Your Data Rights | Fireflies

How to make a request

Choose a right
Tell us whether you want access, correction, deletion, restriction, portability, objection, consent withdrawal, or review of an automated decision. Plain language is enough.
Identify the data
Provide the relevant account email, Firefly ID, event or content URL, and a focused description. Do not email a password, full identity document, or unnecessary sensitive information.
Verify proportionately
Use a signed-in control when possible. If Fireflies has reasonable doubt about identity, it may request the minimum additional information needed to prevent disclosure or deletion of another person’s data.
Receive confirmation
Fireflies acknowledges the request, explains any missing information, and identifies the expected response period.

Until an in-product rights centre is live, email [PRIVACY EMAIL]. An authorized representative may submit for you, but Fireflies may verify the authorization and your identity. Accessibility support: [SUPPORT EMAIL].

Rights that may be available

Be informed: Receive clear information about who uses your data, why, the lawful basis, recipients, transfers, retention, rights, sources, and relevant automation.
Access: Confirm whether Fireflies processes your personal data and receive a copy plus required contextual information, without adversely affecting others’ rights.
Rectification: Correct inaccurate personal data and complete incomplete data, including a supplementary statement where appropriate.
Erasure: Ask Fireflies to delete data when it is no longer needed, consent is withdrawn without another basis, an objection succeeds, processing was unlawful, or law requires deletion.
Restriction: Ask Fireflies to limit use while accuracy, an objection, unlawful processing, or a need for legal claims is assessed.
Portability: Receive eligible data you provided, processed automatically on consent or contract, in a structured, commonly used, machine-readable format and transmit it where technically feasible.
Object: Object to processing based on legitimate interests or a public task. Fireflies must stop unless compelling overriding grounds or legal claims justify continuing.
Withdraw consent: Withdraw consent for future processing at any time where consent is the basis. Earlier processing remains lawful.
Automated decisions: Request safeguards where a solely automated decision has legal or similarly significant effects, including human intervention and an opportunity to express your view and contest the decision where applicable.
Complain: Contact a data-protection authority where you live or work, or where you believe an infringement occurred, and seek a judicial remedy.

These rights depend on jurisdiction, lawful basis, and the circumstances. Exceptions can protect others’ privacy, freedom of expression and information, confidential sources, legal obligations, public safety, archives in the public interest, and legal claims. Fireflies will explain a refusal or limitation and available complaint routes.

Response process and timing

Proposed rights-handling standard based on GDPR timing.
Stage	Normal approach	Important qualification
Acknowledgement	Without undue delay	Confirms receipt, secure channel, and any focused verification need
Substantive response	Without undue delay and normally within one month	Measured from receipt; verification needs can affect the ability to act
Extension	Up to two additional months where necessary	Fireflies explains the extension and reasons within the first month
Fee	Normally free	A reasonable fee or refusal may apply to manifestly unfounded or excessive requests; Fireflies bears the burden of showing that
Refusal / partial refusal	Reasoned response within the applicable period	Explains why, and the right to complain to an authority and seek a judicial remedy
Delivery	Secure, commonly used electronic form by default for electronic requests	Access copies must protect the rights and freedoms of others

Access and export

An access response can include account and authentication metadata held by Fireflies, Firefly ID and glow seed, submissions, locations, moderation and appeal records involving you, account standing, communications, device and security logs still retained, cookie choices, purposes, categories, recipients, transfers, retention, sources, and relevant automation information.

A portability export is narrower than access. It normally covers eligible data you actively provided or that was observed from your use when processed automatically under consent or contract. It may not include Fireflies’ protected moderation reasoning, derived security signals, other people’s data, or data processed on a different lawful basis.

Fireflies may redact or summarize material to protect another person, reporter, confidential source, trade secret, security method, or ongoing investigation. It should not use those interests as a blanket reason to withhold your entire record.

Correction, restriction, and objection

Correcting private account data is different from correcting the public event record. A correction request should identify the inaccurate field or claim and the accurate replacement or supporting source. Fireflies may preserve a visible correction history rather than silently rewrite a material published record.

When processing is restricted, Fireflies may continue to store the data but should not otherwise use it except with consent, for legal claims, to protect another person, or for an important public interest as allowed by law. You should be informed before a restriction is lifted.

For an objection to legitimate-interest processing, explain your situation if helpful. Fireflies will assess its purposes, necessity, impact, safeguards, expression and information rights, public-interest record, and any compelling overriding grounds.

Delete your account

Request deletion
Use account settings when available or contact the privacy address from the account email. Fireflies confirms the scope and warns what will happen to public contributions.
Secure the request
Fireflies verifies control, freezes avoidable new processing, and lets you export eligible data before deletion if requested.
Remove the private account
Fireflies deletes or de-identifies account details, credentials under its control, private profile data, and the account-to-Firefly-ID link unless a specific lawful reason requires restricted retention.
Assess public contributions
Uploads and event records are removed, restricted, or de-identified according to the content, your rights, public-interest and expression considerations, others’ rights, correction integrity, and legal duties.
Expire residual copies
Search indexes, caches, and rotating backups expire on their normal cycles. Deleted data is not restored to active use except for disaster recovery and is removed again.

When erasure may be limited

Compliance with a legal obligation, court order, preservation demand, regulatory duty, or lawful authority request.
Establishing, exercising, or defending legal claims.
Protecting the rights and safety of another person or preserving evidence of serious abuse.
Freedom of expression and information, including lawful public-interest event reporting and correction history, subject to applicable national rules.
Archiving in the public interest, research, or statistics where applicable safeguards and law support it.
A request concerning another person’s data or content Fireflies cannot reliably connect to the requester without more information.
Technical residuals in protected rotating backups until scheduled expiry, provided they are not restored to ordinary use.

When full erasure does not apply, Fireflies will consider less intrusive measures such as de-identification, unlinking the Firefly ID, blurring, removing a precise location, reducing visibility, restricting processing, or adding a correction.

If you appear in someone else’s evidence

You can contact Fireflies even without an account if an upload, event, publisher excerpt, moderation record, or report contains personal data about you. Provide the exact URL, identify yourself only as much as needed, describe the concern and requested result, and explain any urgent safety issue.

Fireflies will assess your privacy and data-protection rights alongside expression, information, source protection, public interest, other people’s rights, and the reliability of the event record. Possible outcomes include no action, correction, attribution change, blur, location generalization, de-indexing, restricted access, or removal.

If you disagree with the response

Reply to the privacy team with the request reference and explain what remains unresolved. You can also lodge a complaint with the competent data-protection authority, typically where you live, work, or believe the issue occurred, and seek a judicial remedy. You do not have to complete an internal reconsideration before using a regulatory right unless applicable law says otherwise.

Contact details

Controller: [LEGAL ENTITY NAME], [REGISTERED ADDRESS]
Rights requests: [PRIVACY EMAIL]
Accessibility support: [SUPPORT EMAIL]
DPO: [DATA PROTECTION OFFICER, IF APPOINTED]
EU representative: [EU REPRESENTATIVE, IF REQUIRED]

All placeholder contact details must be replaced, tested, monitored, and connected to an auditable request workflow before launch. A published mailbox without staffing, identity controls, response templates, deletion jobs, and escalation ownership is not an adequate rights process.