This document describes Third Law ApS' ("3RD") implementation of data portability and export rights in accordance with the EU Data Act (Regulation (EU) 2023/2854) and GDPR (Regulation (EU) 2016/679).
As a B2B customer, you have extensive rights to access, export and portability of your data.
1. Legal Basis
1.1 EU Data Act
The EU Data Act (Regulation 2023/2854) grants users of digital services the right to:
- Access to data generated through use of services (Art. 4)
- Portability of data in machine-readable format
- Ability to share data with third parties
- Right to data export when switching service providers
1.2 GDPR
GDPR Art. 20 ensures the right to data portability for personal data.
1.3 Contractual Obligations
According to Terms and Conditions sections 10.8 and 13.3, customers have the right to data export upon termination or upon request.
2. What Data Can Be Exported?
2.1 Included Data Categories
Configuration Data
- Brands, markets and product configurations
- Custom parameters and preferences
- Team setups and roles
- API configurations (without keys)
Input Data
- Prompts and queries
- Uploads and feeds
- Customer content submitted through the platform
- Search history and queries
Output Data
- Scores, ratings and performance metrics
- Generated reports and analyses
- Recommendations and playbooks
- Benchmarking results (customer-specific)
- Diagnostics and insights
Metadata
- Activity timestamps
- Brand and market references
- Version history
- Session data
User Data
- Usernames and email addresses
- Roles and permissions
- Activity log (login, actions)
2.2 Excluded Data Categories
The following data is not included in exports:
Proprietary Algorithms and Models
- 3RD's scoring algorithms and weightings
- Proprietary models and methodologies
- Trade secrets and IP
- Source code and system architecture
Aggregated Benchmark Data
- Cross-industry benchmarks
- Anonymized trends and statistics
- Competitor analyses based on other customers' data
Other Customers' Data
- Data belonging to other organizations
- Shared benchmark information
System and Security Data
- Internal security logs
- Abuse detection data
- Fraud prevention information
- Infrastructure logs
3. Export Formats
3.1 Standard Export Format
JSON (JavaScript Object Notation)
- Structured, machine-readable format
- Widely supported in modern systems
- Preserves data structures and relationships
- Easy to parse and integrate
3.2 Alternative Formats (where relevant)
- CSV: For tabular data (scores, metrics)
- XLSX: For reports and analyses
- PDF: For documentation and visualizations
- API access: Real-time data access
3.3 Data Structure
Exported data is delivered in a logical structure:
/
├── account/
│ ├── organization.json
│ ├── users.json
│ └── settings.json
├── brands/
│ ├── brand_1.json
│ ├── brand_2.json
│ └── ...
├── markets/
│ ├── market_1.json
│ └── ...
├── data/
│ ├── prompts.json
│ ├── queries.json
│ └── inputs.json
├── outputs/
│ ├── scores.json
│ ├── reports/
│ ├── recommendations.json
│ └── benchmarks.json
└── metadata/
├── activity_log.json
└── timestamps.json
4. How to Request Data Export?
4.1 Self-Service Export (available in platform)
For Lite, Pro and Agency customers:
- Log in to your account
- Navigate to Settings → Data Export
- Select data categories and period
- Click "Generate Export"
- Download when ready (typically within 1 hour)
4.2 Assisted Export (Enterprise)
For Enterprise customers with large data volumes:
- Contact support at support@get3rd.com
- Specify data categories and period
- We prepare the export (typically within 48 hours)
- Receive secure download link or SFTP access
4.3 API Access
For customers with API access:
- Continuous access to own data via API
- Real-time export of new data
- Documentation: https://docs.get3rd.com/api
5. Timeline for Data Export
5.1 Self-Service Export
- Request: Immediate
- Processing: 5 minutes - 1 hour (depending on data volume)
- Download availability: 30 days
5.2 Assisted Export
- Request: Email to support
- Confirmation: Within 24 hours
- Delivery: Within 48 hours (standard), up to 5 business days (very large datasets)
- Download availability: 30 days
5.3 Upon Subscription Termination
- Export period: 30 days after subscription expiration
- Reminder: Email 7 days before deletion
- Final notice: Email 1 day before deletion
- Deletion: After 30 days, data is permanently deleted
6. Security During Export
6.1 Encryption
- All export files are encrypted (AES-256)
- TLS 1.3 for transmission
- Password-protected download links
6.2 Access Control
- Only administrator users can request exports
- Multi-factor authentication (MFA) recommended
- Download links are time-limited (30 days)
- One-time download tokens
6.3 Audit Log
- All export requests are logged
- Administrator can view export history
- Compliance documentation available
7. Limitations and Exceptions
7.1 In Case of Breach
If your account is suspended or terminated as a result of:
- Material breach of Terms and Conditions
- Abuse or violation of AUP
- Legal violations or security threats
3RD may:
- Delay data export until security review
- Limit export to non-sensitive data
- Refuse export if it would violate legislation or third-party obligations
7.2 Technical Limitations
- Very large datasets (>100GB) may require special solution
- Historical data older than 24 months may have limited availability
- Real-time data may have a delay of up to 1 hour
7.3 Third-Party Restrictions
- LLM outputs may be subject to third-party licenses
- Some benchmark data cannot be exported in isolation due to anonymization requirements
8. Portability to Competitors
8.1 Right to Switch Providers
The EU Data Act ensures your right to:
- Export data and move to another provider
- Use exported data in other platforms
- Not be "locked in" to 3RD
8.2 Import to Other Platforms
Exported data is in standard formats:
- JSON can be imported into most modern systems
- CSV/XLSX can be used in Excel, Google Sheets, etc.
