UnfoldK

GDPR

Your data rights under EU General Data Protection Regulation

For a full description of what we collect and why, see our Privacy Policy.

1. Overview

UNFOLD LAB ("we") operates UnfoldK (unfoldk.com). If you are a resident of the European Economic Area (EEA), the United Kingdom, or Switzerland, the GDPR gives you specific rights over how we process your personal data. This page summarizes those rights and how to exercise them. For full details on what we collect and why, see our Privacy Policy.

2. Data Controller

UNFOLD LAB is the data controller responsible for your personal data on UnfoldK. Contact: support@unfoldk.com.

3. Lawful Bases for Processing

  • ·Performance of a contract — to provide UnfoldK services after you sign up
  • ·Legitimate interests — to keep the service secure, prevent fraud, and improve features
  • ·Consent — for non-essential cookies, marketing emails, and optional integrations
  • ·Legal obligation — to retain billing records as required by law

4. Your Rights

  • ·Right of access — request a copy of the personal data we hold about you
  • ·Right to rectification — correct inaccurate or incomplete data
  • ·Right to erasure ('right to be forgotten') — request deletion of your account and data
  • ·Right to restrict processing — pause certain uses of your data
  • ·Right to data portability — receive your data in a machine-readable format (CSV/JSON)
  • ·Right to object — opt out of processing based on legitimate interests, including profiling
  • ·Right to withdraw consent — for any consent-based processing, at any time
  • ·Right to lodge a complaint — with your local data protection authority

5. How to Exercise Your Rights

Email support@unfoldk.com from the address associated with your account. We will respond within 30 days. We may ask for additional verification to confirm your identity before processing sensitive requests.

6. Data Retention

  • ·Account data: retained while your account is active
  • ·Subscription records: 5 years (legal/tax requirement)
  • ·Logs and analytics: 12 months
  • ·Deleted accounts: residual backups purged within 90 days

7. International Transfers

Our infrastructure (Supabase, Vercel, Resend, Paddle) processes data in the EU and US. Transfers outside the EEA rely on Standard Contractual Clauses (SCCs) or equivalent safeguards.

8. Contact

Data protection inquiries: support@unfoldk.com · UNFOLD LAB · unfoldk.com. You may also lodge a complaint with your local supervisory authority.