Your Data Rights (GDPR)
Effective Date: July 1, 2026 · Applies to EU/EEA residents
What Data We Collect
AiWitness collects data necessary to provide civil rights protection services:
- Identity data: Name, email address
- Evidence data: Audio, video, GPS coordinates collected during active encounters only
- Location data: Only during active sessions with your consent
- Usage data: Platform interactions to improve service quality
- Device data: Device type and OS for compatibility purposes
How We Use Your Data
Your data is used solely to provide the AiWitness service. We do not sell, rent, or trade personal data to third parties. Legal basis for processing:
- Contract performance: Processing necessary to deliver the platform you subscribed to
- Legitimate interests: Platform security, fraud prevention, abuse detection
- Consent: Marketing communications and analytics (revocable at any time)
- Legal obligation: Compliance with applicable law
Your Rights Under GDPR
Right to Access
Request a copy of all personal data we hold about you. We will respond within 30 days.
Right to Rectification
Request correction of inaccurate or incomplete personal data.
Right to Erasure
"Right to be forgotten." Request deletion of your personal data when no longer necessary for the original purpose, or when you withdraw consent.
Right to Data Portability
Receive your data in a structured, machine-readable format and transfer it to another service provider.
Right to Object
Object to processing of your personal data for direct marketing or where processing is based on legitimate interests.
Right to Restriction
Request that we limit how we use your data while a dispute or complaint is resolved.
How to Exercise Your Rights
Submit a request via our Data Request form or email us directly at privacy@aiwitness.com. We will respond within 30 days. Complex requests may be extended by up to 60 additional days with notice.
You may also lodge a complaint with your local Data Protection Authority (DPA). A list of EU DPAs is available at edpb.europa.eu.
Data Retention
We retain your data only as long as necessary:
- Account data: Retained while your account is active, deleted 30 days after account deletion request
- Evidence data: Retained per your chosen retention setting (default: 3 years)
- Legal holds: Data subject to legal proceedings may be retained longer as required by law
- Backups: Purged within 90 days of primary deletion