California Privacy Notice (CCPA/CPRA)

Privacy rights for California residents

Effective Date: December 1st, 2025 | Last Updated: December 1st, 2025

This California Consumer Privacy Act ("CCPA/CPRA") Privacy Notice ("Notice") applies to California residents who interact with Altyaa LLC ("Altyaa," "we," "us," or "our"). It supplements the Altyaa Privacy Policy.

This Notice describes:

  • The categories of personal information we collect
  • How we use and disclose personal information
  • Your rights under the CCPA/CPRA
  • How to submit a privacy rights request

If you are a California resident and wish to exercise your privacy rights, contact us at: legal@altyaa.com

1. Categories of Personal Information We Collect

Altyaa may have collected the following categories of personal information:

Identifiers

  • Name
  • Email address
  • Business name
  • Login information (hashed passwords)
  • IP address
  • Unique user identifiers

Commercial Information

  • Subscription plan
  • Billing status and payment metadata (processed via Stripe)
  • User actions within the platform

Internet / Device Information

  • Browser type
  • Device type
  • IP address
  • Usage analytics

User-Generated Content

  • Review response templates
  • Social media post drafts
  • AI-generated content outputs
  • Photos and videos uploaded for posting or branding

Third-Party Integration Data

If you connect Google, Meta, TikTok or similar, we may receive:

  • Business profile details
  • Page IDs
  • Connected account identifiers
  • Publishing metadata

We Do Not Collect

  • Government IDs (driver's license, SSN, passport)
  • Financial account numbers (Stripe stores all payment data)
  • Sensitive personal information (as defined under CPRA) unless voluntarily provided
  • Geolocation beyond IP-based region detection

2. What We Do With Your Personal Information

We collect and use your personal information to:

  • Provide and operate the Altyaa platform
  • Process subscriptions through Stripe
  • Connect to and publish on social media accounts you authorize
  • Generate AI-assisted content and responses
  • Store photos and videos for social posting
  • Monitor platform performance and detect abuse
  • Provide customer support and service updates
  • Comply with legal obligations

We do not:

  • Sell personal information
  • Share personal information for cross-context behavioral advertising
  • Sell or share photos or videos uploaded by users

3. Categories of Personal Information Disclosed

In the past 12 months, Altyaa has disclosed personal information only to:

Service Providers

Such as:

  • Hosting and infrastructure providers
  • Email and communication systems
  • AI processing tools
  • Analytics providers
  • Payment provider (Stripe)

All service providers are contractually restricted from using your data for any purpose other than delivering services to Altyaa.

Third-Party Platforms

If you connect accounts such as:

  • Google Business Profile
  • Facebook
  • Instagram
  • TikTok

We share only the information needed to publish content or access insights — as directed by you.

4. Your CCPA/CPRA Rights

If you are a California resident, you have the following rights:

A. Right to Access Your Personal Information

You may request:

  • A description of the personal information we have collected
  • Sources of that information
  • Purposes for collection
  • Categories of third parties with whom information is shared
  • Specific pieces of information associated with your account

We will respond within 45 days, with an extension of an additional 45 days if needed.

B. Right to Correct Personal Information

If any personal information is inaccurate, you may request correction.

C. Right to Request Deletion

You may request that we delete any personal information we collected from or about you.

We will delete eligible data unless it must be retained for:

  • Completing a transaction
  • Security or fraud prevention
  • Debugging and repair
  • Legal compliance
  • Internal uses aligned with consumer expectations

Uploaded photos and videos will be deleted from our systems when your account is deleted or upon verified request. Content already posted on third-party platforms must be removed through those platforms.

D. Right to Opt-Out of Sale or Sharing

Altyaa does not sell or "share" personal information as defined under CPRA.

No opt-out is required.

E. Right to Restrict the Use of Sensitive Personal Information

Altyaa does not collect or use sensitive personal information for any purpose requiring restriction rights.

F. Right to Non-Discrimination

We will not:

  • Deny services
  • Provide a different level of service
  • Charge different prices

Because you exercised your CCPA/CPRA rights.

5. How to Submit a CCPA/CPRA Request

To exercise any of these rights, email:

legal@altyaa.com

Include the following so we can verify your identity:

  1. Full name
  2. Email address associated with your Altyaa account
  3. Optional phone number for verification

If you are submitting a request on behalf of someone else (including a minor), you must provide proof of authorization.

We respond to all verified requests within 45 days.

6. Verification Process

To protect privacy and security, we may:

  • Ask for additional identifying information
  • Verify account ownership
  • Confirm posting permissions, if the request concerns social accounts

Unverifiable requests may be denied.

7. Authorized Agents

California residents may appoint an authorized agent to make requests on their behalf.

Agents must provide:

  • Written authorization signed by the consumer, or
  • Legal documentation proving authority

We may still request direct confirmation from the consumer.

8. Updates to This Notice

We may update this Notice periodically. Material updates will be posted on our website.

Continued use of the Services after updates indicates acceptance of the revised Notice.