OffkaiPrivacy & Data Rights Request
Last updated: 2026-05-31
Under GDPR, CCPA, and similar laws you have rights over the personal data we hold about you. This page explains those rights and how to exercise them — whether or not you have an Offkai account.
Your rights at a glance
| Right | What it means |
|---|---|
| Access | See what personal data we hold about you. |
| Portability | Receive a machine-readable copy (JSON) of your data to take elsewhere. |
| Rectification | Correct inaccurate or incomplete data we hold about you. |
| Erasure | Delete your account and personal data. Some data is retained for legal/financial reasons (see below). |
| Object / restrict | Object to processing based on legitimate interest, or ask us to restrict processing while a request is outstanding. |
| Withdraw consent | Revoke optional consent (e.g. for Sentry session replay) at any time. |
Self-service (fastest)
If you have an Offkai account, most requests can be completed instantly:
- Access & portability — go to Profile → “Your data” → “Download my data.” Downloads a JSON file with your profile, RSVPs, events, socials, and payment methods.
- Rectification — edit your preferred name and socials directly on Profile. For email or username changes, email us.
- Erasure — go to Profile → “Danger zone” → “Delete account.” This wipes your profile, socials, payment methods, and personal RSVP fields.
- Withdraw cookie consent — clear the
offkai_consentcookie in your browser; the banner will re-appear on next visit and you can choose again.
Submit a request by email
If you can't log in, or your request isn't covered by self-service, email us:
Please include in your email:
- Your full name and the email address associated with your account (if any).
- The type of request: access, portability, erasure, rectification, objection, or other.
- A brief description of what data or processing your request concerns.
We may ask you to verify your identity before acting on the request, to make sure we don't disclose or delete another person's data by mistake.
Response time
We respond to all requests within 30 days (GDPR Article 12), or within 45 days for CCPA requests. If a request is complex we may extend the period by a further 60 days but will tell you within the first 30 days.
What we keep even after deletion
Erasure requests are subject to legal retention obligations. We must keep:
- Payment and transaction records — required for tax, accounting, and Stripe dispute resolution. Retained for 7 years after the transaction.
- Consent records (when you accepted our Terms) — retained for as long as reasonably necessary to demonstrate lawful processing.
- Fraud / abuse prevention data — minimal data to prevent re-registration by banned users, retained only as long as necessary.
All other personal data is deleted or anonymized on account deletion.
Supervisory authority
If you're in the EU or UK and believe we haven't handled your data correctly, you have the right to lodge a complaint with your national data-protection authority (e.g. the CNIL in France, the ICO in the UK, the BfDI in Germany).
For California residents: you have the right to exercise the rights above without discrimination, and to use an authorized agent to make a request on your behalf.
Further information
Our full Privacy Policy explains what data we collect, why, and who sees it. Our Cookie Policy covers cookies and consent in detail.