GDPR

Data subject requests.

Ask for a copy of everything KyTech knows about you. Delete it. Correct it. Move it. Fill the form below.

FORM

Submit a request.

Privacy / Data rights

Submit a Data Subject Request

Use this form to exercise your rights under the GDPR, UK GDPR, CCPA/CPRA, VCDPA, CPA, CTDPA, UCPA, PIPEDA, and the Australian Privacy Act. Requests are handled by our privacy team; we will confirm receipt by email and respond within the statutory window for your jurisdiction.

Request received. Your reference ID is .

Email address* License keyoptional, speeds up lookup

Request type*

Access Receive a JSON export of all data we hold about you. Erasure Delete your account and attributed personal data. Rectification Correct inaccurate information on your record. Portability Structured, machine-readable export you can hand to another provider. Objection / Restriction Object to processing based on legitimate interest, or restrict processing pending review.

Additional detailsoptional

What happens next

Identity verification

We will send a verification link to the email address you provide. If the email or license key does not clearly match an account we hold, we may ask for additional verification (e.g. the last four digits of your payment method, or a reply from the email associated with your account). This step protects you against impersonation and is required by GDPR Art 12(6) and CCPA §1798.185(a)(7).

Response times by jurisdiction

Jurisdiction	Statutory deadline
EU / UK (GDPR)	30 days, extendable by 60 days if complex
California (CCPA/CPRA)	45 days, extendable by 45 days
Virginia (VCDPA)	45 days, extendable by 45 days
Colorado / Connecticut / Utah	45 days
Canada (PIPEDA)	30 days
Australia (APP 12)	Reasonable time (interpreted as 30 days)
Other	30 days (matching our GDPR floor)

Erasure. Important caveat

If you request erasure, we will delete your account, personal profile, and attributed data per the retention schedule in the Privacy Policy §5.

Active HWID bans are retained. Where an active hard-tier or soft-tier HWID ban exists on the account, the SHA-256 hash of the device identifier and the reason code will be preserved with no personal identifiers attached, under the exception in GDPR Art 17(1)(e) and Art 17(3)(b) (legitimate interest in anti-fraud / anti-tamper enforcement). This residual data is time-limited under our retention schedule and does not identify you personally.

Complaint escalation

If you are dissatisfied with our response, you may complain to your local supervisory authority (ICO in the UK, your national DPA in the EU, CNIL in France, BayLDA in Bavaria, the AG in California / Virginia / Colorado / Connecticut / Utah, the OPC in Canada, or the OAIC in Australia). We would appreciate the opportunity to resolve the matter first. Contact [email protected].