data rights

20 min read

15 Jan 2025

Data Privacy Rights: Request, Access, Delete

Complete guide to your data privacy rights on Tabbio including GDPR and CCPA protections

Data Privacy Rights: Request, Access, Delete

Your data belongs to you. This guide explains your comprehensive data privacy rights on Tabbio, how to exercise them, and the legal protections that safeguard your personal information.

Your Fundamental Data Rights

Universal Privacy Rights

Regardless of your location, Tabbio respects these core rights:

Right to Know: Understand what data we collect and why
Right to Access: Get a copy of your personal data
Right to Correct: Fix inaccurate or incomplete information
Right to Delete: Remove your data from our systems
Right to Control: Manage how your data is processed and shared
Right to Object: Refuse certain types of data processing

Enhanced Rights for EU/EEA Users (GDPR)

If you're in the European Union or EEA, you have additional rights:

Right to Portability: Export your data in a machine-readable format
Right to Restrict Processing: Limit how we use your data
Right to Object to Profiling: Refuse automated decision-making
Right to Withdraw Consent: Remove consent for data processing
Right to Lodge Complaints: File complaints with supervisory authorities

Enhanced Rights for California Users (CCPA)

If you're a California resident, you also have:

Right to Know Categories: Understand categories of data collected
Right to Know Sources: Learn where your data comes from
Right to Non-Discrimination: Protection against discriminatory treatment
Right to Opt-Out: Refuse sale of personal information (we don't sell data)

Understanding Your Data on Tabbio

Personal Data We Collect

Account Information

Email address: For account creation and communication
Authentication data: Magic login tokens, Google sign-in identifiers
Account preferences: Privacy settings, notification choices
Subscription information: Premium plan details (if applicable)

Profile Information

Professional details: Name, headline, work experience, education
Skills and competencies: Professional skills you've added
Contact information: Phone, location, social media links (optional)
Career preferences: Job interests, salary expectations (optional)
Portfolio content: Work samples, documents, media you upload

Usage Information

Activity logs: Login times, feature usage, profile updates
Analytics data: Profile views, search activity, application tracking
Communication records: Messages sent/received, support interactions
Technical data: IP address, browser type, device information

AI-Generated Content

Enhancement outputs: AI-improved descriptions and content
Skill suggestions: AI-recommended skills based on your experience
Cover letters: AI-generated application materials
Career insights: Personalized recommendations and advice

How We Use Your Data

Service Provision

Account management: Maintaining your account and preferences
Profile display: Showing your information per your privacy settings
Matching services: Connecting you with relevant job opportunities
Communication: Sending notifications, updates, and support responses

Platform Improvement

Analytics: Understanding how features are used (anonymized)
Performance: Monitoring system reliability and speed
Security: Detecting and preventing fraudulent activity
Development: Creating new features based on user needs

Exercising Your Privacy Rights

Right to Access Your Data

What You Can Access

You can request a complete copy of:

All profile information: Every detail in your Tabbio profile
Account settings: Privacy preferences, notification settings
Activity history: Login times, profile updates, feature usage
Communication records: Messages, support tickets, email history
Application data: Job applications, interview scheduling, status updates
Analytics data: Profile view statistics, search history

How to Access Your Data

Method 1: Self-Service Data Export

Log into your Tabbio account
Go to Settings > Privacy & Data
Click "Download My Data"
Select information categories to include
Choose export format (JSON, CSV, or PDF)
Click "Generate Export"
Check your email for download link (available for 7 days)

Method 2: Formal Data Request

Email ahmed@tabbio.com
Subject: "Data Access Request"
Include: Your registered email address
Specify: What data you want to access
Identity verification: We may ask for additional verification
Response time: Within 30 days (15 days for EU users)

Right to Correct Your Data

What You Can Correct

Profile information: Update any incorrect professional details
Contact information: Fix phone numbers, addresses, email addresses
Work history: Correct employment dates, job titles, descriptions
Education details: Update degrees, institutions, graduation dates
Skills: Add missing skills, remove incorrect ones

How to Correct Your Data

Self-Service Corrections

Log into your account
Navigate to the relevant profile section
Click "Edit" on the information you want to change
Make your corrections
Save the changes
Corrections take effect immediately

