Data Subject Access Request
Effective May 6, 2026
Under the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and similar laws, you can request a copy of your personal data or request that we delete it. We honor these requests for residents of any state.
If you have an account
The fastest path is to do it yourself from your account page:
- Go to your account.
- Click Export my data for a JSON file with everything we hold for you.
- Click Delete my account for permanent deletion.
If you do not have an account
Email us with the subject line "DSAR request" from the email address you used. We respond within 45 days as required by law. We may need to verify your identity to prevent unauthorized requests.
What we will do
- Access request: send you a JSON export of your account, patterns, and audit log entries.
- Deletion request: remove your patterns, sessions, and OAuth links; soft-delete your user record. Hard deletion follows after a 30-day cooldown.
- Correction request: update fields you specify (name, email).
Authorized agent
You may authorize an agent to submit a request on your behalf. Provide signed proof of authorization. We will verify both the agent and you before fulfilling.
No retaliation
Submitting a DSAR will not affect the price you pay or the quality of service you receive.