CCPA + CPRA compliance

Categories of personal information collected (last 12 months)

Per Cal. Civ. Code § 1798.110, the categories of personal information DecipherU has collected from California residents in the last 12 months, the sources, the business purposes, and the third parties with whom each category has been shared:

California consumer rights

California residents have the following rights under CCPA and CPRA. Use the structured intake at /data-request to exercise any right.

• Right to know. Categories of personal information collected, the categories of sources, the business purposes, the categories of third parties shared with, and the specific pieces of information held about you.
• Right to delete. Deletion of personal information collected, subject to exceptions (transactions in progress, fraud prevention, anti-fraud / tax compliance retention).
• Right to correct (CPRA). Correction of inaccurate personal information.
• Right to opt out of sale or sharing. The Do-Not-Sell link above. DecipherU does not sell personal information for money but the CCPA/CPRA definition of sale/share includes cross-context advertising signals. Opting out covers both.
• Right to limit use of sensitive personal information (CPRA). DecipherU does not collect sensitive personal information as defined by Cal. Civ. Code § 1798.140(ae) (no SSN, no government IDs, no precise geolocation, no biometric data, no race/ethnicity/religion/sexual orientation/health data). This right is preserved as a placeholder; in practice there is nothing to limit.
• Right to non-discrimination. DecipherU does not deny service, charge different prices, or provide different quality of service in retaliation for any CCPA right exercise.
• Right to authorize an agent. You may authorize an agent to make a request on your behalf. The agent must provide written authorization signed by you and DecipherU may verify identity directly.

Verification

For Right-to-Know and Right-to-Delete requests, DecipherU verifies identity by matching the requester's email address to an account on file and sending a confirmation link. For sensitive requests (deletion of years of activity), additional verification (last-4 of payment card, last login location) may be required.

Response timing

DecipherU acknowledges all requests within 10 business days and substantively responds within 45 calendar days, extendable to 90 days when reasonably necessary per § 1798.130(a)(2). Response window communicated in the initial acknowledgment.

Sale and share disclosure (last 12 months)

DecipherU has not sold personal information of California residents for monetary value in the last 12 months.

Sharing for cross-context behavioral advertising depends on whether you have opted out via the Do-Not-Sell link above. By default, DecipherU uses a small set of analytics cookies (PostHog) that may meet the CPRA definition of share. Opting out turns these off for your session.

Children

DecipherU does not knowingly collect personal information of California residents under 16 without explicit opt-in (per Cal. Civ. Code § 1798.120(c)). If you believe a minor has created an account, email privacy@decipheru.com and the account will be deleted promptly.

Contact

For questions about this CCPA/CPRA notice or to exercise any right:

• Privacy email: privacy@decipheru.com
• Structured request form: /data-request
• Mailing address: Bespoke Intermedia LLC, c/o DecipherU Privacy, address available on request to privacy@decipheru.com