Privacy rights requests

You can exercise your data protection rights at any time. Most of them you can act on yourself inside the product; where you cannot, we will do it for you.

What you can do without asking us

• Access and portability — export your work from the product at any time.
• Rectification — edit your profile, and correct content you have permission to edit.
• Erasure — delete boards, items, docs, workspaces or your account from the product.
• Objection to analytics — decline analytics cookies, or withdraw consent from the footer. A Global Privacy Control or Do Not Track signal from your browser stops analytics loading at all.
• Objection to marketing — unsubscribe from any marketing email; the link is in every one.

Making a request to us

Write to privacy@laya.net. Tell us what you are asking for and enough detail to find your records — normally the email address on the account. We may need to verify your identity before acting, which protects you from someone else making a request in your name.

• We respond within one month of receiving the request.
• If a request is complex, we may extend by up to two further months and will tell you why within the first month.
• There is no charge, unless a request is manifestly unfounded or excessive.

If your data is in someone else’s workspace

Where your personal data sits inside a customer’s workspace, that customer is the controller and we are their processor. We will forward your request to them and support them in answering it, but we cannot delete or hand over their content on our own initiative — doing so would mean acting against our own processor commitments. Contact the workspace administrator directly where you can.