Full GDPR Compliance

We are committed to protecting the privacy and rights of all EU data subjects in accordance with the General Data Protection Regulation (GDPR).

Lawful Basis for Processing

We process personal data under the following lawful bases as defined in Article 6 of the GDPR:

Consent (Article 6(1)(a))

For account creation, email communications, and service usage where you have freely given specific consent.

Contract Performance (Article 6(1)(b))

For processing necessary to perform our service contract with you, including apology generation and delivery.

Legitimate Interests (Article 6(1)(f))

For service improvement, security, and fraud prevention, balanced against your privacy rights.

Data Subject Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of Access

Request access to your personal data and information about how it's processed.

Right to Rectification

Request correction of inaccurate or incomplete personal data.

Right to Erasure

Request deletion of your personal data under certain circumstances.

Right to Portability

Receive your personal data in a structured, machine-readable format.

Right to Object

Object to processing of your personal data for certain purposes.

Right to Restriction

Request restriction of processing under certain circumstances.

Data Minimization

In accordance with GDPR principles, we practice data minimization:

We collect only the minimum data necessary to provide our service
Personal stories and apology content are processed ephemerally
No sensitive personal data is stored permanently
Data retention periods are clearly defined and minimized
Regular data audits ensure compliance with minimization principles

International Data Transfers

When transferring personal data outside the EU, we ensure adequate protection through:

Standard Contractual Clauses (SCCs) with third-party processors
Adequacy decisions where applicable
Additional safeguards for data protection
Regular assessment of transfer mechanisms

Data Protection Officer

For GDPR-related inquiries, you can contact our Data Protection Officer:

Contact Information

Email: support@apologyowed.ai

Response Time: Within 30 days as required by GDPR

Supervisory Authority: You have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.

Exercising Your Rights

To exercise any of your GDPR rights, please:

Send an email to support@apologyowed.ai
Include your full name and email address associated with your account
Specify which right you wish to exercise
Provide any additional information that may help us process your request
We will verify your identity and respond within 30 days