California Privacy Notice

1. Who This Notice Covers

This notice supplements our Privacy Policy and applies specifically to California residents, under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

2. Categories of Personal Information We Collect

In the past 12 months, we have collected:

• Identifiers (name, email address)
• Commercial information (purchase history; payment processed by Stripe, we do not store card details)
• Internet/network activity (pages visited, course progress, browser/device information)
• Geolocation data (general location inferred from IP address)

We do not collect sensitive personal information — no Social Security numbers, precise geolocation, biometric data, or health information.

3. Sources of Personal Information

Collected directly from you when you create an account, complete a purchase, or use the course. Technical information is collected automatically through your use of the site.

4. How We Use Personal Information

To provide access to purchased content, track your course progress, send receipts and account information, and improve the platform.

5. Do We Sell or Share Your Personal Information?

No. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. We do not use your data for advertising of any kind.

6. Third Parties We Share Information With

Limited information is shared with the service providers who run ThatClicked: Stripe (payment processing), Supabase (secure data storage), Resend (email delivery). These providers are contractually restricted from using your information for any purpose beyond providing their service to us.

7. Your California Privacy Rights

If you are a California resident, you have the right to:

• Know what personal information we have collected about you
• Delete personal information we have collected from you
• Correct inaccurate personal information
• Opt out of the sale or sharing of personal information (we do not currently sell or share information, but you may still submit a request)
• Limit the use of sensitive personal information (we do not collect sensitive personal information)
• Not be discriminated against for exercising any of these rights

8. How to Submit a Request

Email hello@thatclicked.com with “California Privacy Request” in the subject line. We will verify your identity using the email address on your account before processing. We will respond within 45 days as required by law, and may extend this once by an additional 45 days if needed, with notice to you.

9. Authorized Agents

You may designate an authorized agent to submit a request on your behalf. We may require proof of the agent’s authorization and may still need to verify your identity directly.

10. Shine the Light

California Civil Code Section 1798.83 permits residents to request information about disclosures of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.

11. Changes to This Notice

We may update this notice from time to time. The date at the top shows when it was last updated.

12. Contact

For questions about this notice: hello@thatclicked.com