict processing
You can request that we limit how we process your data. Contact us at privacy@vitros.app with specific restrictions you'd like to apply.
Right to withdraw consent
You can withdraw consent for cookie tracking, marketing communications, and optional features at any time without affecting your account.
Right to opt-out of sale (CCPA)
We do not sell your personal information. You can opt out of sharing data with advertising partners via cookie preferences.
How to exercise your rights
- Most rights can be exercised directly in your account settings
- For complex requests, email privacy@vitros.app
- We will respond within 30 days (GDPR) or 45 days (CCPA)
- You may be asked to verify your identity for security purposes
California residents
Under CCPA, you also have the right to know what personal information we collect, how we use it, and who we share it with. Visit our Privacy Policy for a comprehensive breakdown.
EU residents
Under GDPR, you can also lodge a complaint with your local data protection authority if you believe we've violated your privacy rights