Privacy & Data Rights

Data Subject Requests

Effective date: October 7, 2026 · Version 1.4

How to exercise your privacy rights under TDPSA, CCPA/CPRA, and other applicable US state privacy laws.

This page explains how to exercise your rights under the Texas Data Privacy and Security Act (TDPSA, Tex. Bus. & Com. Code § 541 et seq.), the California Consumer Privacy Act (CCPA/CPRA), and other applicable US state privacy laws. It supplements our Privacy Notice.

Who handles your request

Data inside the ScaleIQ Service belongs to the customer that operates the workspace. They are the controller — please contact them directly; we will support them.
Marketing-site visitors, prospects, and customer personnel — ScaleIQ is the controller; submit your request below.

Rights you may have

Depending on your state of residence, you may have the right to:

Access — confirm whether we process your personal data and receive a copy.
Correct — correct inaccuracies in your personal data.
Delete — request deletion of personal data we hold about you (subject to the WORM Evidence Blob limitation below).
Port — receive your personal data in a portable, machine-readable format.
Opt-out — opt out of the sale of personal data, targeted advertising, or profiling (we do not sell or share for advertising).
Restrict / Object — restrict or object to certain processing.
Withdraw consent — where processing is based on consent.
Appeal — appeal a declined request (see Appeal section below).

A limit on deletion — WORM Evidence Blobs. For AI-Assisted Assessments, ScaleIQ stores WORM Evidence Blobs — the documents submitted for an assessment, dated SHA-256-hashed snapshots of the URLs Customer authorizes us to review, and the digitally signed record of each completed assessment (inputs, model version, and outputs) — in write-once-read-many (WORM) immutable storage for seven (7) years from the date of capture, as a contractual security and evidentiary integrity control. WORM Evidence Blobs generally cannot be deleted prior to expiration of the 7-year WORM Retention Period, including following a deletion request or termination of your account. Where applicable law grants you a right to erasure that no statutory exemption permits us to refuse, we will restrict all further processing of the affected data, apply cryptographic erasure where technically available, and purge the data at the earliest point the immutability configuration permits. We will tell you in writing when we do this. If a deletion request reaches data held as WORM Evidence Blobs, we will tell you within five (5) business days which categories are affected, the basis for retaining them, and when the retention period ends — and we will delete everything else we are able to delete. Any deletion certification we issue will expressly exclude WORM Evidence Blobs and identify, by count and date range, the records retained. This retention is not intended to supersede any non-waivable legal rights except to the extent required by applicable law. A written schedule of retained WORM Evidence Blobs is available on request to privacy@scale-iq.ai.

How to submit a request

Email privacy@scale-iq.ai with the subject “Privacy rights request.”
Or write to us at the address below, marked “Attn: Privacy.”

Identity verification

To protect your personal data, ScaleIQ verifies your identity before processing requests. For requests submitted online: we will send a verification link to the email address on file for your account. If you do not have an account with ScaleIQ, we will ask for information reasonably necessary to confirm your identity, matched to what we already hold (for example, a prior correspondence reference). We ask for government-issued identification only where a request cannot otherwise be verified. ScaleIQ will not use verification information for any purpose other than processing your request.

Authorized agents (California residents)

California residents may designate an authorized agent to submit DSAR requests on their behalf under the CCPA/CPRA (Cal. Civ. Code § 1798.110(c)). The authorized agent must provide: (1) a signed written authorization from the California resident, and (2) verification of the agent’s own identity. ScaleIQ may contact the California resident directly to confirm authorization before processing the request. Submit authorized-agent requests to privacy@scale-iq.ai with “Authorized Agent Request” in the subject line.

What to expect — response timelines

Jurisdiction	Initial response	Extension (if needed)
Texas (TDPSA)	45 days from verified request	Additional 45 days with written notice of extension reason
California (CCPA/CPRA)	45 days from verified request	Additional 45 days with notice
EU/UK (GDPR)	30 days from verified request	Additional 60 days with notice (complex requests)
Other US states	45 days from verified request	Additional 45 days with notice

There is no charge for the first reasonable request in a 12-month period. Requests that are manifestly unfounded or excessive may be subject to a reasonable fee or refused.

Acknowledgment

We will acknowledge receipt of your request within 5 business days of submission.

Appeals & Texas Attorney General complaint right

If ScaleIQ declines to act on your request, you may appeal the decision within sixty (60) days of receiving ScaleIQ’s denial. Submit your appeal to privacy-appeals@scale-iq.ai with the subject line “DSAR Appeal.” ScaleIQ will respond within sixty (60) days of receiving a valid appeal and provide a written explanation of the decision.

If your appeal is denied, Texas residents have the right to submit a complaint to the Texas Attorney General at texasattorneygeneral.gov/consumers (Tex. Bus. & Com. Code § 541.054). California residents may contact the California Privacy Protection Agency or the California Attorney General. EU/UK residents may contact their applicable supervisory authority.

Children

If you believe data of a child under 16 is held by us as controller, contact privacy@scale-iq.ai and we will delete it promptly.

Contact

Privacy team: privacy@scale-iq.ai
ScaleIQ, LLC · 240 W Galveston St, #1828, League City, Texas 77573