Legal
Privacy Requests
Last updated: July 2026
Use this page to exercise your data protection rights under GDPR (EU), CCPA (California), and other applicable privacy laws. We verify each request by email before processing, and we respond within 30 days as required by law.
Your Rights
Depending on where you live, you may have some or all of the following rights over your personal data. We honor these rights for all users worldwide, not just residents of jurisdictions that legally require them.
GDPR rights (EU residents)
- Article 15 — Access: Receive a copy of the personal data we hold about you.
- Article 16 — Rectification: Correct inaccurate or incomplete data.
- Article 17 — Erasure:Request deletion of your personal data ("right to be forgotten").
- Article 20 — Portability: Receive your data in a structured, machine-readable format (JSON).
- Article 21 — Objection: Object to processing based on legitimate interests or for direct marketing.
CCPA rights (California residents)
- Right to know: The categories and specific pieces of personal information we have collected about you in the past 12 months.
- Right to delete: Deletion of your personal information, subject to certain legal exceptions.
- Right to opt out of sale or sharing:We do not sell your personal information. You can also opt out of any "sharing" for cross-context behavioral advertising (CPRA) using the "Opt out of sale or sharing" option in the form.
- Right to limit use of sensitive PI: Limit the use of your sensitive personal information to what is necessary to perform the services or provide the goods reasonably expected.
- Right to non-discrimination: We will not discriminate against you for exercising any of these rights.
How we verify your identity
When you submit a request, we send a verification email to the address you provided. You must click the link in that email before we act on the request. This protects you from someone else submitting a request on your behalf. For especially sensitive requests (e.g. deletion of an active account), we may request additional verification.
Response timeline
GDPR requires us to respond within 1 month (extendable by 2 months for complex requests). CCPA requires us to respond within 45 days. Our internal SLA is to respond within 30 days of verifying your identity, regardless of jurisdiction.
Authorized agents
Under CCPA, you may designate an authorized agent to submit requests on your behalf. Authorized agents must include a signed permission letter or power of attorney. Have your agent email privacy@adsbyvirtue.com with the subject line "Authorized Agent Request."
Other ways to submit
You can also submit a request by emailing privacy@adsbyvirtue.com or by using our contact form with the subject "Privacy Request." The web form on this page is the fastest path.
Submit a privacy request
Use this form to exercise your rights under GDPR (EU), CCPA (California), or other applicable privacy laws. We will verify your identity by email before processing your request.
Note: Submitting a deletion request does not automatically close your account. If you want to close your account immediately, log in and visit Dashboard → Settings → Close Account, or include "close my account" in the details field above and we will close it as part of the deletion process.
Some data is exempt from deletion — for example, transaction records retained for 7 years for tax/legal compliance, and immutable Shariah audit log entries (append-only by design). See our Privacy Policy Section 7 (Data Retention) for details.