Your data rights
Every tool on this page looks up your data by the email address you gave when you answered a survey, because that is the only identifier we hold for most respondents. If you answered a survey that collected no email address, this portal cannot find your response by itself; GDPR Art. 11(2) allows this where we are not otherwise obliged to keep identifying information, provided we tell you and, where possible, give you another way to exercise your rights. Contact the researcher who ran the survey, or email [email protected] with whatever details you can provide, and we will help verify your identity another way.
Enter the email you used when taking surveys. We'll send a verification link to download your response data as a JSON file. It includes your 5,000 most recent survey responses, and tells you if there are more, plus up to 1,000 records from each of your contact, invitation-link, panel-verification and scheduled-invitation entries. The link expires in 24 hours.
Your email, personal identifiers, and individual cognitive-profile data (FCM maps) will be permanently removed from all survey responses. Anonymized research data may be retained for scientific research purposes.
Under the California Privacy Rights Act (CPRA), Cal. Civ. Code § 1798.121, you can direct us to limit the use of your sensitive personal information to that necessary to provide the service.
What this means in practice for Get Causality: we already limit the use of personal information to providing the research platform. We do not sell or share personal information, do not use it for cross-purpose advertising, and do not combine it with data from other sources. Filing this request creates a documented record of your preference; we will continue to limit use as we already do.
This is not a deletion request — if you also want your data deleted, use the Erase my data tab.
If you previously submitted a data subject request (export, erasure, correction, or other) and it was denied, you have the right to appeal under Virginia CDPA § 59.1-577(C)-(D), Colorado CPA § 6-1-1306(3), and equivalent laws.
We will review your appeal and respond within the applicable regulatory window (typically 45–60 days depending on your jurisdiction).
Enter the email you used when taking surveys. We'll send a verification link; nothing changes until you click it, and the link expires in 24 hours.
Select one or more categories below to withdraw consent only for those special (GDPR Art. 9) categories. Your answers in the selected categories are removed from every response you submitted, while your identity link and your other answers stay in place so you can manage them separately later.
Leave every category unchecked to withdraw consent entirely. Your email and other identifiers are removed from your survey responses, your consent records are cleared, and any individual cognitive profile derived from your answers is permanently deleted. Anonymized response data that can no longer be linked to you may still be kept for research, unless the survey owner chose full deletion instead.
This is not the same as the Erase my data tab, which removes your identifying data outright without a per-category choice.
Enter the email address we currently have for you, then tell us what to change. We'll email that address a link; nothing changes until you click it, and the link expires in 24 hours.
This corrects your contact details: your name and email on researcher contact lists, on your survey invitation links, and on the identity attached to your responses. It does not change the answers you gave. If an answer is wrong, use Erase my data or Withdraw consent instead, or contact the researcher who ran the survey.
A restriction takes effect once you confirm it from the link we email you, so nobody else can restrict what happens to your data. Your responses stay stored, but researchers can no longer include them in analyses, response lists, exports, or published results.
A restriction covers the survey responses we hold for your email address when you confirm it. A response you submit later is not restricted automatically: to cover it, submit a new request after you have answered and confirm it from the link we email you. If we hold no responses for your address when you confirm, the confirmation says so and no responses are restricted.
Your own rights keep working: you can still request a data export, and erasure still reaches your restricted data.
Lifting a restriction needs confirmation too, so that nobody else can resume processing on your behalf. Choose Lift my restriction and we'll email you a link.
An objection is reviewed by a person, not decided automatically. Article 21 requires us to weigh your particular situation against whether we have compelling grounds to continue, so tell us what is specific to you. We respond within one month.
If you want processing paused now rather than after that review, use the Restrict processing tab, which takes effect as soon as you confirm the link we email you.
If you simply want to take back the consent you gave when you took a survey, Withdraw consent is the faster route and needs no review.
Get Causality does not sell or share personal information as those terms are defined under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), Cal. Civ. Code § 1798.140. We have no advertising partners, no data brokers, and no third-party recipients of personal information outside the sub-processors listed at /subprocessors (each of which processes personal information only to provide the service to us).
To confirm our non-sale practices or to direct us never to sell or share your information in the future, use the Limit use of sensitive data tab above or contact [email protected]. We also honor the Global Privacy Control (GPC) (opens in new tab) signal: if your browser sends Sec-GPC: 1, any consent we record for optional processing is stored as withdrawn. Optional analytics are off unless you switch them on, so a browser sending GPC that never touches the cookie banner is never tracked. The one case the signal does not currently override is a GPC browser whose user then chooses “accept all” on the banner in that same browser; if that is you, decline on the banner instead. Until 2026-09-15 this paragraph said the signal was applied to cookies automatically, which described the server-side record rather than the in-browser gate.
Contact our Data Protection Officer at [email protected] or visit our Privacy Policy for full details on how we handle your data.