California & US State Privacy Rights

If you are a resident of California or of another U.S. state with a comprehensive consumer privacy law (including Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, as those laws come into force), you may have some or all of the rights below. Listing a statute here does not mean it currently applies to us. Applicability depends on revenue, volume and type of personal information, exemptions, and other statutory thresholds. Where a law does apply, the rights are not absolute; we may deny a request as the statute allows (for example to complete a transaction, detect security incidents, debug, protect against fraud, or comply with law).

1. Categories collected (last 12 months)

• Identifiers — email, name, account id, IP address, online identifiers. Collected: yes.
• Customer records information (Cal. Civ. Code § 1798.80) — name and contact on the account; billing contact if you pay us. Collected: yes, as applicable.
• Protected classifications — not intentionally collected.
• Commercial information — waitlist, plan, seat, and subscription status; purchase history if billing is enabled. Collected: limited / when you pay.
• Biometric information — not collected.
• Internet or network activity — workbench and site logs, pages, tickers, and features used. Collected: yes.
• Geolocation — approximate, IP-derived; not precise GPS. Collected: yes.
• Sensory data (audio/video of you) — not collected.
• Professional information — firm or role if you volunteer it on an access form. Collected: if provided.
• Education information — not collected for the product; career inquiries may include what you send us.
• Inferences — limited product-usage inferences to operate and improve the Services, not consumer advertising profiles. Collected: limited.
• Sensitive personal information — account login credentials, used only to provide and secure the account. We do not use sensitive PI to infer characteristics. Payment card data, if any, is handled by the processor.

2. Sources and purposes

Sources: you, your browser or device, administrators who invite you, our processors (including authentication and payment), and operators who admit you to a waitlist. Purposes: the uses listed in the Privacy Policy, including providing paid plans when you purchase them. We do not use personal information for cross-context behavioral advertising.

3. Sale, share, and targeted advertising

We have not sold or shared personal information as defined by the CCPA/CPRA in the preceding twelve months, and we do not sell or share it for monetary or other valuable consideration. We do not process personal information for targeted advertising as defined in state privacy laws. If that changes, we will update this notice and provide opt-out mechanisms, including honoring GPC where required.

4. Your rights

• Know / access whether we process your personal information and obtain a copy.
• Correct inaccuracies.
• Delete personal information we hold about you, subject to statutory exceptions. You can also delete the account in Settings → Profile.
• Data portability, where the law provides it.
• Opt out of sale, sharing, or targeted advertising — not applicable to our current practices; you may still email us to record a preference.
• Limit use of sensitive personal information, where that right applies. We only use credentials to run and secure your account.
• Non-discrimination for exercising privacy rights.
• Appeal a refusal, where your state requires an appeal.

5. How to exercise

Email privacy@141.software from the address on your account with the subject "Privacy request," stating whether you seek access, correction, deletion, or another right. We will verify your identity using the account email and may ask for additional information solely to complete verification. We will not fulfill a request if we cannot reasonably verify you. You may use an authorized agent if you provide signed permission and we can verify both you and the agent. We respond within 45 days (or the shorter period your state requires), with one extension where the law allows if we notify you.

6. Appeals

If we deny a request and your state grants an appeal, reply to our decision email within a reasonable time. We will explain the outcome in writing. You may also complain to your state attorney general or, in California, the California Privacy Protection Agency.

7. Shine the Light

California Civil Code § 1798.83 permits California residents to request once per year a list of categories of personal information disclosed to third parties for those parties' direct marketing, and the names of those parties, for the preceding calendar year. We do not disclose personal information to third parties for their own direct marketing. To make a Shine the Light request, email privacy@141.software.