Assisted Corrections For data you cannot edit yourself:

Email ahmed@tabbio.com
Subject: "Data Correction Request"
Specify: What information is incorrect and what it should be
Provide: Supporting documentation if necessary
Response time: Within 15 days

Right to Delete Your Data

Account Deletion Process

Complete account deletion removes:

All profile information: Professional details, experience, education
Account settings: Privacy preferences, notification settings
Usage history: Activity logs, analytics data, search history
Application data: Job applications, interview records, communications
AI-generated content: Enhanced descriptions, suggestions, insights

Deletion Timeline

Immediate: Profile becomes inaccessible to other users
30 days: Grace period for account recovery
90 days: Complete data deletion from all systems
Legal compliance: Some records may be retained for legal requirements

How to Delete Your Account

See our comprehensive guide: How to Delete Your Tabbio Account

Partial Data Deletion

You can also delete specific information:

Individual profile sections: Remove specific work experience entries
Contact information: Delete phone numbers, addresses
Portfolio items: Remove uploaded documents, work samples
Messages: Delete specific conversations or message threads

Right to Restrict Processing

When You Can Restrict Processing

Accuracy disputes: While we verify corrected information
Legal objections: When you object to processing for legitimate interests
Legal proceedings: When you need data for legal claims
Objection period: While we verify overriding legitimate grounds

How to Restrict Processing

Email ahmed@tabbio.com
Subject: "Processing Restriction Request"
Specify: Which data processing you want to restrict
Reason: Why you're requesting the restriction
Impact: We'll limit processing to storage and specific authorized uses

Right to Data Portability

What Data is Portable

You can export in machine-readable format:

Structured profile data: Experience, education, skills in JSON/CSV
Personal information: Contact details, preferences, settings
User-generated content: Messages, notes, uploaded documents
Application history: Job applications and their current status

Export Formats Available

JSON: Machine-readable format for technical users
CSV: Spreadsheet format for easy viewing/importing
PDF: Human-readable format for printing/sharing
XML: Structured markup format for system integration

Right to Object

Types of Objections

Marketing communications: Opt out of promotional emails
Profiling activities: Object to automated recommendation algorithms
Legitimate interest processing: Object to certain data uses
Direct marketing: Stop marketing-related data processing

How to Object

In-App Objections

Go to Settings > Privacy
Find relevant processing activity
Toggle off or select "Object"
Save your preferences

Formal Objections

Email ahmed@tabbio.com
Subject: "Processing Objection"
Specify: What processing you object to and why
Legal basis: Reference your grounds for objection

Right to Withdraw Consent

Consent-Based Processing

You can withdraw consent for:

Optional data collection: Non-essential profile information
Marketing communications: Promotional emails and notifications
Analytics tracking: Optional usage analytics and performance monitoring
AI processing: Consent to AI enhancement of your profile content
Third-party integrations: Connections to external services

How to Withdraw Consent

Go to Settings > Privacy & Consent
Find the specific consent you want to withdraw
Toggle off or click "Withdraw Consent"
Confirm your choice
Effect: Immediate cessation of that processing activity

Legal Protections and Compliance

GDPR Compliance (EU/EEA Users)

Your Rights Under GDPR

Lawful basis: All processing has a clear legal basis
Data minimization: We only collect necessary data
Purpose limitation: Data used only for stated purposes
Accuracy: We maintain accurate and up-to-date information
Storage limitation: Data kept only as long as necessary
Security: Industry-standard protection measures

GDPR Response Times

Access requests: 30 days (extendable by 60 days if complex)
Correction requests: Without undue delay
Deletion requests: Without undue delay
Restriction requests: Without undue delay
Portability requests: 30 days
Objection handling: Immediate effect

Filing GDPR Complaints

If unsatisfied with our response:

Contact us first: ahmed@tabbio.com
Local supervisory authority: File complaint with your country's data protection authority
Lead authority: Irish Data Protection Commission (our lead supervisory authority)
Documentation: Keep records of your requests and our responses

CCPA Compliance (California Users)

Your Rights Under CCPA

Categories of data: Right to know what categories of personal information we collect
Sources of data: Right to know sources of your personal information
Business purposes: Right to know why we collect personal information
Third-party sharing: Right to know if we share data (we don't sell data)
Non-discrimination: No adverse treatment for exercising CCPA rights

