Your Rights

How to use this page

This page explains how to exercise your privacy rights with AIM and what to expect. It complements Data & Sources, Purposes & Legal Bases, Retention, and Recipients & Transfers.

How to submit a request

• Primary channel: email support@aim.example with subject “Privacy Request”.

• Include: your account email, the right you want to exercise (e.g., access, deletion), and any details that help us locate the data.

• Enterprise workspaces: if your account is managed by your company, contact your workspace admin first (AIM typically acts as Processor and follows the Customer’s instructions).

• Integrations you connected: revoke access directly in the third-party service (e.g., Google account settings).

• Cookies/consent & access: use the persistent Privacy link to withdraw consent or choose the tracking-free subscription at entry (Consent-or-Subscription).

Identity verification & authorized agents

To protect you and others, we may request identity verification (e.g., login + email confirmation and, if needed, additional information). Where allowed (e.g., California), you may use an authorized agent; we require proof of authorization and your own verification.

Response timelines

• EEA/UK/CH (GDPR): we aim to respond within one month; extensions are possible where the law permits for complex requests.

• United States: we aim to respond within 45 days; extensions are possible where the law permits.

Your rights in the EEA/UK/CH (GDPR)

Where the GDPR (and local implementations, including France) applies, you may request:

• Access to personal data we hold about you.

• Rectification of inaccurate or incomplete data.

• Erasure where the law allows and data is no longer needed.

• Restriction of processing in specific circumstances.

• Portability of data you provided, in a JSON/CSV format.

• Objection to processing based on legitimate interests.

• Withdraw consent for processing that relies on consent (e.g., Google Analytics, cookies).

• Complaint to your local Supervisory Authority (for France, this is the CNIL); we encourage you to contact us first so we can help quickly.

Your rights in the United States

Where US state privacy laws apply, you may have rights to:

• Know/access categories and specific pieces of personal information.

• Delete personal information (subject to legal/security exceptions).

• Correct inaccurate personal information.

• Opt-out of sale/share/targeted advertising (AIM does not “sell” personal information in the marketing sense; if this changes, we will provide a clear opt-out).

• Limit use of sensitive information (AIM does not request sensitive data by default).

• Non-discrimination for exercising your rights.

• Appeal where required by law if a request is denied.

Controls that matter in AIM

• Conversation & prompt history: kept while your account is active so you can resume work and so support can help you. To delete, email support@aim.example (we do not use a rights portal).

• Model training: on by default with opt-out—toggle in settings; we honor and, where supported, propagate your choice to model vendors.

• Cookies & access: choose Accept & Access or Access Without Tracking via Subscription; withdraw consent anytime via the Privacy link.

• Integrations (Google): strictly optional and revocable; revoke in your Google account settings.

Limits & exceptions

Some data cannot be deleted immediately because of:

• Legal record-keeping (e.g., French accounting records up to 10 years).

• Security & abuse prevention (temporary retention of technical/security logs).

• Backups & disaster recovery (residual encrypted copies that expire via automated rotation).
  When a request conflicts with a legal obligation or compelling security need, we stop active use and move data to restricted legal/archive storage, per our Retention page.

Legal references (for transparency, not legal advice)

• EU/EEA/UK: GDPR (Arts. 12–23 on individual rights), ePrivacy rules (e.g., cookie consent), French Loi Informatique et Libertés and CNIL guidance.

• United States: applicable state privacy laws (e.g., California CCPA/CPRA, Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA).
  AIM is intended for adults only.

Contact

Email: support@aim.example
If you’re in an Enterprise workspace: please also contact your workspace admin.

Conclusion

AIM’s Your Rights page shows exactly how to exercise your privacy rights with AIM: email support@aim.example (no portal), complete identity verification (or use an authorized agent where allowed), and expect timelines aligned with GDPR in the EEA/UK/CH (about one month) and US state privacy laws (about 45 days). It explains your rights to access, rectification, erasure, restriction, portability (in JSON/CSV), objection to legitimate interests, and to withdraw consent (e.g., for Google Analytics and cookies) under our Consent-or-Subscription model. It also clarifies practical controls in AIM—conversation & prompt history kept while your account is active (delete by emailing us), model training on by default with opt-out, and Google integrations that are optional and revocable—plus necessary limits (legal record-keeping in France, security logs, and backups/disaster recovery). For context, see Data & Sources, Purposes & Legal Bases, Retention, and Recipients & Transfers. AIM is intended for adults only.
Versioning

Effective date: {YYYY-MM-DD} • Last updated: {YYYY-MM-DD}