California Privacy Notice (CCPA)

Introduction and Scope

If you are a resident of California, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, "CCPA"), gives you specific rights regarding the personal information that Credixaflow collects about you. This notice explains those rights in plain language and tells you how to exercise them. It applies in addition to the protections set out in our general Privacy Policy.

Categories of Personal Information Collected

The categories of personal information that Credixaflow has collected from California consumers during the past twelve months are: (a) identifiers such as IP addresses and email addresses; (b) personal-records information you submit voluntarily (name and message text in our forms); (c) commercial information (newsletter subscription history); (d) internet or other network activity information (browsing on our site, referring URL); (e) geolocation data of coarse precision; and (f) inferences drawn from the foregoing for the purpose of audience analytics. We do not knowingly collect biometric information, sensory data, professional or employment information, or education information.

Sources of Personal Information

Sources of the personal information we hold about California consumers include: you, directly (when you subscribe, contact us, or submit a tip); your browser and device (request headers, IP address, cookie identifiers); and our limited list of operational service providers (hosting, CDN, email delivery, analytics). Credixaflow does not purchase personal information from data brokers or rent contact lists.

Business and Commercial Purposes

Credixaflow processes personal information for clearly defined business purposes: delivering the content you request; sending newsletter editions you have explicitly opted into; replying to messages submitted through our Contact and other forms; producing aggregated reports of site usage for editorial and advertising operations; securing the service against fraud and abuse; and complying with our legal and regulatory obligations under California and other applicable laws.

Disclosure to Service Providers and Third Parties

We disclose personal information to service providers under written contract for the business purposes outlined above. These currently include: our cloud hosting provider; our content-delivery network and edge security provider; our email-delivery vendor (for newsletter distribution); our web-analytics provider; and our advertising network (where ads are displayed). Each service provider is contractually prohibited from retaining, using, or disclosing the personal information for any purpose other than the specific services it provides to us.

Sale and Sharing of Personal Information

Credixaflow does not sell personal information and does not share personal information for cross-context behavioral advertising as those terms are defined under the CCPA. In the preceding twelve (12) months we have not sold or shared the personal information of any California consumer, including any California consumer under the age of 16, and we have no actual knowledge of any such sale or sharing.

Sensitive Personal Information

We do not collect or process sensitive personal information as defined by the CCPA for the purpose of inferring characteristics about you. To the extent any sensitive personal information is incidentally collected (for example, if you voluntarily disclose it in a message), we use that information only for the business purpose for which it was provided and not for any additional uses requiring further consent under the CCPA.

Your California Privacy Rights

California consumers have, under the CCPA, the following rights with respect to personal information held by Credixaflow: a right to know (categories collected, sources, purposes, categories of recipients); a right to access specific pieces; a right to correction; a right to deletion; a right to opt out of sale and sharing; a right to limit the use of sensitive personal information; and a right not to be retaliated against for exercising any of these rights.

How to Exercise Your Rights

Requests to exercise CCPA rights should be sent to Credixaflow via the Contact form or the email address listed on the Contact page. Because we hold only a limited amount of personal information about each consumer, verification is usually straightforward (we typically confirm access to a registered email). We aim to acknowledge requests within ten days and to substantively respond within the 45-day statutory deadline; a single 45-day extension is available when reasonably necessary and we will tell you if we need to use it.

An authorized agent (such as a privacy-rights service or an attorney) may submit a CCPA request on behalf of a California consumer. Credixaflow will require written authorization from the consumer or a valid power of attorney, and may contact the consumer directly to confirm the request and verify identity. We may decline requests that do not meet the CCPA's authorization and verification requirements.

Consumers Under 16 Years of Age

Credixaflow does not sell or share personal information about consumers under the age of 16 and does not have actual knowledge of collecting personal information of children under 13. If we ever decided to sell or share personal information about consumers between the ages of 13 and 16, we would do so only with the affirmative authorization of the consumer (opt-in) as required by the CCPA. Parents and guardians may submit deletion requests on behalf of their children via the Contact form.

Right to Non-Discrimination

Credixaflow will not discriminate against you for exercising any of your CCPA rights. We will not deny you our service, charge you a different price, provide a different level or quality of service, or retaliate against you in any other way because you submitted a request under the CCPA. Because the service is free and the same for all visitors, there is no financial incentive or differential pricing structure for you to opt into or out of.

Retention of Personal Information

Personal information collected from California consumers is kept by Credixaflow only for the period necessary for the purposes described in this notice plus any legally mandated retention period. Concretely: newsletter email addresses are retained for the life of the subscription; contact-form submissions are retained up to 24 months; server logs are kept up to 90 days; non-identifying aggregate analytics may be retained indefinitely.

Changes to This Notice and How to Reach Us

Credixaflow may revise this California Privacy Notice when our practices change, when regulators issue new guidance, or when the law requires. The current version is the one published on this page. To raise any question about this notice — or to submit a request under the CCPA — please use the Contact form linked from the footer of every page on the site.