Your data protection rights under the General Data Protection Regulation
The General Data Protection Regulation (GDPR) is a comprehensive data protection law that took effect on May 25, 2018, throughout the European Union (EU) and the European Economic Area (EEA). The GDPR establishes strict rules for how organizations collect, use, store, and protect personal data of EU/EEA residents, regardless of where the organization is located.
At MarketMorph AI, a product of ACA Tech Solutions, we are fully committed to GDPR compliance and protecting the privacy rights of all our EU/EEA users. This page outlines our GDPR compliance practices, your rights under the regulation, and how you can exercise those rights.
We process all personal data in accordance with GDPR principles: lawfulness, fairness, and transparency; purpose limitation; data minimization; accuracy; storage limitation; integrity and confidentiality; and accountability. We have implemented appropriate technical and organizational measures to ensure ongoing GDPR compliance and to protect your fundamental right to data protection.
GDPR applies to:
Our data processing activities are guided by the following GDPR principles:
Under the GDPR, you have comprehensive rights regarding your personal data. We respect and facilitate the exercise of these rights, responding to requests within the legal timeframe (typically 30 days).
You have the right to request access to your personal data and obtain a copy of the information we hold about you.
You can request that we correct any inaccurate or incomplete personal data we hold about you.
Also known as the "right to be forgotten," you can request deletion of your personal data in certain circumstances.
You can request that we restrict the processing of your personal data in certain situations.
You have the right to receive your personal data in a structured, commonly used, machine-readable format.
You can object to the processing of your personal data for direct marketing or based on legitimate interests.
You have the right not to be subject to decisions based solely on automated processing that produces legal effects.
Where we process your data based on consent, you can withdraw that consent at any time.
Under GDPR, we must have a lawful basis for processing your personal data. We rely on the following legal bases:
We process your personal data to perform our contract with you (our Terms of Service) and to provide you with the MarketMorph AI Services. This includes creating your account, processing payments, providing customer support, and delivering the features you've subscribed to.
We process certain personal data based on our legitimate business interests, including:
We always balance our legitimate interests against your rights and freedoms, and you have the right to object to processing based on legitimate interests.
We process personal data when required to comply with legal obligations, such as:
For certain processing activities, we rely on your explicit consent, including:
You have the right to withdraw your consent at any time, which will not affect the lawfulness of processing based on consent before its withdrawal.
In rare circumstances, we may process personal data to protect the vital interests of you or another person, such as in emergency situations.
For detailed information about the personal data we collect, how we use it, and with whom we share it, please refer to our comprehensive Privacy Policy. Below is a summary of the categories of data we process:
We do not intentionally collect special categories of personal data (also known as sensitive personal data) such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, health data, or data concerning sexual orientation. If we become aware that we have inadvertently collected such data, we will delete it promptly.
Our Services are not directed to individuals under the age of 18, and we do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately so we can delete it.
MarketMorph AI is operated by ACA Tech Solutions, and your personal data may be transferred to, stored, and processed in countries outside the European Economic Area (EEA), including the United States. These countries may have data protection laws that differ from those in your country.
When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place to protect your data, including:
Standard Contractual Clauses (SCCs): We use Standard Contractual Clauses approved by the European Commission for transfers to third countries. These clauses impose obligations on both the data exporter and data importer to ensure adequate protection of personal data.
Adequacy Decisions: We may transfer data to countries that have been deemed by the European Commission to provide an adequate level of data protection, such as certain countries that have adequacy decisions in place.
Binding Corporate Rules: For transfers within our corporate group, we may rely on Binding Corporate Rules that have been approved by relevant data protection authorities.
We conduct Transfer Impact Assessments (TIAs) to evaluate the risks associated with international data transfers and ensure that appropriate supplementary measures are implemented where necessary to provide an adequate level of protection.
Some of our servers and service providers are located in the United States. When transferring data to the US, we ensure that our US service providers are bound by Standard Contractual Clauses and implement appropriate supplementary measures to protect your data.
We believe in transparency about our data transfers. If you would like more information about the specific countries to which your data may be transferred or the safeguards we have implemented, please contact our Data Protection Officer.
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal, accounting, or reporting requirements.
Our standard retention periods are as follows:
When the retention period expires or when you request deletion of your data, we follow a comprehensive deletion process:
There are circumstances where we may not be able to delete your data immediately, such as when we need to:
We make it easy for you to exercise your GDPR rights. You can submit requests through multiple channels, and we will respond within 30 days (or inform you if we need more time, which cannot exceed 60 days total).
You can exercise your rights by:
To protect your privacy and security, we may need to verify your identity before processing your request. We may ask you to:
When you submit a request:
When you request data portability, we will provide your data in JSON format (machine-readable, structured, and commonly used). You can request your data in other formats, and we will accommodate if technically feasible.
We have appointed a Data Protection Officer (DPO) to oversee our GDPR compliance and serve as a point of contact for data protection matters. Our DPO is responsible for:
You can contact our Data Protection Officer at:
For users in the European Union, we have appointed an EU representative who can be contacted at:
If you believe that we have violated your rights under GDPR or if you are dissatisfied with how we have handled your data protection request, you have the right to lodge a complaint with a supervisory authority.
Our lead supervisory authority is the data protection authority in the jurisdiction where our main establishment in the EU is located. However, you have the right to lodge a complaint with the supervisory authority in:
You can find contact information for all EU data protection authorities at the European Data Protection Board website.
While you have the right to complain to a supervisory authority at any time, we encourage you to contact us first so we can try to resolve your concerns directly. Many issues can be resolved more quickly through direct communication with our Data Protection Officer.
We take all data protection concerns seriously and are committed to resolving any issues promptly and fairly. Please don't hesitate to contact us if you have questions or concerns about how we process your personal data.
For questions, concerns, or requests related to GDPR compliance and your data protection rights, please contact us:
ACA Tech Solutions
MarketMorph AI Division
123 Innovation Drive, Suite 500
San Francisco, CA 94105
United States
For comprehensive information about our data practices, please review:
Our Data Protection Officer is ready to assist you with any requests or questions about your data protection rights.
Contact DPO