CCPA Response Times

Access requests: 45 days (extendable by 45 days)
Deletion requests: 45 days (extendable by 45 days)
Verification: Up to 10 days for identity verification
Response format: Clear and conspicuous information

Filing CCPA Complaints

If unsatisfied with our response:

Contact us first: ahmed@tabbio.com with subject "CCPA Complaint"
California Attorney General: File complaint online at oag.ca.gov
Private right of action: For certain data breaches, you may have legal remedies
Documentation: Maintain records of your requests and our responses

Other Regional Privacy Laws

UAE/GCC Data Protection

Local compliance: Adherence to UAE data protection regulations
Cross-border transfers: Appropriate safeguards for international data transfers
Regional requirements: Compliance with local business and privacy laws
Cultural considerations: Respect for regional privacy expectations

Global Privacy Standards

Privacy by design: Built-in privacy protection in all features
International transfers: Standard contractual clauses and adequacy decisions
Best practices: Following global privacy best practices
Regular updates: Keeping pace with evolving privacy regulations

Identity Verification for Data Requests

Why We Verify Identity

Privacy protection: Ensure data goes only to the rightful owner
Security measures: Prevent unauthorized access to personal information
Legal compliance: Required by privacy regulations
Fraud prevention: Protect against identity theft and misuse

Verification Methods

Standard Verification

For most requests:

Account access: Verify you can log into the account
Email confirmation: Respond to email sent to registered address
Security questions: Answer questions about your account

Enhanced Verification

For sensitive requests (deletion, large data exports):

Photo identification: Government-issued ID verification
Address confirmation: Utility bill or official document
Phone verification: Call or SMS to registered phone number
In-person verification: For high-security requests (rare)

Verification Timeline

Initial request: Submit your data request
Verification sent: Identity verification requirements within 3 days
Verification deadline: 30 days to complete verification
Processing begins: After successful verification
Request fulfillment: Within specified timeframes

Automated Decision-Making and Profiling

How We Use Automated Processing

Profile Enhancement

AI suggestions: Automated skill recommendations
Content improvement: AI-enhanced profile descriptions
Job matching: Algorithmic job recommendations
Search optimization: Automated profile optimization for search

Analytics and Insights

Usage patterns: Understanding how you use Tabbio
Performance metrics: Measuring profile effectiveness
Recommendation engines: Suggesting connections and opportunities
Security monitoring: Automated fraud and abuse detection

Your Rights Regarding Automated Decisions

Right to know: Understand when automated decision-making affects you
Right to explanation: Get information about the logic behind automated decisions
Right to human review: Request human review of automated decisions
Right to challenge: Contest decisions made solely by automated processing

Opting Out of Profiling

Go to Settings > Privacy > Automated Processing
Choose which automated features to disable
Options include: AI suggestions, job matching, profile optimization
Impact: Less personalized experience but more manual control

Special Categories of Data

Sensitive Personal Data

We generally don't collect sensitive data, but if you provide:

Health information: Disabilities, medical conditions (optional)
Political opinions: Through voluntary profile information
Religious beliefs: Through voluntary profile information
Trade union membership: Through employment history

Extra Protection for Sensitive Data

Explicit consent: Required before processing sensitive data
Limited use: Used only for specific, stated purposes
Enhanced security: Additional protection measures
Easy withdrawal: Simple process to remove sensitive information

Managing Sensitive Information

Review your profile for any sensitive information
Consider whether it's necessary for your professional goals
Use privacy settings to control visibility
Remove sensitive information if no longer needed

Data Retention and Deletion Schedules

Active Account Data Retention

Profile information: Retained while account is active
Usage analytics: Retained for 2 years for service improvement
Communication records: Retained for 7 years for legal compliance
Application data: Retained while applications are active

Deleted Account Data Retention

Personal data: Deleted within 90 days of account closure
Legal compliance: Some records retained for 7 years as required by law
Aggregated data: Anonymous usage statistics may be retained indefinitely
Backup systems: Data removed from backups within 180 days

Specific Retention Periods

Short-term Retention (30-90 days)

Magic login tokens: 15 minutes to 24 hours
Session data: 30 days
Temporary files: 90 days
Cache data: 90 days

