US state privacy

This document is not published yet.

We would rather say that than put up something that reads like a policy and is not one. A document like this has to be written by a solicitor: it is enforceable, and getting it wrong is worse than not having it.

Who asks for it

CCPA, CPRA and the state laws that followed them.

What it has to cover

A do-not-sell-or-share statement, and whether it is even applicable.
The request route, and the verification standard.
The categories disclosed in the preceding twelve months.

If this is blocking a decision, say so on the quote form. Meanwhile our sub-processors are listed in full, because that is a matter of fact rather than a legal opinion.