How to Exercise Your Privacy Rights

Depending on where you live and the law that applies, you may have rights regarding personal information processed by Ackaia and CipherDriveâ„¢.

Possible privacy rights

Your rights may include the ability to:

How to make a request

Contact Ackaia's privacy team at:

privacy@ackaia.com

Describe the right you want to exercise and provide enough information for Ackaia to identify the relevant account or processing activity.

Will Ackaia verify my identity?

Yes, Ackaia may need to verify your identity before fulfilling a privacy request. This helps prevent someone else from using a privacy request to obtain or delete your account information.

Verification requirements depend on the request, applicable law, account state, and sensitivity of the information.

Are privacy rights absolute?

No. Some requests can be limited or denied where permitted by law, including when information is needed for:

What about GDPR?

Where the GDPR applies, rights may include access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and complaint to a supervisory authority, subject to applicable exceptions.

What about Brazil's LGPD?

Where the LGPD applies, rights may include confirmation of processing, access, correction, anonymization or blocking of certain data, deletion where applicable, portability, information about recipients, withdrawal of consent, review of certain automated decisions, and complaint to the ANPD or other competent bodies.

What about California privacy law?

Where applicable, California residents may have rights to know, access, delete, correct, opt out of certain sale or sharing, limit certain sensitive-information uses, and receive non-discriminatory treatment.

Can Ackaia send me a readable copy of my encrypted files?

Not necessarily.

A privacy access or portability request does not create a decryption key. If Ackaia does not possess the cryptographic material required to decrypt your CipherDrive files, it may be unable to provide plaintext file contents.

You may need to export your decrypted files yourself while you still have access to your vault keys and trusted client.

For encrypted content, exercise portability early. Do not wait until after you have lost the cryptographic material needed to decrypt your files.