Your GDPR Rights

Last updated: August 18, 2025

Overview of Your Rights

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under GDPR. We respect these rights for all our users globally.

Right to Access (Article 15)
Obtain a copy of your personal data

You have the right to request access to the personal data we hold about you. This includes:

  • Confirmation that we are processing your personal data
  • A copy of your personal data in a structured format
  • Information about how we process your data
  • Who we share your data with
  • How long we keep your data
Export My DataRequest Full Report
Right to Rectification (Article 16)
Correct inaccurate personal data

You have the right to correct any inaccurate or incomplete personal data we hold about you. Most information can be updated directly through your account.

  • Update profile information in settings
  • Correct billing information
  • Update communication preferences
  • Request correction of data you cannot change yourself
Update Profile
Right to Erasure (Article 17)
Request deletion of your personal data ("right to be forgotten")

You have the right to request deletion of your personal data when:

  • The data is no longer necessary for the original purpose
  • You withdraw consent and there's no other legal basis
  • You object to processing and there are no overriding legitimate grounds
  • The data has been unlawfully processed
Delete Account
Right to Restrict Processing (Article 18)
Limit how we use your personal data

You can request that we limit the processing of your personal data in certain circumstances:

  • You contest the accuracy of the data
  • Processing is unlawful but you don't want erasure
  • We no longer need the data but you need it for legal claims
  • You've objected to processing pending verification
Request Restriction
Right to Data Portability (Article 20)
Transfer your data to another service

You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You can also request that we transfer this data directly to another service provider where technically feasible.

  • Export projects and code
  • Download account information
  • Transfer to competing services
  • Receive data in JSON format
Export Data
Right to Object (Article 21)
Object to certain types of processing

You have the right to object to processing of your personal data in certain circumstances:

  • Processing for direct marketing purposes
  • Processing based on legitimate interests
  • Processing for research or statistical purposes

When you object to processing for direct marketing, we will stop processing your data for these purposes immediately.

Object to Processing
Rights Related to Automated Decision Making (Article 22)
Protection from solely automated decisions

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal or similarly significant effects.

At Stakly, we use AI for code generation but not for making decisions about your account, access, or rights. All significant decisions involve human review.

  • Account suspensions are manually reviewed
  • Billing decisions involve human oversight
  • Content moderation includes human review

How to Exercise Your Rights

Contact Our Data Protection Officer

For any GDPR-related requests or questions, contact our DPO:

dpo@stakly.dev

Response Timeline

We will respond to your request within 30 days. For complex requests, we may extend this by an additional 60 days, but we'll inform you of any delays.

What We Need From You
  • Your account email address
  • Specific right(s) you want to exercise
  • Any relevant details about your request
  • Proof of identity (if we cannot verify your account)

Legal Basis for Processing

We process your personal data under the following legal bases:

Contract Performance

Processing necessary to provide our services, manage your account, and handle billing.

Legitimate Interests

Processing for security, fraud prevention, service improvement, and business operations.

Consent

Processing for marketing communications and optional analytics (you can withdraw consent anytime).

Legal Obligations

Processing required by law, such as tax records and legal compliance.

Complaints

If you're not satisfied with how we handle your request, you have the right to lodge a complaint with your local supervisory authority: