Data requests

Making a request

Email hello@openstudio.tech with the address associated with your account and what you want done:

• Access — a copy of the personal data we hold about you.
• Correction — fix data that is wrong.
• Export — your data in a portable format.
• Deletion — your account and its data removed.

We confirm receipt within 3 business days. We complete requests within 30 days under the GDPR and 45 days under the CCPA. Either law allows an extension for a genuinely complex request; if we need one, we tell you before we take it and we say when to expect the answer.

Verification

We verify that the request comes from the account holder before acting on it, usually by replying to the account’s email address. We do not ask for more data to verify a request than the request itself involves.

Connected services

Deleting your OpenStudio data does not touch the data in the services you connected — that stays in your CRM, your inbox, your calendar, exactly where it was. Disconnecting a service from OpenStudio deletes our copy within 30 days; revoking access from the service’s own settings works too.

Deletion

Deletion follows the same path as closing an account: we acknowledge and disable within 3 business days, leave a 30-day window for you to export anything you want to keep, and delete within 30 days after that window closes. Billing records are the exception — tax and audit law requires us to keep them for six years.

Authorized agents and regulators

Agents making requests under the CCPA or GDPR on someone’s behalf should include proof of authorization. If we decline a request, we say why, and you have the right to lodge a complaint with your data protection authority.

Contact

hello@openstudio.tech, or by post: Costa Security Inc., 3790 El Camino Real #1090, Palo Alto, CA 94306.