CCPA Privacy Rights

This page describes the privacy rights available to California residents under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). These rights apply to personal information collected by Bespoke Intermedia LLC, doing business as DecipherU.

Your rights under CCPA

If you are a California resident, you have the following rights regarding your personal information:

Right to know

You have the right to request that we disclose:

• The categories of personal information we have collected about you
• The categories of sources from which we collected that information
• Our business or commercial purpose for collecting that information
• The categories of third parties with whom we share that information
• The specific pieces of personal information we have collected about you

Right to delete

You have the right to request that we delete personal information we have collected from you, subject to certain exceptions. We may retain information when required by law, to complete transactions you initiated, to detect security incidents, or for other legitimate purposes as permitted by the CCPA.

Right to correct

You have the right to request that we correct inaccurate personal information we maintain about you.

Right to opt out of sale or sharing

DecipherU does not sell your personal information to third parties and does not share your personal information for cross-context behavioral advertising. You have the right to opt out of any future sale or sharing of your personal information. Because we do not currently engage in these practices, no opt-out action is required at this time.

Right to limit use of sensitive personal information

If we collect sensitive personal information (as defined by CPRA), you have the right to direct us to limit our use of that information to what is necessary to perform the services you requested. DecipherU does not collect sensitive personal information beyond what is necessary to provide platform services (for example, account credentials handled by Clerk).

Right to non-discrimination

We will not discriminate against you for exercising any of your CCPA rights. We will not deny you services, charge different prices, provide a different quality of service, or suggest that you will receive a different quality of service because you exercised your privacy rights.

Categories of personal information we collect

In the past 12 months, we have collected the following categories of personal information:

• Identifiers — name, email address, account ID (via Clerk)
• Internet or network activity — pages visited, features used, assessment responses (via PostHog analytics)
• Commercial information — subscription status, payment history (via Stripe; we do not store full payment card details)
• Professional or employment-related information — career preferences, assessment results, and career goals you voluntarily provide
• Inferences drawn from other information — career match scores and career alignment profiles derived from your assessment responses

We do not collect biometric data, geolocation data, or the contents of private communications.

How we use personal information

We use personal information to provide and improve our platform, process payments, personalize your experience, send service-related communications, and detect fraud or security incidents. We do not use personal information for purposes materially different from those disclosed at the time of collection without your consent.

Categories of third parties with whom we share information

We share personal information with the following categories of third parties for business purposes:

• Clerk — authentication and user account management
• Stripe — payment processing
• Supabase — database and backend infrastructure
• PostHog — anonymized product analytics
• Vercel — hosting and infrastructure
• Anthropic — AI-powered features (assessment analysis, career guidance)
• Resend — transactional email delivery

We do not share personal information with data brokers or advertising networks.

How to submit a request

To exercise any of your CCPA rights, submit a request by:

• Emailing privacy@decipheru.com with the subject line "CCPA Privacy Request"
• Logging in to your account and using the data export or account deletion features in Settings

We will verify your identity before processing your request. We will respond within 45 days. If we need additional time, we will notify you of the extension and the reason for the delay.

Authorized agent

You may designate an authorized agent to submit requests on your behalf. To do so, the agent must provide written authorization signed by you, and we may require you to verify your identity directly with us.

Financial incentives

We do not offer financial incentives in exchange for the collection, sale, or retention of your personal information.

Contact

For CCPA-related inquiries, contact our privacy team at privacy@decipheru.com. Bespoke Intermedia LLC, Florida, USA.