1. About This Notice
This California Privacy Rights Notice ("CA Notice") applies to California residents and is provided pursuant to the California Consumer Privacy Act of 2018 (CCPA) as amended by the California Privacy Rights Act of 2020 (CPRA), codified at Cal. Civ. Code §§ 1798.100–1798.199.100. It supplements our Global Privacy Policy.
Verifox (verifox.ai) operates as a Business under the CCPA with respect to personal information collected from California residents who are our customers or website visitors. For personal information we process on behalf of our business customers (the email lists they submit for verification), we act as a Service Provider under CCPA § 1798.140(ag).
2. Categories of Personal Information Collected
In the preceding 12 months, Verifox has collected the following categories of personal information from California residents, as defined in Cal. Civ. Code § 1798.140(v):
| Category | Examples | Collected? |
|---|---|---|
| A. Identifiers | Name, email address, IP address, account ID, API key | Yes |
| B. Personal Information (Cal. Civ. Code § 1798.80) | Name, address, telephone number, financial information | Yes (billing data) |
| C. Protected Classification Characteristics | Age, race, gender, national origin | No |
| D. Commercial Information | Purchase history, subscription tier, credit balance | Yes |
| E. Biometric Information | Fingerprints, facial recognition | No |
| F. Internet/Electronic Activity | Browsing history on verifox.ai, API call logs, feature usage | Yes |
| G. Geolocation Data | Physical location derived from IP address | Yes (approximate) |
| H. Sensory Data | Audio, visual recordings | No |
| I. Professional/Employment Information | Job title, company name, work email | Yes (voluntarily provided) |
| J. Inferences | Profiles reflecting preferences, characteristics | Limited (usage analytics) |
| K. Sensitive Personal Information | SSN, financial account numbers, precise geolocation, health data | No |
3. Purposes for Collection and Use
We collect personal information for the following business and commercial purposes under CCPA § 1798.140(e):
- Providing, maintaining, and improving the Verifox platform and associated services
- Processing transactions and managing billing and subscriptions
- Communicating with you about your account, service updates, and support
- Detecting, preventing, and investigating fraud, security incidents, and abuse (FoxGuard)
- Complying with applicable legal obligations
- Analytics and service improvement (aggregated, de-identified data)
- Marketing communications (where you have opted in)
4. Disclosure of Personal Information
In the preceding 12 months, Verifox has disclosed personal information to the following categories of third parties for business purposes:
- Service providers / processors: Cloud infrastructure (AWS), payment processors (Stripe), analytics providers (PostHog), support tools (Intercom), error monitoring (Sentry)
- Professional advisors: Attorneys, accountants, and auditors, under confidentiality obligations
- Government authorities: In response to lawful legal process
We do not sell personal information as defined under CCPA § 1798.140(t). We do not share personal information for cross-context behavioural advertising as defined under CPRA § 1798.140(ah). This means you do not need to opt out of a sale or sharing — because we do not engage in these activities.
5. Your California Privacy Rights
As a California resident, you have the following rights under CCPA/CPRA:
Right to Know (§ 1798.110, § 1798.115)
You have the right to request that we disclose: (a) the categories and specific pieces of personal information we have collected about you; (b) the categories of sources from which the information was collected; (c) the business purpose for collecting or selling the information; and (d) the categories of third parties with whom we share the information.
Right to Delete (§ 1798.105)
You have the right to request deletion of personal information we have collected from you, subject to certain exceptions (such as legal compliance, completing a transaction, or detecting fraud).
Right to Correct (§ 1798.106)
You have the right to request that we correct inaccurate personal information we maintain about you.
Right to Opt Out of Sale/Sharing (§ 1798.120)
We do not sell or share personal information. If this changes, we will update this notice and provide an opt-out mechanism.
Right to Limit Use of Sensitive Personal Information (§ 1798.121)
We do not collect sensitive personal information as defined by CPRA beyond what is strictly necessary for service delivery, and we do not use it for inferring characteristics about you.
Right of Non-Discrimination (§ 1798.125)
We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you a different price, or provide a different level of service based on your exercise of privacy rights.
6. How to Submit a Request
To exercise any of the rights above, submit a verifiable consumer request by:
- Email: support@verifox.ai (subject line: "California Privacy Rights Request")
- Account portal: Log in to your Verifox account and navigate to Settings > Privacy > Submit Data Request
We will verify your identity before processing the request. Verification may require confirming access to the email address associated with your account or providing additional identifying information.
We will respond to verifiable consumer requests within 45 days. If we require more time, we will notify you of the reason and the extension period (up to 90 days total).
You may designate an authorised agent to submit requests on your behalf. The agent must provide written proof of their authorisation and you must verify the agent's identity directly with us.
7. Shine the Light (Cal. Civ. Code § 1798.83)
California's "Shine the Light" law permits California residents to request information about how we share certain types of personal information with third parties for their direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes without your consent. California residents who wish to request information about our compliance with this law should contact support@verifox.ai.
This document was last updated on March 27, 2026. If you have questions about this policy, please contact support@verifox.ai.