Privacy Rights Request

• 01Access / to know A copy of the personal data we hold about you, the categories it falls into, where it came from, why we hold it, and who processes it for us. We answer with the actual records, not category boilerplate.
• 02Correction Fix anything inaccurate — an email, a name, an affiliate detail. Corrected records propagate to our processors where they hold copies.
• 03Deletion Remove your data. We delete everything not pinned by a legal duty; what a duty pins, we say so explicitly in the reply — typically purchase and payout records (tax law), fraud-prevention records, and licence records that prove what you own (deleting those would delete your proof of licence, so we confirm before touching them).
• 04Portability Your data in a structured, machine-readable form (JSON or CSV), free of charge.
• 05Opt out / object / restrict Of any processing you object to — marketing email above all (every newsletter also carries its own one-click unsubscribe). We do not sell or share personal data — see Do Not Sell or Share — and an opt-out recorded here is honoured permanently.
• 06Withdraw consent Where processing rests on your consent (the newsletter), withdraw it any time; withdrawal stops future processing and does not affect what was lawfully done before it.

We verify every request against the email address on record — we reply to that address and act only on confirmation from it. That is deliberate: a privacy process that hands data to whoever asks is itself the breach. If you no longer control the email on record, say so in the request and we will agree reasonable alternative evidence before acting. We never ask for more data than verification needs, and anything sent solely to verify is used for nothing else.

You may use an authorised agent; we will require the agent's written authorisation and will confirm the instruction with you directly. Requests that are manifestly unfounded or repeated to excess can lawfully be declined or charged a reasonable fee — if that ever applies, we say so and explain why before doing anything.

Everyone: we confirm receipt promptly and aim to complete every request within 30 days. California (CCPA/CPRA): the statutory window is 45 days, extendable once by a further 45 with notice — we still aim for 30. EU / UK (GDPR): one month, extendable by two for complex requests with notice. Where an extension is used, you hear from us within the first window with the reason and the new date.

If you disagree with our answer, reply to it or write to legal@erianux.com with "Appeal" in the subject; a decision-maker who was not involved in the original answer reviews it and replies within 30 days (Virginia, Colorado and similar state laws require this appeal route; we offer it to everyone). EU/UK residents may also lodge a complaint with their supervisory authority, and Californians may contact the California Privacy Protection Agency — neither requires our permission and neither costs you anything with us.

Exercising any right on this page never changes your price, your products, your support or your standing with us. Requests are free; only the manifestly-excessive case above could ever carry a fee, announced first.