Your GDPR Rights
Last updated: August 27, 2026
Overview
If you are located in the United Kingdom or European Economic Area (EEA), you have certain rights under the General Data Protection Regulation (GDPR) and UK GDPR regarding your personal data.
Outermind Inc. is committed to honoring these rights. This page explains your rights and how to exercise them.
Data Controller
Outermind Inc. is the data controller for your personal data. Our contact details are:
- Company: Outermind Inc.
- Email: privacy@outermind.ai
- Address: Outermind, Inc., 2261 Market Street STE 46257, San Francisco, CA 94114, United States
Your Rights Under GDPR
1. Right to Access
You have the right to obtain confirmation of whether we process your personal data and, if so, to request a copy of that data.
How to exercise: Submit a data access request via email. We will provide your data in a commonly used electronic format.
Response timeline: 30 days (extendable by 60 days for complex requests)
2. Right to Rectification
You have the right to have inaccurate personal data corrected and incomplete data completed.
How to exercise: Contact us with the specific data you believe is inaccurate and provide the correct information.
Response timeline: 30 days
3. Right to Erasure ("Right to be Forgotten")
You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose.
How to exercise: Submit a deletion request via email. Note that some data may be retained for legal or regulatory compliance.
Response timeline: 30 days
4. Right to Restrict Processing
You have the right to request that we limit how we use your data in certain circumstances, such as while we verify the accuracy of your data.
How to exercise: Contact us explaining which processing you want restricted and why.
Response timeline: 30 days
5. Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
How to exercise: Request a data export. We provide data in JSON and CSV formats.
Response timeline: 30 days
6. Right to Object
You have the right to object to processing based on legitimate interests, including profiling, and to processing for direct marketing purposes.
How to exercise: Submit an objection explaining which processing you object to and your grounds for objection.
Response timeline: Immediately for direct marketing; 30 days for other objections
7. Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.
How to exercise: Request human review of any automated decision that significantly affects you.
Response timeline: 30 days
Legal Bases for Processing
We process your personal data under the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Providing the service | Contract performance |
| Account management | Contract performance |
| Email processing | Legitimate interests |
| AI agent operations | Contract performance |
| Usage analytics | Consent (via cookie preferences) |
| Security monitoring | Legitimate interests |
| Marketing (with consent) | Consent |
| Legal compliance | Legal obligation |
How to Submit a Request
To exercise any of your rights, please contact us using one of the following methods:
- Email: privacy@outermind.ai
- Mail: Outermind, Inc., 2261 Market Street STE 46257, San Francisco, CA 94114, United States
When submitting a request, please include:
- Your full name and email address associated with your account
- The specific right you wish to exercise
- Any details that will help us identify the relevant data
Verification
To protect your privacy, we may need to verify your identity before fulfilling your request. We will typically verify your identity by confirming your email address or asking you to log into your account. For sensitive requests, we may require additional verification.
EU Representative
Outermind, Inc. has appointed a representative in the European Union under Article 27 of the GDPR. For EU and EEA data subjects, our EU Representative is:
Data Protection Representative Limited (trading as DataRep)
DataRep, 77 Camden Street Lower, Dublin, D02 XE80, Ireland
Registered in Ireland, company number 616588
Email: datarequest@datarep.com (please quote "Outermind, Inc." in the subject line)
Web form: datarep.com/data-request
DataRep maintains a postal address in each of the 27 EU member states as well as Iceland and Norway, so you may write to them in your own country. A full list of those addresses is available from DataRep on request, using the contact details above.
Important when writing by post: address your letter to DataRep, not to Outermind, Inc. Mail addressed to us directly at a DataRep location may not reach us. Please refer to Outermind, Inc. clearly within your correspondence.
UK Representative
Outermind, Inc. has appointed a representative in the United Kingdom under Article 27 of the UK GDPR. For UK data subjects, our UK Representative is:
Data Protection Representative Limited (trading as DataRep)
DataRep, 107-111 Fleet Street, London, EC4A 2AB, United Kingdom
Registered in Ireland, company number 616588
Email: datarequest@datarep.com (please quote "Outermind, Inc." in the subject line)
Web form: datarep.com/data-request
As above, please address postal correspondence to DataRep, referring to Outermind, Inc. within your letter.
Swiss Representative
Outermind, Inc. has appointed a representative in Switzerland under Article 14 of the Swiss Federal Act on Data Protection (FADP). For data subjects in Switzerland, our Swiss Representative is:
Data Protection Representative Limited (trading as DataRep)
DataRep, Leutschenbachstrasse 95, Zurich, 8050, Switzerland
Registered in Ireland, company number 616588
Email: datarequest@datarep.com (please quote "Outermind, Inc." in the subject line)
Web form: datarep.com/data-request
You may also contact the Swiss Federal Data Protection and Information Commissioner at edoeb.admin.ch.
Digital Services Act Representative
Outermind, Inc. has also appointed DataRep as its Legal Representative in the European Union for the purposes of Article 13 of the Digital Services Act. Contact details, our point of contact for authorities and users, and how to report illegal content are set out on our Digital Services Act page.
Right to Lodge a Complaint
If you believe we have not handled your request appropriately, you have the right to lodge a complaint with a supervisory authority. For UK residents, this is the Information Commissioner's Office (ICO). For EEA residents, this is the data protection authority in your country of residence.
- UK (ICO): ico.org.uk/make-a-complaint
- EU: Find your local DPA
Contact Us
For any questions about your GDPR rights, contact us at privacy@outermind.ai.