GDPR Compliance
Last updated: June 1, 2025
Your GDPR rights
As an EU/EEA resident, you have the following rights under GDPR. Exercise any of these by emailing official.unveilsme@gmail.com. We will respond within 30 days.
Request a copy of all personal data we hold about you. We will provide it in a machine-readable format within 30 days.
Request correction of inaccurate or incomplete personal data. You can also update most data directly in your account settings.
Request deletion of all your personal data. We will delete your account and all associated data within 30 days, except where we are legally required to retain certain records.
Request your data in a structured, machine-readable format (JSON/CSV) to transfer to another service.
Request that we limit how we process your data while a complaint is under investigation.
Object to processing based on legitimate interests. We will stop unless we have compelling legitimate grounds.
Where processing is based on consent (e.g. marketing emails), you can withdraw at any time without affecting prior processing.
Data transfers outside EU
We use the following processors outside the EU/EEA. All transfers are covered by Standard Contractual Clauses (SCCs) or equivalent adequacy decisions:
- AI Inc. (USA) — AI inference. SCCs in place. Data not retained by AI.
- Stripe Inc. (USA) — Payment processing. Stripe is certified under EU-US Data Privacy Framework.
- Vercel Inc. (USA) — Hosting. SCCs in place. Edge network may cache in multiple regions.
- Upstash (USA/EU) — Redis cache. Data stored in EU region where possible.
Data Protection Officer
For GDPR-specific queries:
official.unveilsme@gmail.com
Unveils Technologies Pvt. Ltd., Bangalore, India
Supervisory authority
If you are unsatisfied with how we handle your data, you have the right to lodge a complaint with your local EU data protection authority. A list of EU DPAs is available at edpb.europa.eu.