GDPR overview and inquiries

The European Union's General Data Protection Regulation (GDPR) replaces the Data Protection Directive 95/46/EC. It was designed to harmonize data privacy laws across Europe, to protect all E.U. citizens' data privacy, and to reshape the way organizations across the region approach their end users' privacy.

The GDPR includes a few terms that you should be aware of as a Nylas customer:

Data Controller: The business party that creates the data. This is you, the Nylas customer.
Data Processor: A party that receives data from the Data Controller and does something with it. This is Nylas, Inc.
Data portability: The practice of allowing a customer to export all of their data in a machine-readable format.
Right to be forgotten: The right of all customers to have their data completely removed from a Data Processor's servers.

Nylas complies with all GDPR provisions as a Data Processor, and honors the "Right to be forgotten", "Data portability" guidelines, and the guidelines about notifications in the case of a data breach.

Data portability and Nylas

If you want to export your data in a machine-readable format, submit a request to Nylas Support. The Support team will rely to your request promptly with a link to your data. The link is accessible for only one week.

Right to be forgotten and Nylas

You control all of your Nylas data. If you want to remove an end user's data, make a v3 Delete Grant request or a v2 Delete Account request. If you want to delete your application and all associated data, submit a request to Nylas Support.