- API compatibility with standard protocols (REST, GraphQL)
8.3 3RD Does Not Assist with Import to Competitors
3RD:
- Delivers data in standard formats
- Provides documentation of data structure
- Answers technical questions about export format
3RD does not provide:
- Direct integration with competitors' platforms
- Conversion to competitors' proprietary formats
- Advice on choosing alternative provider
9. Data Portability for End Users (GDPR)
9.1 Personal Data
If 3RD processes personal data about your end users:
- They have the right to portability under GDPR Art. 20
- Requests are handled through you (data controller)
- 3RD assists with technical extraction
9.2 Procedure
- End user requests export from you (data controller)
- You forward request to 3RD (data processor)
- 3RD delivers data to you in machine-readable format
- You deliver data to end user
9.3 Response Time
- GDPR requirement: 30 days (may be extended to 60 days for complex requests)
- 3RD's goal: 7 business days for standard requests
10. Costs
10.1 Included in Subscription
The following are free:
- One self-service export per month
- Standard data export upon termination
- GDPR compliance exports
- API access (where included in plan)
10.2 Additional Fees
The following may incur fees:
- Frequent exports: More than 1 per month (€50 per additional export)
- Assisted large exports: Datasets >50GB (€200-500 depending on size)
- Historical data recovery: Data older than 24 months (€500 per request)
- Custom format conversion: Conversion to special formats (by agreement)
Enterprise customers have additional exports included in their subscription.
11. Data Quality and Accuracy
11.1 Data Integrity
3RD ensures:
- Complete exports of available data
- Correct data structure and relationships
- Validation of exported files
11.2 Limitations
3RD does not guarantee:
- That exported AI outputs are correct or current
- That data can be imported error-free into all third-party systems
- That historical data is complete if older than retention period
11.3 Verification
The customer is responsible for:
- Verifying exported data
- Testing import in target system
- Reporting errors or deficiencies within 14 days
12. Changes to Data Portability
12.1 Improvements
3RD may continuously improve:
- Export formats and structure
- Speed and automation
- Available data categories
12.2 Notice
Changes that affect existing export functionality will be notified at least 30 days in advance.
12.3 Feedback
We welcome feedback on data export:
product@get3rd.com
13. Related Documents
For additional information, see:
- Terms and Conditions (sections 10.8, 13.3): https://trust.get3rd.com/terms
- Privacy Policy: https://trust.get3rd.com/privacy
- Data Processing Agreement (section 7): https://trust.get3rd.com/dpa
- API Documentation: https://docs.get3rd.com/api
14. Contact
For questions about data export or portability:
Third Law ApS (3RD)
Pilestræde 52A
DK-1112 Copenhagen K
Denmark
CVR: DK45948471
Data export: support@get3rd.com
Technical assistance: tech@get3rd.com
GDPR requests: privacy@get3rd.com
Enterprise support: enterprise@get3rd.com
Support hours:
- Standard support: Mon-Fri 9am-5pm CET
- Enterprise support: 24/7 (for critical requests)
*This document is part of 3RD's commitment to data sovereignty and compliance with the EU Data Act.*
