GDPR & Data Protection

How echotest complies with data protection regulations

Data Processing

echotest processes personal data (account information) under the legal basis of contract performance. Marketing communications require explicit opt-in consent. You can manage your consent preferences at any time in Settings > Privacy.

Your Rights

Under GDPR and UAE data protection law (PDPL), you have the right to:

Access — Export all your personal data as JSON via Settings > Privacy > Export Data
Rectification — Update your profile information at any time
Erasure — Permanently delete your account and all associated data via Settings > Privacy > Delete Account
Portability — Download all your simulation data, reports, and account information
Objection — Opt out of marketing communications and analytics

Data Retention

Default retention period is 365 days, configurable per account. You can set a custom retention period from 30 to 730 days. Deleted data is permanently removed and cannot be recovered.

Sub-processors

Service	Provider	Purpose
Azure OpenAI	Microsoft	AI simulation processing
Azure Database	Microsoft	Data storage (PostgreSQL)
Azure Cache	Microsoft	Session & queue management (Redis)
Stripe	Stripe Inc.	Payment processing
Azure Communication Services	Microsoft	Transactional email

All sub-processors are covered by appropriate data processing agreements. Microsoft services run in the East US 2 region.

Data Protection Officer

For GDPR inquiries: privacy@echotest.ai

Yenova Labs LLC FZ, Meydan Grandstand, 6th Floor, Nad Al Sheba, Dubai, UAE