CCPA Privacy Notice

Back to Home

1. Scope

This notice supplements our Privacy Policy and applies to California residents, as required by the California Consumer Privacy Act of 2018 and the California Privacy Rights Act of 2020 (collectively, "CCPA/CPRA").

2. Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information:

Category	Examples	Collected	Sold/Shared
A. Identifiers	Name, email address, IP address, account ID	Yes	No
B. Personal Information (Cal. Civ. Code 1798.80(e))	Name, address (if provided for billing)	Yes	No
D. Commercial Information	Subscription plan, payment history, service usage records	Yes	No
F. Internet Activity	API usage logs, pages visited, features used	Yes	No
G. Geolocation Data	Approximate location from IP address	Yes	No
H. Professional Information	Contractor license numbers (as submitted by users)	Yes	No
K. Inferences	Compliance Index derived from public license records	Yes	No

We have not collected categories C (protected classifications), E (biometric), I (education), or J (non-public education) in the past 12 months.

3. Public Records vs. User Account Data

TradeProof processes two fundamentally different categories of data, which have different treatment under CCPA/CPRA:

• Public government records (contractor license data sourced from state licensing boards): This data is publicly available from government sources and is exempt from CCPA deletion rights under Cal. Civ. Code 1798.140(v)(2). We do not add non-public personal information (home addresses, Social Security numbers, etc.) to these records.
• User account data (your name, email, payment information, organization data): This data is subject to all CCPA/CPRA rights, including access, deletion, correction, and portability. You may exercise these rights at any time by contacting [email protected].

4. Compliance Index (Inferences)

TradeProof generates a proprietary "Compliance Index" -- an automated numerical estimate derived from publicly available government records. Under the CCPA/CPRA, this index constitutes an "inference" drawn from personal information (Cal. Civ. Code 1798.140(v)(1)(K)). You have the right to:

• Request disclosure of the Compliance Index and the data used to generate it
• Request deletion of the Compliance Index
• Request correction if the index reflects inaccurate underlying data

Deletion of the Compliance Index does not affect the underlying public license records, which remain available from government sources. To make a request, contact [email protected].

5. We Do Not Sell or Share Personal Information

6. Your California Privacy Rights

As a California resident, you have the right to:

• Know: Request what personal information we collect, use, disclose, and sell about you
• Delete: Request deletion of your personal information, subject to certain exceptions
• Correct (CPRA 2023): Request correction of inaccurate personal information that we maintain about you. To exercise this right, contact us at [email protected] with the specific information you believe is inaccurate and the corrected information. We will use commercially reasonable efforts to correct the information as directed, and will instruct any service providers or contractors that maintain the information to make the same correction.
• Opt-out of Sale/Sharing: We do not sell or share your data, so this right does not apply, but we honor all opt-out requests received
• Limit Sensitive PI Use: Request limitation on use of sensitive personal information (we do not use sensitive PI beyond what is necessary to provide the Service)
• Non-Discrimination: We will not discriminate against you for exercising any of these rights

7. How to Exercise Your Rights

You may submit a verifiable consumer request by:

• Emailing [email protected] with the subject line "CCPA Request"
• Including your full name and the email address associated with your TradeProof account

We will verify your identity by matching the information you provide against our account records. We will respond within 45 days, with one 45-day extension if needed (with notice).

8. Authorized Agents

You may designate an authorized agent to submit requests on your behalf. We require written authorization from you and will verify your identity directly.

9. Retention

We retain personal information as described in our Privacy Policy for as long as necessary to provide the Service, comply with legal obligations, and resolve disputes.

10. Financial Incentives

We offer a free tier of the Service. This is not a financial incentive for providing personal information -- the free tier has limited features compared to paid plans, and pricing reflects the value of additional features and usage capacity.

11. Contact for CCPA Inquiries