CCPA / CPRA Notice

This addendum applies to California residents whose personal information we collect through prosigns.io and our marketing and sales processes. It supplements our main Privacy Policy with rights and disclosures specific to the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

In the past twelve months we have collected the following categories of personal information about California residents, for the business and commercial purposes described in our Privacy Policy:

• Identifiers. Name, work email address, phone number (where provided), company, IP address.
• Customer records information (Civil Code §1798.80). Job title, employer, professional context.
• Internet or electronic activity. Pages visited, referring URL, browser type, time spent on pages.
• Geolocation (approximate). Country and region derived from IP address. We do not collect precise geolocation.
• Professional information. Project context and problem space you describe in inquiry forms.
• Inferences. Drawn from the above to understand buyer fit, e.g., engagement category likely to apply.

We do not knowingly collect information from minors under 16 through prosigns.io.

We do not collect or process sensitive personal information as defined under the CPRA in connection with the public-facing prosigns.io. Where sensitive personal information is processed in the course of a client engagement, the processing is governed by the applicable Data Processing Agreement and our role is that of a service provider, not a controller.

Prosigns does not sell personal information for monetary consideration. We may share personal information with vetted service providers (analytics, advertising measurement, hosting) for business purposes, under contracts that restrict their use to those purposes. To the extent any of these activities qualify as “sharing” for cross-context behavioral advertising under CPRA, we honor opt-out requests via the cookie banner and Global Privacy Control (GPC) signals. We have not knowingly sold or shared the personal information of consumers under 16.

You have the following rights under CCPA / CPRA:

• Right to know. Request the categories and specific pieces of personal information we have collected, disclosed, sold, or shared about you.
• Right to delete. Request deletion of personal information we have collected, subject to applicable exceptions.
• Right to correct. Request correction of inaccurate personal information.
• Right to opt out of sale or sharing. Direct us not to sell or share your personal information for cross-context behavioral advertising. We honor GPC signals as a valid opt-out for users in California.
• Right to limit use of sensitive personal information. Direct us to limit the use of any sensitive personal information we hold to the purposes specified by CPRA. (We do not collect sensitive PI through prosigns.io.)
• Right to non-discrimination. We will not discriminate against you for exercising any of the above rights, including through price changes or denial of services.

Submit a request in one of two ways:

• Email privacy@prosigns.io with the subject line “CCPA Request” and the right you wish to exercise.
• Use our contact page, selecting “Privacy request” as the topic.

We respond within 45 days. For complex requests, we may extend by an additional 45 days, with notice. We will verify your identity using the minimum information necessary; if we cannot verify, we will explain why and request additional information. There is no charge for legitimate requests.

You may designate an authorized agent to make a request on your behalf. The agent must provide a signed authorization, and we will verify your identity directly except where the agent has power of attorney.

We retain personal information only as long as reasonably necessary for the purpose for which it was collected, plus any retention required by applicable legal, accounting, or reporting obligations. Specific retention periods by category are documented in our privacy program and provided on request.

Questions about this notice can be directed to privacy@prosigns.io or sent to: Prosigns, Attn: Privacy, Dallas, Texas, United States.