Your Rights and How to Exercise Them
- Version:
- 0.9-beta
- Last updated:
- 2026-10-03
- Effective:
- [set at launch]
Beta (draft) version under legal review before public launch — may change before taking effect. You will be asked to accept again after any material change.
In short
- You can export all your data as JSON and delete your account directly from Settings.
- You can withdraw your AI-analysis consent for each project at any time.
- Other requests go to privacy@octasolutions.net, and we will verify your identity before acting.
- Exercising your rights is free in principle.
- You have the right to complain to the competent data protection authority in your country.
1. Scope
- This policy explains the rights granted to you under Egypt's Personal Data Protection Law No. 151 of 2020, and the corresponding rights under the Saudi Personal Data Protection Law and UAE Federal Decree-Law No. 45 of 2021 to the extent they apply to you.
- It should be read with the "Privacy Policy".
2. Your Rights
| Right | Meaning | How to exercise it |
|---|---|---|
| Information and access | Know what data we process about you and why | The "Privacy Policy" or a request by email |
| Copy and portability | Receive your data in a structured, machine-readable format | Settings: "Export my data" (JSON) |
| Rectification | Correct or complete inaccurate data | Settings: edit profile, or a request by email |
| Erasure | Delete your data | Settings: "Delete my account" after entering your password |
| Withdraw consent | Withdraw consent you previously gave | Settings: AI-analysis consent per project, the "visible to sponsors" option, and WhatsApp alerts |
| Objection and restriction | Object to processing based on legitimate interest or ask to restrict it | A request by email |
| Notification control | Choose notification channels and types | Settings: notification preferences |
| NDA history | See what you signed or what was signed on your project | Settings: NDA history |
| Complaint | Complain to the competent authority | See section 6 |
3. What Happens When You Exercise Certain Rights
3.1 Withdrawing AI-analysis consent
- Your project's monthly metrics stop being used in any new analysis immediately.
- The content of investor reports built on that data is redacted.
3.2 Deleting your account
- Your password is required to confirm deletion.
- The deletion and anonymisation steps in the "Privacy Policy" (section 6.1) are carried out.
- Any remaining points balance and active subscription are lost, subject to the "Subscriptions, Points and Refunds Policy". [For review: treatment of unused points on account deletion]
- Payment, invoice and audit records, and Verified Handover certificates and their hashes, are retained for the periods required by law or by the other party's rights.
- The account cannot be restored after deletion.
3.3 Exporting your data
The export file includes data linked to your account. It does not include other users' data except to the extent already visible to you within the platform.
4. Requests by Email
- Send your request to privacy@octasolutions.net from the email registered to your account, stating the right you wish to exercise.
- We verify your identity before acting and may ask for reasonable additional information for that purpose only.
- We respond within [For review: statutory response period for data subject requests], and will notify you if we need a legally permitted extension, with reasons.
- Exercising rights is free in principle; clearly repetitive or excessive requests may be refused or subject to a reasonable fee within the limits of the law. [For review: whether a fee is permitted under Egyptian law]
- An agent may submit a request on your behalf with a documented authorisation.
5. Limits on Rights
We may be unable to fulfil a request in whole or in part where the law allows, including:
- A legal obligation to retain data, such as accounting records.
- A need for the data to establish or defend a right, such as signature evidence and handover certificates.
- Conflict with other users' rights and the confidentiality of their data.
In these cases we will explain the reason in writing.
6. Complaints to the Competent Authority
- You have the right to lodge a complaint with the competent data protection authority in your country, such as Egypt's Personal Data Protection Centre, the Saudi Data and Artificial Intelligence Authority (SDAIA), or the UAE Data Office, in accordance with their procedures.
- We encourage you to contact us first, though this is not a condition. See "Complaints, Disputes and Contact".