Your data & privacy rights

Last updated: 2 October 2026

Wherever you live, you have the right to see the personal data we hold about you and to ask us to delete some or all of it. We give everyone the standard set by the EU General Data Protection Regulation (GDPR), which also binds us directly as an Irish company, rather than a smaller set of rights outside Europe. If your own country's law adds to it, clause 10 of the Privacy Policy says what it adds. This page explains the rights, how to make a request, and what to expect. You can act on most requests yourself by signing in below with the same email and password you use in the MatPilot app.

Your rights

• Right of access (Art. 15). Get a copy of the personal data we hold about you, as a machine-readable file.
• Right to erasure (Art. 17). Ask us to delete your personal data. This can be all of it (closing your account) or only specific categories while keeping your account active.
• Right to rectification (Art. 16). Correct data that is wrong or out of date. Most fields you can edit yourself in the app, or email us.
• Right to data portability (Art. 20). Receive your data in a structured, commonly used format (the export above is JSON).
• Right to restrict or object (Arts. 18, 21). Ask us to pause or stop certain processing.
• Right to complain. Complain to the regulator where you live, or to our lead supervisory authority, the Irish Data Protection Commission (dataprotection.ie). In the United Kingdom you can complain to the Information Commissioner's Office (ico.org.uk). The Privacy Policy lists the regulator for each country we operate in.

How to make a request

1. Sign in below with your MatPilot email and password (the same login you use in the app).
2. Choose what you want: download a copy of your data, delete specific categories of data, or delete your whole account.
3. Submit. Your request is logged and our team is notified. You don't need to do anything else.
4. We action it and email you at the address on your account when it's done.

Prefer email? Send your request to admin@matpilot.io from the address on your account, or include enough detail for us to verify your identity.

What to expect & timelines

• We confirm and act on verified requests without undue delay, and within one month of receiving them (GDPR Art. 12(3)).
• For complex or numerous requests we may extend this by up to two further months and will tell you why within the first month.
• Access / export: we email you a JSON file containing the personal data in your account.
• Deletion: the selected data is permanently removed and cannot be recovered. We email you a confirmation of what was deleted.
• There is normally no charge. We may charge a reasonable fee or refuse only where a request is manifestly unfounded or excessive (Art. 12(5)).

Deleting some of your data (without closing your account)

You don't have to delete your whole account to exercise your right to erasure. You can ask us to delete specific categories of data, for example your class attendance history, intake-form answers, uploaded documents, saved devices, notification preferences, or your chat threads, and keep using MatPilot. Choose exactly what to remove in the Delete specific data panel below.

What we may need to keep

Some records are kept even after a deletion request because we are legally required to, or have an overriding legitimate interest:

• Billing & payment records: retained to meet the tax and accounting law we are subject to (Irish law, generally six years).
• Signed waivers & consent forms: retained to establish or defend legal claims (liability).
• Audit logs: a minimal record that an action happened, with personal details removed where possible.

Where we keep data for these reasons, we keep the minimum needed and protect it accordingly.