Your Data Rights

One place to exercise the rights you have over your data on ForensicSpot. We treat every request below seriously and respond within the legal timelines, regardless of whether the law that gives you the right is India's DPDP Act, the EU's GDPR, the UK GDPR, or another jurisdiction's rule.

For background on what data we hold and why, see our Privacy Policy.

You can ask for a copy of every piece of data tied to your account. We send it as a downloadable archive (JSON files for structured data — profile, attempts, purchases, posts — plus original copies of any files you uploaded).

How: email hello@forensicspot.com with the subject "Data access request". We respond within 30 days (often faster). Free of charge for the first request in any 12-month period.

Most of your profile (name, bio, avatar, university, exam targets) you can edit yourself in /profile. If something we hold is wrong and you can't fix it from there, email us and we'll correct it within 7 days.

For payment records, we only correct factual errors (e.g. wrong billing name on an invoice). We can't alter the underlying transaction record itself for tax-record-keeping reasons.

You can delete your account from /profile (when the in-app control is available) or by emailing us. On deletion:

• Your profile, attempts, posts, answers, bookmarks, uploads, and saved progress are removed within 7 days.
• Your payment records are retained for 8 years (Indian tax-record requirement) but stripped of personal identifiers — your name and email are removed; the transaction itself stays as an anonymised row.
• Backups containing your data roll off the backup retention window over the next 90 days.
• Email-send logs at our provider (Resend) age out within 90 days.

Deletion is irreversible. If you want a copy of your data first, submit an access request (above) before deletion.

The access archive (above) is in standard formats: CSV for tables, JSON for structured data, original file types for uploads. You can feed it into another study platform or local notes tool with no re-formatting.

You can object to specific processing without deleting your account. Common cases:

• Marketing email opt-out.One click in any marketing email's footer, or email us with "unsubscribe".
• College-email verification withdrawal.Email us and we'll clear the college email and verified-student badge from your profile.
• Anonymise my public posts.If you posted in the community Q&A under your real name and want them attributed to a pseudonym instead, email us and we'll change the display name.

Where we asked for your consent (marketing email, college-email verification), you can withdraw it at any time. Withdrawal doesn't affect processing we already did legitimately before you withdrew, and it doesn't affect the parts of the service we run on a non-consent basis (delivering the platform itself).

For deletion and access requests, we need to confirm you are who you say you are. We verify by sending a confirmation link to the email on file, and asking you to click it. If you've lost access to that email, email us from the new address with proof of ownership of the account (recent receipt number, last four digits of the card you paid with) and we'll verify manually.

• Acknowledgement: within 2 business days
• Access / portability: within 30 days
• Correction: within 7 days
• Deletion: within 7 days, with the caveats in the Deletion section above
• Marketing opt-out: immediate (next email batch excludes you)

We aim to handle every request in-house and to your satisfaction. If we don't, you can escalate:

• India:Data Protection Board of India under the DPDP Act, 2023 (once operational; the Board's contact details will be on MeitY's site)
• EU users: the data protection authority of your EU country of residence
• UK users: the Information Commissioner's Office (ICO)

First request in any 12-month period is free. If you submit repeated, manifestly unfounded, or excessive requests, we may charge a reasonable administrative fee or refuse — we'll explain why if we do. We've never had to do this and don't expect to.

For any rights request: hello@forensicspot.com. If you'd prefer a structured form, email us with "data rights form" in the subject and we'll send one.