// GDPR
GDPR Compliance
Last updated: April 2026
Data controller
Middle East Live operates the platform at middle-east.live and acts as the data controller for personal data you submit. Contact: privacy@middle-east.live.
Lawful basis
- Contract — to provide the service you signed up for (account, alerts, subscription).
- Legitimate interest — product analytics, security monitoring, fraud prevention.
- Consent — optional marketing emails (you can opt out at any time).
- Legal obligation — tax, accounting, and AML records (for paid subscriptions).
Your rights
- Right of access — request a copy of your data.
- Right to rectification — correct inaccurate data.
- Right to erasure ("right to be forgotten").
- Right to restrict processing.
- Right to data portability (JSON export).
- Right to object to processing.
- Right to lodge a complaint with your supervisory authority.
Exercise any of these by emailing privacy@middle-east.live. We respond within 30 days.
International transfers
Some sub-processors (Stripe, Resend) may process data outside the EEA under Standard Contractual Clauses (SCCs) approved by the European Commission.
Sub-processors
Supabase (database, auth — hosted in EU), Stripe (payments), Resend (email delivery), Google AI (intelligence generation, no PII sent).
Data Processing Agreement
Enterprise customers can request a signed DPA. See our Data Processing Agreement.