Make Talleflow fully GDPR compliant

I want to trust that Talleflow handles my personal data lawfully and gives me the controls GDPR requires. Please make the product and your processes fully GDPR compliant, so I can use it confidently (and so your business can pass customer and regulator scrutiny). At a minimum, I need: Access and portability: I can request and download a copy of all personal data you hold about me in a machine readable format. Erasure (right to be forgotten): When I delete my account, my personal data is deleted or anonymized everywhere it is stored (unless you are legally required to retain specific records, in which case you clearly document what is retained and why). Rectification: I can correct my personal information, and those changes propagate everywhere you display/store it (including any copied or denormalized profile data). Privacy controls: My privacy settings are honored across the product (including community/marketplace views), so my name/photo/profile is not exposed when I choose to limit visibility. Consent and marketing controls: I can opt in or out of marketing communications and non essential tracking, and my choices are respected. Clear privacy documentation: You provide an up to date privacy notice and explain what data you collect, why, how long you keep it, and who you share it with. Security and accountability: You have the internal processes required by GDPR (for example, records of processing activities, breach response within 72 hours, and a way to handle data subject requests without manual back and forth). Acceptance criteria (from my perspective) I can find a Privacy Center in my account and complete these actions without emailing support. Account deletion results in verifiable deletion/anonymization across all relevant systems. Data export includes all categories of my data and is delivered in a usable format. Your data retention rules are transparent and consistent with GDPR requirements.