California Privacy Rights

This California Privacy Rights Notice ("CA Notice") applies to California residents and is provided pursuant to the California Consumer Privacy Act of 2018 (CCPA) as amended by the California Privacy Rights Act of 2020 (CPRA), codified at Cal. Civ. Code §§ 1798.100–1798.199.100. It supplements our Global Privacy Policy.

Verifox (verifox.ai) operates as a Business under the CCPA with respect to personal information collected from California residents who are our customers or website visitors. For personal information we process on behalf of our business customers (the email lists they submit for verification), we act as a Service Provider under CCPA § 1798.140(ag).

In the preceding 12 months, Verifox has collected the following categories of personal information from California residents, as defined in Cal. Civ. Code § 1798.140(v):

We collect personal information for the following business and commercial purposes under CCPA § 1798.140(e):

• Providing, maintaining, and improving the Verifox platform and associated services
• Processing transactions and managing billing and subscriptions
• Communicating with you about your account, service updates, and support
• Detecting, preventing, and investigating fraud, security incidents, and abuse (FoxGuard)
• Complying with applicable legal obligations
• Analytics and service improvement (aggregated, de-identified data)
• Marketing communications (where you have opted in)

In the preceding 12 months, Verifox has disclosed personal information to the following categories of third parties for business purposes:

• Service providers / processors: Cloud infrastructure (AWS), payment processors (Stripe), analytics providers (PostHog), support tools (Intercom), error monitoring (Sentry)
• Professional advisors: Attorneys, accountants, and auditors, under confidentiality obligations
• Government authorities: In response to lawful legal process

We do not sell personal information as defined under CCPA § 1798.140(t). We do not share personal information for cross-context behavioural advertising as defined under CPRA § 1798.140(ah). This means you do not need to opt out of a sale or sharing — because we do not engage in these activities.

As a California resident, you have the following rights under CCPA/CPRA:

Right to Know (§ 1798.110, § 1798.115)

You have the right to request that we disclose: (a) the categories and specific pieces of personal information we have collected about you; (b) the categories of sources from which the information was collected; (c) the business purpose for collecting or selling the information; and (d) the categories of third parties with whom we share the information.

Right to Delete (§ 1798.105)

You have the right to request deletion of personal information we have collected from you, subject to certain exceptions (such as legal compliance, completing a transaction, or detecting fraud).

Right to Correct (§ 1798.106)

You have the right to request that we correct inaccurate personal information we maintain about you.

Right to Opt Out of Sale/Sharing (§ 1798.120)

We do not sell or share personal information. If this changes, we will update this notice and provide an opt-out mechanism.

Right to Limit Use of Sensitive Personal Information (§ 1798.121)

We do not collect sensitive personal information as defined by CPRA beyond what is strictly necessary for service delivery, and we do not use it for inferring characteristics about you.

Right of Non-Discrimination (§ 1798.125)

We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you a different price, or provide a different level of service based on your exercise of privacy rights.

To exercise any of the rights above, submit a verifiable consumer request by:

• Email: [email protected] (subject line: "California Privacy Rights Request")
• Account portal: Log in to your Verifox account and navigate to Settings > Privacy > Submit Data Request

We will verify your identity before processing the request. Verification may require confirming access to the email address associated with your account or providing additional identifying information.

We will respond to verifiable consumer requests within 45 days. If we require more time, we will notify you of the reason and the extension period (up to 90 days total).

You may designate an authorised agent to submit requests on your behalf. The agent must provide written proof of their authorisation and you must verify the agent's identity directly with us.

California's "Shine the Light" law permits California residents to request information about how we share certain types of personal information with third parties for their direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes without your consent. California residents who wish to request information about our compliance with this law should contact [email protected].