California Privacy Rights & Opt-Out

Your California Privacy Rights

As a California resident, you have the following rights with respect to your personal information:

• Right to Know. You may request that we disclose the categories and specific pieces of personal information we have collected about you, the sources from which we collected it, the business or commercial purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete. You may request that we delete personal information we have collected from you, subject to certain exceptions permitted by law (e.g., where retention is necessary to complete a transaction or comply with a legal obligation).
• Right to Correct. You may request that we correct inaccurate personal information we maintain about you.
• Right to Opt Out of Sale or Sharing. You have the right to direct us not to sell or share your personal information with third parties for cross-context behavioral advertising purposes.
• Right to Limit Use of Sensitive Personal Information. You may direct us to limit our use of sensitive personal information to uses necessary to perform the Service.
• Right to Non-Discrimination. We will not discriminate against you for exercising any of the above rights.

Do We Sell Your Personal Information?

No. BrandFlow does not sell your personal information to third parties for money. We may share certain limited data with advertising analytics partners on the mybrandflow.io marketing site (such as ad attribution identifiers) in a manner that may qualify as "sharing" under the CCPA for cross-context behavioral advertising purposes. You may opt out of this sharing using the instructions below.

How to Submit a Request

To exercise any of the rights listed above — including to opt out of the sale or sharing of your personal information — please email us at:

support@mybrandflow.io

Please include "CCPA Privacy Request" in the subject line and specify in the body which right(s) you are exercising (e.g., opt-out of sharing, request to delete, request to know). We will need to verify your identity before processing your request; we may ask you to confirm the email address associated with your BrandFlow account or provide additional identifying information. We will respond to verified requests within 45 days, and may extend by an additional 45 days when reasonably necessary with notice.

Browser-Based Opt-Out (Global Privacy Control)

If your browser or browser extension transmits a Global Privacy Control (GPC) signal, we will treat it as a request to opt out of the sale or sharing of personal information for the browser and device sending that signal. Please note that the GPC signal is linked to your browser, not your BrandFlow account; if you use multiple browsers or devices, you may need to enable the signal on each one separately. Logging in to the Service does not automatically extend a browser-based opt-out to your account across all devices.

Authorized Agents

California residents may designate an authorized agent to submit a CCPA request on their behalf. We may require the authorized agent to provide proof of authorization, and we may require the consumer to verify their own identity directly with us, before processing the request.

Questions

For questions about your California privacy rights or this opt-out process, contact us at support@mybrandflow.io or by mail at [BRANDFLOW LEGAL ENTITY], [COMPANY ADDRESS].