California Privacy Rights

Last updated: April 21, 2026

This California Privacy Notice supplements our Privacy Policy and applies solely to California residents. It describes our practices regarding the collection, use, and disclosure of personal information under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

1. Categories of Personal Information We Collect

In the past 12 months, we have collected the following categories of personal information:

  • Identifiers — email address collected when you create an account.
  • Commercial information — purchase history, subscription status, and Stripe customer ID collected when you subscribe.
  • Internet or network activity — pages visited and features used, collected via Vercel Analytics (aggregated) and Google Ads conversion tracking (with your consent).
  • Inferences — basic usage patterns derived from the above to improve the service.

We do not collect sensitive personal information as defined by the CPRA.

2. Purposes for Collection

We collect personal information to:

  • Create and maintain your account and subscription
  • Process payments and send transaction receipts
  • Send service-related communications (e.g., subscription notices)
  • Understand how the service is used and improve it
  • Measure the effectiveness of our advertising (with your consent)
  • Respond to support requests
  • Comply with legal obligations

3. Disclosure of Personal Information

We do not sell your personal information. In the past 12 months, we have disclosed personal information to the following categories of third parties for business purposes:

  • Stripe — payment processing (commercial information)
  • Supabase — authentication and data storage (identifiers)
  • Vercel — hosting and aggregated analytics (internet activity)
  • Google — advertising measurement via Google Ads, only with your consent (internet activity / identifiers)

The disclosure to Google for advertising measurement may constitute "sharing" of personal information for cross-context behavioral advertising under the CPRA. You can opt out using the cookie banner or the opt-out mechanism below.

4. Do Not Sell or Share My Personal Information

We do not sell personal information. To opt out of the sharing of your personal information for advertising purposes (Google Ads conversion tracking), you can:

  • Use the cookie consent banner on your first visit and select Decline Non-Essential.
  • If you have previously accepted, click Manage Cookies in the footer of any page to revisit your choice.
  • Email us at support@gradientcast.com and we will process your opt-out request within 15 business days.

5. Your California Privacy Rights

As a California resident, you have the following rights under the CCPA/CPRA:

Right to Know

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share it.

Right to Delete

You have the right to request that we delete personal information we have collected from you, subject to certain exceptions (e.g., information needed to complete a transaction or comply with a legal obligation).

Right to Correct

You have the right to request that we correct inaccurate personal information we maintain about you.

Right to Opt-Out of Sale/Sharing

You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. See Section 4 above for how to exercise this right.

Right to Limit Use of Sensitive Personal Information

We do not collect sensitive personal information as defined by the CPRA, so this right does not apply.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge different prices, or provide a different level of quality because you exercised your privacy rights.

6. How to Submit a Request

To exercise your rights to know, delete, or correct, contact us at support@gradientcast.com. We will respond within 45 days of receiving a verifiable consumer request. We may extend the response period by an additional 45 days when reasonably necessary, with prior notice.

We will need to verify your identity before processing a request. Typically, this means confirming your email address matches an account in our system.

You may designate an authorized agent to submit a request on your behalf by providing written authorization.

7. Shine the Light Disclosure (Cal. Civ. Code § 1798.83)

California residents may request information about whether we have disclosed personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their own direct marketing purposes.

8. Changes to This Notice

We may update this notice from time to time. The "last updated" date at the top reflects the most recent revision. We will notify registered California users of material changes via email.

9. Contact

For questions about this notice or to exercise your rights, email support@gradientcast.com.