Data protection rights
GDPR Articles 15–22 · (published before launch) OÜ, Estonia · Last updated (published before launch)
This page summarises your rights as a data subject under the GDPR and how to exercise them in relation to Ahrigate. Where you are an end user of a service built on the Ahrigate API, the controller for your data is normally Ahrigate's customer, not Ahrigate; we will forward your request to the relevant customer in that case. See also our Privacy Policy and the Data Processing Agreement.
Note on retention. Ahrigate does not intentionally store the content of API prompts or responses (published before launch). Operational logs (request metadata) are retained for (published before launch). Account data (your profile, your API account, your usage metadata) can be erased on request, subject to statutory retention obligations.
1. Right of accessArt. 15
You can ask us to confirm whether we process personal data about you and, if so, to provide a copy along with information about the purposes, categories, recipients, retention period, and your other rights.
Email privacy@ahrigate.com, subject "Data Subject Request — Access". Response within 30 days.
2. Right to rectificationArt. 16
You can ask us to correct inaccurate personal data or complete incomplete personal data. Most account fields (email, company name) can also be edited directly in console settings.
Edit directly in console, or email privacy@ahrigate.com, subject "Data Subject Request — Rectification".
3. Right to erasureArt. 17
You can ask us to delete your personal data where one of the grounds in Article 17 applies (data no longer necessary, consent withdrawn, etc.). Where statutory retention applies — for example, billing records must be retained under Estonian accounting law (published before launch) — we will restrict processing of those records rather than delete them.
Email privacy@ahrigate.com, subject "Data Subject Request — Erasure". Response within 30 days.
4. Right to restrictionArt. 18
You can ask us to restrict processing of your personal data in the circumstances set out in Article 18 (e.g. while accuracy is being verified, or where you have objected pending verification of overriding legitimate grounds).
Email privacy@ahrigate.com, subject "Data Subject Request — Restriction".
5. Right to data portabilityArt. 20
Where processing is based on consent or a contract and carried out by automated means, you can ask us to provide your personal data in a structured, commonly used, machine-readable format, and to transmit it to another controller where technically feasible. Ahrigate can export your account profile and usage metadata as JSON.
Email privacy@ahrigate.com, subject "Data Subject Request — Portability".
6. Right to objectArt. 21
Where we process personal data on the basis of legitimate interests, you have the right to object on grounds relating to your particular situation. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
Email privacy@ahrigate.com, subject "Data Subject Request — Objection".
7. Rights related to automated decision-makingArt. 22
Ahrigate does not subject you to decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you. Routing your API request to the upstream model you selected is a relay operation and is not a decision within the meaning of Article 22.
If you believe automated decision-making has affected you, email privacy@ahrigate.com, subject "Data Subject Request — Automated Decision".
How we handle your request
- We respond within 30 days of receipt. Where the request is complex or we receive several from you, we may extend by up to two further months and will inform you of the extension and the reasons.
- We may need to verify your identity before responding, in particular to prevent disclosure of your data to a third party.
- Exercising your rights is free of charge, except where requests are manifestly unfounded or excessive.
Right to complainArt. 77
You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement. In Estonia, that authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), www.aki.ee.