California Privacy Notice (CCPA)
Introduction and Scope
California residents have a defined set of rights with respect to their personal information under the California Consumer Privacy Act and the California Privacy Rights Act (together, the "CCPA"). This notice from Finvaultlogic tells you what we collect, how we use it, with whom we share it, and how to exercise each of those rights. It is a California-specific supplement to our broader Privacy Policy.
Categories of Personal Information Collected
Over the preceding twelve (12) months Finvaultlogic has collected the categories of personal information described below. "Identifiers" — your IP address, browser fingerprint, and any email address you submit. "Customer records" — any name, email, or message you provide through forms. "Commercial information" — your newsletter subscription state. "Internet activity" — the pages you read and the referrer that brought you here. "Geolocation" — coarse city- or country-level derived from IP. "Inferences" — aggregated audience-segment estimates derived from reading behavior.
Sources of Personal Information
We obtain the personal information described above directly from you (when you fill in a form or interact with the site), automatically from your device (when your browser requests pages and sends standard HTTP headers), and from a limited set of service providers that operate Finvaultlogic on our behalf (such as our hosting provider, edge security provider, and email-delivery vendor). We do not buy personal information from data brokers.
Business and Commercial Purposes
Finvaultlogic processes personal information for clearly defined business purposes: delivering the content you request; sending newsletter editions you have explicitly opted into; replying to messages submitted through our Contact and other forms; producing aggregated reports of site usage for editorial and advertising operations; securing the service against fraud and abuse; and complying with our legal and regulatory obligations under California and other applicable laws.
Disclosure to Service Providers and Third Parties
We disclose personal information to service providers under written contract for the business purposes outlined above. These currently include: our cloud hosting provider; our content-delivery network and edge security provider; our email-delivery vendor (for newsletter distribution); our web-analytics provider; and our advertising network (where ads are displayed). Each service provider is contractually prohibited from retaining, using, or disclosing the personal information for any purpose other than the specific services it provides to us.
Sale and Sharing of Personal Information
Finvaultlogic does not sell personal information and does not share personal information for cross-context behavioral advertising as those terms are defined under the CCPA. In the preceding twelve (12) months we have not sold or shared the personal information of any California consumer, including any California consumer under the age of 16, and we have no actual knowledge of any such sale or sharing.
Sensitive Personal Information
Under the CCPA, certain categories of personal information are designated as "sensitive" — including precise geolocation, government IDs, financial account numbers, racial or ethnic origin, religious beliefs, and similar attributes. Finvaultlogic does not knowingly collect or process such categories for inferring characteristics about California consumers. Any voluntary submission of sensitive information through our forms is used solely for the workflow you initiated.
Your California Privacy Rights
California consumers have, under the CCPA, the following rights with respect to personal information held by Finvaultlogic: a right to know (categories collected, sources, purposes, categories of recipients); a right to access specific pieces; a right to correction; a right to deletion; a right to opt out of sale and sharing; a right to limit the use of sensitive personal information; and a right not to be retaliated against for exercising any of these rights.
How to Exercise Your Rights
Requests to exercise CCPA rights should be sent to Finvaultlogic via the Contact form or the email address listed on the Contact page. Because we hold only a limited amount of personal information about each consumer, verification is usually straightforward (we typically confirm access to a registered email). We aim to acknowledge requests within ten days and to substantively respond within the 45-day statutory deadline; a single 45-day extension is available when reasonably necessary and we will tell you if we need to use it.
You may also designate an authorized agent to submit a request on your behalf. We will require the agent to provide written permission from you (or a power of attorney) and may verify your identity directly to confirm the request. Agents acting on behalf of multiple consumers under a single permission must still meet the verification standards required by the CCPA for each consumer represented.
Consumers Under 16 Years of Age
Finvaultlogic does not sell or share personal information about consumers under the age of 16 and does not have actual knowledge of collecting personal information of children under 13. If we ever decided to sell or share personal information about consumers between the ages of 13 and 16, we would do so only with the affirmative authorization of the consumer (opt-in) as required by the CCPA. Parents and guardians may submit deletion requests on behalf of their children via the Contact form.
Right to Non-Discrimination
We are committed to the CCPA's anti-retaliation principle: Finvaultlogic will treat California consumers equally regardless of whether they exercise their CCPA rights. There is no premium or paid tier where rights-exercising consumers receive a lesser experience — the editorial content is the same for everyone. We do not offer financial incentives in exchange for collecting personal information.
Retention of Personal Information
Finvaultlogic follows a proportional retention policy. Newsletter records remain only while the subscription is active, with a minimal suppression entry kept post-unsubscribe to prevent accidental re-add. Contact-form records are retained for up to 24 months for follow-up and recordkeeping. Server logs are kept no longer than 90 days. Any aggregated analytics dataset that contains no identifiers is retained for long-term editorial planning.
Changes to This Notice and How to Reach Us
This California Privacy Notice may be updated periodically. The version on this page is always the current version, and the "Last updated" date shows when it took effect. To exercise any CCPA right or to ask a question about this notice, contact Finvaultlogic through the Contact form linked in the footer of every page — that form routes directly to the editor responsible for privacy correspondence.