GDPR & Compliance

Our Commitment to Data Protection

Acculyt AI is committed to protecting the personal data of our users in accordance with the General Data Protection Regulation (GDPR), Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and other applicable data protection laws.

Legal Basis for Processing

We process personal data under the following legal bases:

• Contract performance — to provide the Service you have subscribed to
• Legitimate interests — for security, fraud prevention, and service improvement
• Legal obligation — where required by law (e.g. financial record keeping)
• Consent — for marketing communications (withdrawable at any time)

Your Rights Under GDPR

Right	Description	How to Exercise
Access	Obtain a copy of your personal data	Email privacy@acculyt.com
Rectification	Correct inaccurate data	Update in account settings or contact us
Erasure	Request deletion of your data	Email privacy@acculyt.com
Portability	Export your data in machine-readable format	Account settings → Data Export
Restriction	Restrict processing of your data	Email privacy@acculyt.com
Objection	Object to processing based on legitimate interests	Email privacy@acculyt.com

Data Processing Agreements

If your organisation operates under GDPR (e.g. you are based in the EU/EEA), we can provide a Data Processing Agreement (DPA). Contact legal@acculyt.com to request a DPA.

Sub-Processors

We use the following key sub-processors to deliver the Service:

• AWS / Cloudflare — Cloud infrastructure and CDN
• Stripe — Payment processing
• Anthropic — AI features (Claude API) — data is not used for model training
• Postmark / Mailgun — Transactional email

Data Retention

We retain personal data for as long as your account is active plus 7 years for financial records (legal requirement). Upon account deletion, personal data is anonymised within 90 days, except where legal obligations require longer retention.

Security Certifications

• SOC 2 Type II compliant
• AES-256 encryption at rest
• TLS 1.3 in transit
• Annual penetration testing
• Multi-factor authentication enforced for admin access

Supervisory Authority

If you are located in the EU/EEA and believe we have not handled your data appropriately, you have the right to lodge a complaint with your local Data Protection Authority.

Contact Our DPO

Data Protection Officer: dpo@acculyt.com
EEZBOOK Ltd, Canada