California Consumer Privacy Act (CCPA) Compliance

Last Updated: January 20, 2025

1. Introduction

The California Consumer Privacy Act (CCPA) grants California residents specific rights regarding their personal information. This page explains how ThoughtTap complies with the CCPA and describes your rights as a California consumer.

This policy supplements our general Privacy Policy and applies specifically to California residents. If you are a California resident, you have the rights described below.

2. Your Rights Under CCPA

As a California resident, you have the following rights regarding your personal information:

2.1 Right to Know (Access)

You have the right to request information about:

• The categories of personal information we collect about you
• The categories of sources from which we collect personal information
• The business or commercial purpose for collecting personal information
• The categories of third parties with whom we share personal information
• The specific pieces of personal information we have collected about you

2.2 Right to Delete

You have the right to request that we delete personal information we have collected about you, subject to certain exceptions such as:

• Completing transactions or providing services you requested
• Security purposes and fraud prevention
• Legal compliance requirements
• Internal uses that are compatible with your expectations

2.3 Right to Opt-Out of Sale

Important: ThoughtTap does not sell personal information to third parties. We do not sell, rent, or trade your personal information for monetary consideration.

2.4 Right to Non-Discrimination

You have the right not to receive discriminatory treatment for exercising your CCPA rights. We will not:

• Deny goods or services to you
• Charge different prices or rates for goods or services
• Provide different levels or quality of goods or services
• Suggest that you will receive different treatment if you exercise your rights

3. Categories of Personal Information We Collect

We may collect the following categories of personal information from California residents:

*Financial information is processed by Stripe and not stored by ThoughtTap

4. Sources of Personal Information

We collect personal information from the following sources:

• Directly from you: When you create an account, subscribe to services, or contact us
• Automatically: Through your use of our services (usage analytics, performance metrics)
• Third-party services: Payment processors (Stripe), analytics providers
• Public sources: Limited information from public developer profiles (when applicable)

5. Business Purposes for Collecting Information

We collect and use personal information for the following business purposes:

• Service provision: Providing and maintaining ThoughtTap services
• Customer support: Responding to inquiries and providing assistance
• Payment processing: Processing subscription payments and billing
• Service improvement: Analyzing usage to enhance features and performance
• Security: Protecting against fraud and unauthorized access
• Legal compliance: Meeting legal and regulatory requirements
• Marketing: Sending promotional communications (with consent)

6. Information Sharing and Disclosure

6.1 Categories of Third Parties

We may share personal information with the following categories of third parties:

• Service providers: Payment processors, analytics providers, hosting services
• Professional advisors: Lawyers, accountants, and other professional services
• Government entities: When required by law or legal process
• Business partners: In connection with business transactions (mergers, acquisitions)

6.2 Sale of Personal Information

We do not sell personal information. ThoughtTap has not sold personal information in the preceding 12 months and does not have plans to sell personal information.

7. How to Exercise Your Rights

7.1 Submitting Requests

California residents can exercise their rights by contacting us:

7.2 Request Types

When contacting us, please specify the type of request:

• "Right to Know" - Request information about data collection and use
• "Right to Delete" - Request deletion of your personal information
• "Right to Opt-Out" - Opt out of the sale of personal information (not applicable as we don't sell data)

7.3 Verification Process

To protect your privacy, we must verify your identity before fulfilling CCPA requests:

• Account holders: We may verify through your existing account authentication
• Email verification: Confirming requests through the email associated with your account
• Additional verification: For sensitive requests, we may require additional identity confirmation

7.4 Response Timeline

• Acknowledgment: Within 10 days of receiving your request
• Response: Within 45 days, with possible 45-day extension for complex requests
• Free requests: Up to 2 requests per 12-month period at no charge

8. Authorized Agents

You may designate an authorized agent to submit CCPA requests on your behalf. The agent must:

• Provide signed written permission from you to act on your behalf
• Verify their own identity
• For Right to Delete requests, provide additional verification that you have given permission

9. Minors Under 16

ThoughtTap does not knowingly collect personal information from minors under 16 years of age. If we become aware that we have collected personal information from a minor under 16, we will delete such information promptly.

10. CCPA and GDPR Coordination

For users subject to both CCPA and GDPR, we apply the most protective standard. Rights under both regulations are respected, and we coordinate our compliance efforts to ensure comprehensive data protection.

11. Financial Incentives

Currently, ThoughtTap does not offer financial incentives in exchange for personal information. If we implement such programs in the future, we will provide clear notice and obtain appropriate consent.

12. Updates to CCPA Compliance

We may update this CCPA compliance information to reflect:

• Changes in California law (including the California Privacy Rights Act)
• Updates to our data practices
• New features or services that affect data collection
• Regulatory guidance from the California Attorney General

13. California Privacy Rights Act (CPRA)

The California Privacy Rights Act, which went into effect on January 1, 2023, expands CCPA rights. Additional rights include:

• Right to correct: Request correction of inaccurate personal information
• Right to limit use: Limit the use of sensitive personal information
• Enhanced opt-out: Opt out of sharing for cross-context behavioral advertising

14. Contact Information

For CCPA-related questions or to exercise your rights: