GDPR Compliance
Last updated: February 23, 2026
Our Commitment
Vulcaro, operated by Gorilla A.I LLC, is committed to protecting the personal data of our users in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679. This page outlines your rights as a data subject and how to exercise them.
Data Controller
The data controller responsible for your personal data is:
Legal Basis for Processing
We process personal data on the following legal bases:
- Contract performance — processing necessary to provide the Service you signed up for
- Legitimate interests — improving the Service, preventing fraud, and maintaining security
- Consent — for marketing communications (you may withdraw consent at any time)
- Legal obligation — complying with applicable laws and regulations
Your Rights Under GDPR
Right of Access
You can request a copy of all personal data we hold about you.
Right to Rectification
You can ask us to correct inaccurate or incomplete personal data.
Right to Erasure ("Right to be Forgotten")
You can request that we delete your personal data. Note: deletion of your account removes all associated data from our systems.
Right to Data Portability
You can request an export of your personal data in a machine-readable format (JSON or CSV).
Right to Restrict Processing
You can ask us to limit how we use your data while a dispute is being resolved.
Right to Object
You can object to processing of your data for direct marketing purposes at any time.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
How to Exercise Your Rights
To exercise any of the rights above, contact us at legal@vulcaro.com with the subject line "GDPR Request — [Type of Request]".
We will respond within 30 days of receiving your request. We may ask you to verify your identity before processing the request.
Data Transfers
Vulcaro is operated from the United States. If you are located in the EU/EEA, your data will be transferred to and processed in the United States. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission for such transfers where applicable.
Right to Lodge a Complaint
If you believe we have not complied with your GDPR rights, you have the right to lodge a complaint with your local data protection authority. In the EU, you can find your authority at edpb.europa.eu.
More Information
For full details on how we collect and use personal data, see our Privacy Policy.