GDPR Compliance

Last updated: March 2026

Automely, Inc. is committed to full compliance with the General Data Protection Regulation (GDPR) for all clients and website visitors in the European Union, United Kingdom, and EEA. This page explains your rights and how we fulfil our obligations as a data controller and, where applicable, data processor.

1. Lawful Basis for Processing

We process personal data only when we have a lawful basis to do so under GDPR Article 6, including:

• Contract performance — processing necessary to deliver services you have contracted with us.

• Legitimate interests — improving our services, security monitoring, and communications with existing clients.

• Consent — marketing communications and cookies, where you have provided explicit opt-in consent.

• Legal obligation — where we are required to retain or disclose data by law.

2. Your Rights Under GDPR

As a data subject in the EU/UK/EEA, you have the following rights:

• Right of access — request a copy of the personal data we hold about you.

• Right to rectification — request correction of inaccurate or incomplete data.

• Right to erasure — request deletion of your personal data where there is no overriding legitimate reason to retain it.

• Right to restrict processing — ask us to pause processing under certain circumstances.

• Right to data portability — receive your data in a structured, machine-readable format.

• Right to object — object to processing based on legitimate interests or for direct marketing purposes.

• Right to withdraw consent — withdraw consent at any time without affecting the lawfulness of prior processing.

3. International Data Transfers

Automely is incorporated in Delaware, USA. When personal data is transferred from the EU/EEA to the United States, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure an adequate level of data protection.

4. Data Retention

We retain personal data only for as long as necessary for the purpose it was collected, or as required by applicable law. Client project data is retained for a maximum of 3 years after project completion unless otherwise agreed.

5. Cookies

We use essential, analytics, and marketing cookies. Analytics and marketing cookies are only placed with your consent. You can withdraw consent or manage cookie preferences at any time by contacting us or clearing cookies in your browser settings.

6. Data Protection Officer

For all GDPR-related requests or complaints, please contact our data protection team at: privacy@automely.ai. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority (e.g., ICO in the UK, or the relevant DPA in your EU member state).