Skip to Content

Your Data Rights

Last updated: May 2026 — under GDPR (EU) 2016/679

Under the General Data Protection Regulation (GDPR), if you are in the EU or EEA, you have the following rights regarding personal data that CodifyAI holds about you. We take these rights seriously and will respond within 30 days of receiving a verified request.

1. Right of Access (Article 15)

You have the right to ask us whether we hold personal data about you and, if so, to receive a copy of that data together with information about how we use it.

2. Right to Rectification (Article 16)

If personal data we hold about you is inaccurate or incomplete, you have the right to ask us to correct or complete it.

3. Right to Erasure ("Right to be Forgotten") (Article 17)

In certain circumstances you have the right to ask us to delete your personal data. This right is not absolute — we may be required to retain some data for legal or accounting obligations. Where deletion is not possible, we will anonymise your personal data instead.

4. Right to Restriction of Processing (Article 18)

You have the right to ask us to stop actively processing your personal data in certain circumstances (for example, while you contest its accuracy), even if we are not able to delete it.

5. Right to Data Portability (Article 20)

Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.

6. Right to Object (Article 21)

You have the right to object to processing of your personal data where that processing is based on legitimate interests. You also have an absolute right to object to processing for direct marketing purposes at any time.

7. Right to Withdraw Consent

Where we process your personal data on the basis of your consent (for example, for certain cookies), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal. You can manage cookie consent using the Cookie Settings tool.

8. Right to Lodge a Complaint

You have the right to lodge a complaint with your national supervisory authority. In Romania, the relevant authority is:

  • ANSPDCP — Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
  • Website: www.dataprotection.ro

How to Submit a Request

To exercise any of the above rights, please contact us at [email protected] with the subject line "GDPR Data Request". Please include:

  • Your full name and email address associated with your account
  • The specific right you wish to exercise
  • Any relevant details to help us locate your data

We may need to verify your identity before processing the request. We will respond within 30 days. Complex requests may take up to 90 days — we will notify you if an extension is needed.

If you have an account

If you are a registered customer, you can also submit data download and deletion requests directly through your customer portal. You will need to be logged in.

SaaS Tenant Data

If you are the administrator of a SaaS tenant hosted by CodifyAI, please note that CodifyAI acts as a data processor for the personal data stored inside your tenant database. Your organisation is the data controller for that data. Rights requests relating to data inside your tenant should be directed to your own organisation. CodifyAI staff access tenant data only for maintenance, backup, and support purposes.

For further information see our Privacy Policy, Cookie Policy, and Data Processing Information.