GDPR Compliance
Flyn is committed to protecting your data. We are fully compliant with the EU General Data Protection Regulation (GDPR) and respect the privacy rights of all users.
Your Rights Under GDPR
Right of Access
Request a copy of all personal data we hold about you. We will respond within 30 days.
Right to Rectification
Request correction of inaccurate personal data. You can also update your profile directly in Settings.
Right to Erasure
Request deletion of your personal data ("right to be forgotten"). Deletion is scheduled with a 7-day grace period so you can cancel if needed. After 7 days, all data is permanently erased.
Right to Portability
Export your data in a machine-readable format (JSON/CSV) via the dashboard or by request.
Right to Restrict Processing
Request that we limit processing of your data in certain circumstances while we investigate concerns.
Right to Object
Object to processing of your personal data for specific purposes. We will cease processing unless legally required.
How We Protect Your Data
- All data encrypted in transit (TLS 1.3) and at rest (AES-256)
- IP addresses are used for geo-lookup only and never stored in analytics
- No third-party tracking cookies or advertising pixels
- Data hosted in SOC 2 Type II certified data centers
- Regular security audits and penetration testing
- Data Processing Agreements (DPAs) with all sub-processors
- Privacy by design approach, minimal data collection
- Appointed Data Protection Officer (DPO)
Sub-Processors
We share data with the following sub-processors, all bound by Data Processing Agreements.
| Provider | Purpose | Location |
|---|---|---|
| Vercel | Application hosting and edge CDN | Global (US-based) |
| Supabase | Database, authentication, and storage | US / EU |
| Resend | Transactional email delivery | US |
Data Processing Agreement
Need a signed DPA for your organization? We provide pre-signed Data Processing Agreements that comply with GDPR Article 28.
To request a DPA, submit a data subject request, or ask any GDPR-related question, contact our Data Protection Officer at [email protected].