• Data Controller, SaathiX URL, for personal data of account holders and visitors to saathixurl.online.
• Data Processor, SaathiX URL, for personal data that you, as a creator/business, publish on your SaathiX profile about end visitors. You remain the controller of that data.

• Right of access, request a copy of the personal data we hold about you.
• Right to rectification, correct inaccurate or incomplete data.
• Right to erasure, ask us to delete your account and personal data ("right to be forgotten").
• Right to restrict processing, pause our processing while a concern is investigated.
• Right to data portability, receive your data in a machine-readable format (JSON export).
• Right to object, object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent, where processing is based on consent, withdraw it at any time.
• Right not to be subject to automated decision-making, we do not make decisions with legal effects about you using automation.
• Right to lodge a complaint, with your local supervisory authority (e.g. ICO in the UK, your DPA in the EU, the Data Protection Board in India).

See section 2 of our Privacy Policy for the full list of personal data we collect, the purposes and the legal bases.

We use a small number of carefully vetted sub-processors. Current list:

• Lovable Cloud / Supabase, database, auth, storage (EU & India).
• Cloudflare, CDN, security (global).
• Resend, transactional email (EU/US).
• Razorpay / Stripe / Paddle, payments (region of customer).

A signed Data Processing Addendum (DPA) is available for business customers, email privacy@saathixurl.online.

Where personal data is transferred outside the EEA, UK or India, we rely on EU Standard Contractual Clauses (2021), the UK International Data Transfer Addendum or other lawful mechanisms.

See section 7 of our Privacy Policy.

1. Use the self-service tools in Dashboard → Settings → Privacy to export or delete your data.
2. Or email privacy@saathixurl.online from the address on your account.
3. We verify your identity and respond within 30 days. Complex requests may take up to 60 days; we will notify you if so.
4. There is no fee, except where a request is manifestly unfounded or excessive.

For all data-protection matters write to privacy@saathixurl.online. We will appoint a Data Protection Officer where required by law and publish their details here.