GDPR Compliance & Your Rights

Introduction

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018. It strengthens and unifies data protection for individuals within the European Union (EU) and extends to all companies that process personal data of EU residents.

IndielaunchAI is committed to protecting your privacy and ensuring compliance with GDPR requirements. This page explains your rights under GDPR and how we handle your personal data.

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

How We Protect Your Data

We implement appropriate technical and organizational measures to ensure data protection:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Staff training on data protection
• Incident response procedures
• Regular data protection impact assessments

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you have given clear consent for specific processing activities
• Contract: When processing is necessary for contract performance
• Legal Obligation: When required by law
• Legitimate Interest: When we have a legitimate business interest

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Account Data: Retained while your account is active and for 90 days after deletion
• Usage Data: Typically retained for 24 months for analytics purposes
• Communication Records: Retained for 7 years for legal compliance
• Marketing Data: Retained until you withdraw consent

International Data Transfers

When we transfer personal data outside the EU, we ensure appropriate safeguards are in place:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules (BCRs)
• Certification schemes

Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and within 72 hours of becoming aware of the breach. We will also notify the relevant supervisory authority as required by law.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us using the information below. We will respond to your request within one month (extendable to three months for complex requests).

Complaints and Appeals

If you believe we have not complied with GDPR requirements, you have the right to:

• Lodge a complaint with us directly
• File a complaint with your local Data Protection Authority
• Seek judicial remedy through the courts

Data Protection Officer

Our Data Protection Officer (DPO) is responsible for monitoring compliance with GDPR and acting as a contact point for data protection matters:

Updates to This Policy

We may update this GDPR policy from time to time to reflect changes in our practices, legal requirements, or regulatory guidance. We will notify you of any material changes and obtain your consent where required by law.

Contact Information