Your California Privacy Rights
Last updated: May 2026 · Effective for California residents
Overview
If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you specific rights over your personal information. This page explains those rights and how to exercise them.
Categories of personal information we collect
Ozvor collects the following categories of personal information, as defined by the CCPA:
- Identifiers — Name, email address, IP address (truncated — last octet removed for privacy).
- Internet or network activity information — Login sessions, API usage, post generation events (stored as anonymized audit records).
- Sensitive personal information (CPRA) — OAuth access tokens for LinkedIn, Instagram, and Facebook. These are stored encrypted (AES-256-GCM) and are used exclusively for scheduling and publishing posts on your behalf.
- Commercial information — Subscription plan, billing history (managed by Stripe; we do not store full card details).
How we use your personal information
We use your personal information to: (1) provide the post generation and scheduling service; (2) process payments; (3) send transactional emails (confirmations, notifications); (4) comply with legal obligations. We do not sell your personal information, use it for targeted advertising, or share it with third parties for cross-context behavioral advertising.
Your rights under the CCPA/CPRA
- Right to Know — You may request a copy of the personal information we hold about you.
- Right to Delete — You may request deletion of your personal information, subject to certain exceptions.
- Right to Correct — You may request correction of inaccurate personal information.
- Right to Opt Out of Sale/Sharing — You may opt out of the sale or sharing of your personal information.
- Right to Limit Use of Sensitive PI — You may limit our use of sensitive personal information (OAuth tokens) to the purpose of providing the service (scheduling and publishing only).
- Right to Non-Discrimination — We will not discriminate against you for exercising any of these rights.
- Right to Data Portability — You may request an export of your personal information in a portable format.
How to exercise your rights
You may exercise your CCPA/CPRA rights through the following methods:
- Do Not Sell or Share: Submit an opt-out request (no account required).
- Limit Sensitive PI (authenticated users): Account > Data & Privacy → toggle "Limit Use of Sensitive Personal Information".
- Access, Delete, Correct, Portability, Restriction: Submit a Data Subject Request (no account required). We respond within 45 days.
- By email: privacy@ozvor.com
We will verify your identity before fulfilling access, deletion, or portability requests. For requests submitted without an account, we may send a verification email to the address you provide.
Response timelines
We will respond to verifiable consumer requests within 45 calendar days. If we need additional time (up to 90 days total), we will notify you of the extension and the reason.
Sensitive personal information
We collect OAuth access tokens for LinkedIn, Instagram, and Facebook as sensitive personal information under the CPRA. These tokens are stored encrypted and used exclusively to publish posts you have approved. We do not use these tokens for profiling, analytics, advertising, or any purpose other than the service you requested.
You may limit the use of your sensitive PI at any time via Account > Data & Privacy. Enabling this limitation does not affect your ability to schedule and publish posts.
Contact us
For privacy-related questions, contact our Privacy Team at privacy@ozvor.com. For general inquiries, see our Privacy Policy.