Factors is committed to complying with GDPR, and enabling our customers to comply with GDPR. Factors has an ongoing commitment to providing leading data protection to our customers. We maintain a robust privacy and security program that we continually assess and improve to meet the needs of our customers.

To clarify, within the scope of GDPR Factors.ai is a pure data processor. Our customers are the data controllers who would be collecting user data with the consent of the end users and passing them to Factors for further processing and analytics.

The section below captures the various features we support to ensure compliance to GDPR.

Right to Access

Whenever an end user raises a Right to Access request, our customers can raise a request (email to privacy@factors.ai) to access the information about a specific user by emailing the user's personally identifiable information (email or others) and Factors shall respond back with all the information we have about that user

Right to Delete or Erasure

We support individuals' right to erasure through a permanent deletion of personal data upon request (email to privacy@factors.ai). We shall comply with such requests within 21 days of receiving the same

Right to Object

Our customers control what data is sent to Factors, and may decide to halt the sending of personal data at any time. If the Factors SDK is used on the website, customers can easily disable the SDK for opted out users so as to ensure their data is not send to Factors

Data Retention

We only retain data for only as long as is required to provide analytics services. For Events data, we automatically delete data received over 3 years ago. User Profile data is deleted if the user is not active for 3 years

With respect to the scope of data that Factors processes, please refer to this article on Factors - Data and Implementation.