CCPA Privacy Notice

1. Categories of personal information

The personal information collected in connection with the service includes:

• Identifiers: your name and email address at signup, and IP addresses in traffic logs. These logs do not store device details.
• Customer-provided information: campaign settings, URLs, and information you choose to include in support messages.
• Commercial information: information associated with service subscriptions and payments, where applicable.
• Website activity: We use Google Analytics to understand website activity. It can involve online identifiers and usage information separately from IP traffic logs. The website also includes Google Tag Manager.

Do not send passwords, full payment-card details, or unrelated sensitive information to support.

2. Sources and business purposes

Information can come from you, website interactions, traffic passing through configured campaigns, or a customer operating a campaign. Relevant purposes include administering accounts and subscriptions, providing campaign reporting and filtering, investigating abuse, responding to support requests, understanding website use, and meeting legal obligations. A customer's use of TrafficSaviour on its own website is also subject to that customer's notices and responsibilities.

3. Disclosures and retention

We use Hostinger for hosting and PayPal and Dodo Payments for payment processing. These providers receive information relevant to the services they perform. Payment providers may also process information under their own privacy notices and legal obligations.

Our general policy describes disclosures to service providers supporting hosting, payments, communications, and analytics, and disclosures required for legal or security reasons. Authorised account users may be able to view campaign reports. External partner websites have their own privacy practices.

We retain each IP traffic log for 30 calendar days from the date it is recorded, then delete it. Account information needed to provide the service is retained while the account is active. We delete that account information within 30 calendar days after account closure or receipt of a verified account-deletion request, whichever occurs first. A deletion request can also cover specified personal information without closing the account. These periods do not extend any shorter deadline required by applicable law. You can request deletion of your account and associated personal information at [email protected], subject to applicable legal exceptions. Payment providers may retain their own transaction records under their privacy notices and legal obligations. Contact us about retention of other records.

4. Sale, sharing, and privacy preferences

We do not sell personal information. We do not use Meta Pixel. California law separately regulates sharing for cross-context behavioural advertising. We use Google Analytics to understand website activity, and the website includes Google Tag Manager; the classification of disclosures through these tools depends on their configuration and the recipient's use. See our Cookie Policy for information about these tools and browser controls. The website does not currently provide an Accept/Reject cookie consent banner.

To request information about disclosures affecting you or to submit a sale/sharing opt-out request, email [email protected] with "Do not sell or share my personal information" in the subject. You can also use this address to request limits on sensitive-information uses where that right applies.

Global Privacy Control (GPC) is a browser signal that communicates an opt-out preference. Covered businesses that sell or share information must process applicable opt-out preference signals. A cookie deletion or general Do Not Track setting is not necessarily equivalent to a GPC signal or an opt-out request.

5. California privacy rights

Where the CCPA applies, you may have the right to:

• Know the categories and specific pieces of personal information collected about you, its sources, purposes, and relevant recipient categories.
• Request deletion of personal information, subject to legal exceptions.
• Correct inaccurate personal information.
• Opt out of covered sales and sharing of personal information.
• Limit certain uses and disclosures of sensitive personal information.
• Exercise your rights without unlawful discrimination.

A request to know can include information about collection and disclosures during the preceding 12 months, and an eligible longer period where the law requires. Exceptions can apply, including to records needed for security, legal obligations, or other permitted purposes.

6. Submit a privacy request

Email [email protected] with "California privacy request" in the subject. Describe your request and include the email associated with your account, if any. An account is not required to submit a request. If the request concerns a customer's campaign, include the website address and approximate visit date. The customer may need to respond where it controls the information.

For access, correction, or deletion, proportionate identity verification may be needed to protect your information. An authorised agent may submit a request; evidence of authority and, where permitted, confirmation of identity or permission may be requested. A sale/sharing opt-out is not subject to the same identity-verification requirements as an access request.

7. Response times and further help

For covered requests to know, delete, or correct, the CCPA generally requires a substantive response within 45 calendar days. A permitted extension of up to a further 45 days requires notice and an explanation. Opt-out requests follow separate, shorter deadlines. Requests are generally handled without a fee, subject to the law's exceptions.

If you have a concern about a response, reply to the privacy contact so it can be reviewed. You can learn more about your rights through the California Attorney General or contact the California Privacy Protection Agency.

8. Related policies and updates

Read our U.S. Privacy Policy, Privacy Policy, and Cookie Policy for related information. The date above identifies the latest revision of this notice. Contact [email protected] if you need an accessible copy.