Medium-term Retention (1-7 years)

Activity logs: 2 years
Support tickets: 3 years
Financial records: 7 years
Legal compliance: 7 years

Long-term Retention (Indefinite)

Aggregated analytics: Indefinite (anonymized)
Security logs: 7+ years (for serious incidents)
Legal holds: Duration of legal proceedings
Regulatory requirements: As required by applicable law

Privacy Rights for Different User Types

Individual Users

Full privacy rights as described above, including:

Complete data access and portability
Unrestricted deletion rights
Full control over profile visibility
Choice in automated processing

Corporate Users (Company Accounts)

Modified privacy rights considering business context:

Data access rights apply to business data
Deletion rights may be limited by business record requirements
Retention periods may be longer for business compliance
Additional verification may be required for business accounts

Shared Accounts and Team Members

Rights may be shared or limited:

Primary account holder has ultimate control
Team members have access rights to shared data
Deletion requests may require authorization from account owner
Individual team members can still exercise personal data rights

Getting Help with Privacy Rights

Contact Information for Privacy Requests

Email: ahmed@tabbio.com
Subject line: Use specific subjects like "Data Access Request" or "GDPR Deletion Request"
Response time: 15-30 days depending on request type and your location
Languages: English and Arabic support available

Information to Include in Privacy Requests

Your registered email: The email address associated with your account
Request type: Access, correction, deletion, restriction, portability, or objection
Specific data: What data you're requesting (if not everything)
Reason: Why you're making the request (helpful but not required)
Preferred format: How you'd like to receive data (for access requests)

Emergency Privacy Requests

For urgent privacy matters:

Mark as urgent: Include "URGENT PRIVACY REQUEST" in subject
Explain urgency: Why the request is time-sensitive
Expected response: Expedited response within 3-5 business days
Follow-up: Phone follow-up may be arranged for truly urgent matters

Privacy Request Status Tracking

Confirmation email: Acknowledgment within 3 business days
Verification process: Identity verification requirements if needed
Status updates: Progress updates for complex requests
Completion notice: Final confirmation when request is fulfilled

Frequently Asked Questions

About Data Access

Q: How long does it take to get my data? A: Standard data exports are available immediately through your account settings. Formal requests take 15-30 days depending on complexity.

Q: What format will my data be in? A: You can choose JSON, CSV, or PDF formats. JSON is best for technical users, CSV for spreadsheets, PDF for reading.

Q: Is there a cost for accessing my data? A: No, accessing your data is always free. This is a fundamental right.

About Data Deletion

Q: Can I delete just part of my data? A: Yes, you can delete specific sections of your profile while keeping your account active.

Q: What happens to my data immediately after deletion? A: Your profile becomes inaccessible immediately, but complete deletion from all systems takes up to 90 days.

Q: Can I recover my data after deletion? A: You have 30 days to recover your account. After that, recovery is not possible.

About Legal Rights

Q: What if I'm not satisfied with Tabbio's response to my privacy request? A: You can file complaints with supervisory authorities in your jurisdiction (ICO in UK, CNIL in France, etc.).

Q: Do these rights apply to me if I'm not in the EU or California? A: Yes, we provide these rights to all users globally as part of our commitment to privacy.

Summary of Your Privacy Rights

What You Can Do

✅ Access your data: Get complete copies of all your information
✅ Correct mistakes: Fix any errors in your profile or account
✅ Delete data: Remove specific information or your entire account
✅ Restrict processing: Limit how we use your data
✅ Object to processing: Refuse certain types of data use
✅ Export data: Get your information in machine-readable formats
✅ Withdraw consent: Remove permission for optional processing
✅ File complaints: Report privacy concerns to supervisory authorities

How We Support Your Rights

✅ Self-service tools: Many rights can be exercised directly in your account
✅ Clear processes: Transparent procedures for all privacy requests
✅ Timely responses: Quick turnaround times for all requests
✅ No discrimination: No negative treatment for exercising your rights
✅ Multiple languages: Support in English and Arabic
✅ Regular updates: Keeping you informed about privacy changes

Your privacy rights are not just legal requirements—they're fundamental to our relationship with you. We're committed to making it easy for you to understand and control your personal information on Tabbio.

Next Steps

Was this article helpful?