Legal

GDPR Compliance

Last updated: February 2026

Commenty is committed to complying with the General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA). This page outlines how we uphold your rights under GDPR.

Data Controller

Commenty acts as the data controller for personal data collected through our website and Chrome extension. We determine the purposes and means of processing your personal data in accordance with GDPR requirements.

Legal Basis for Processing

We process personal data under one or more of the following legal bases: (1) your consent, (2) performance of a contract with you, (3) compliance with a legal obligation, or (4) our legitimate interests in providing and improving our services.

Your Rights Under GDPR

Right to Access

Request a copy of the personal data we hold about you.

Right to Rectification

Ask us to correct inaccurate or incomplete personal data.

Right to Erasure

Request deletion of your personal data ('right to be forgotten').

Right to Restrict Processing

Ask us to limit how we use your personal data in certain circumstances.

Right to Data Portability

Receive your personal data in a structured, machine-readable format.

Right to Object

Object to processing of your data based on legitimate interests or for direct marketing.

Data Transfers

If we transfer your personal data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission. We only work with service providers that provide adequate data protection guarantees.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact our Data Protection team at privacy@commenty.ai. We will respond to your request within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.

GDPR questions? Email our privacy team at privacy@commenty.ai