Data Subject Rights
Last updated: April 2026
This page provides detailed information about your data protection rights and how to exercise them. For information about how we collect and use your data, see our Privacy Policy.
1. Your Rights Under GDPR (EU)
If you are located in the European Union, you have the following rights under the General Data Protection Regulation:
Right of Access (Article 15)
You have the right to request a copy of all personal data we hold about you. We will provide this data in a commonly used, machine-readable format.
Right to Rectification (Article 16)
You have the right to request correction of any inaccurate personal data we hold about you, and to have incomplete data completed.
Right to Erasure (Article 17)
Also known as the “right to be forgotten,” you may request the deletion of your personal data when:
- The data is no longer necessary for the purpose it was collected
- You withdraw your consent and there is no other legal basis for processing
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
Right to Restriction of Processing (Article 18)
You have the right to request that we restrict the processing of your data in certain circumstances, such as when you contest the accuracy of the data or have objected to processing.
Right to Data Portability (Article 20)
You have the right to receive your personal data in a structured, commonly used, and machine-readable format (such as JSON or CSV), and to transmit that data to another service provider.
Right to Object (Article 21)
You have the right to object to processing based on legitimate interest. We will stop processing unless we demonstrate compelling legitimate grounds that override your interests.
Rights Related to Automated Decision-Making (Article 22)
Vigru's AI analysis is automated. While our verdicts are informational and not binding decisions, you have the right to request human review of any analysis that significantly affects you, and to contest automated decisions.
2. Your Rights Under UK GDPR
If you are located in the United Kingdom, you have equivalent rights to those described under EU GDPR above. The UK GDPR provides the same protections, with the Information Commissioner's Office (ICO) serving as the relevant supervisory authority.
3. Your Rights Under CCPA/CPRA (California)
If you are a California resident, you have the following rights:
Right to Know
You can request that we disclose the categories and specific pieces of personal information we have collected about you, the sources, the business purposes, and the categories of third parties with whom we share it.
Right to Delete
You can request deletion of your personal information. We will comply unless an exception applies (such as legal obligation to retain).
Right to Opt-Out of Sale
Vigru does not sell your personal information. We have never sold personal information and have no plans to do so.
Right to Non-Discrimination
We will not discriminate against you for exercising any of your CCPA rights. You will receive the same quality of service regardless.
4. How to Exercise Your Rights
To submit a data rights request:
Email: privacy@vigru.ai
Subject line format: “Data Rights Request — [Your Right]”
Example: “Data Rights Request — Right to Erasure” or “Data Rights Request — Right to Access”
Response Times
- GDPR / UK GDPR: We will respond within 30 days of receiving your request
- CCPA / CPRA: We will respond within 45 days of receiving your request
In complex cases, these periods may be extended once by an additional 30 days (GDPR) or 45 days (CCPA), with prior notice to you.
Identity Verification
To protect your privacy, we may need to verify your identity before processing your request. We will ask you to confirm your identity through the email address associated with your Vigru account.
5. Account Deletion
You have two options for deleting your account and data:
- Self-service: Delete your account directly through your account Settings page
- Email request: Send a deletion request to privacy@vigru.ai
Upon account deletion:
- All your personal data will be deleted within 30 days
- Any submitted messages and analysis results will be permanently removed
- Some anonymized, aggregated data (that cannot identify you) may be retained for service improvement
6. Supervisory Authorities
If you believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with a supervisory authority:
| Jurisdiction | Authority |
|---|---|
| United States | Federal Trade Commission (FTC) |
| United Kingdom | Information Commissioner's Office (ICO) |
| Other EU countries | Your local data protection authority |
7. Contact Our Data Protection Officer
For any data protection inquiries, you can reach our Data Protection Officer at:
- Email: dpo@vigru.ai
See also: Privacy Policy