Do Not Sell or Share My Personal Information

This page explains your rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA"), and the analogous rights granted by the Virginia Consumer Data Protection Act ("VCDPA"), the Colorado Privacy Act ("CPA"), the Connecticut Data Privacy Act ("CTDPA"), the Utah Consumer Privacy Act ("UCPA"), and other US state privacy laws — and how to exercise them at PaxLabs Inc.

1. Summary (30 seconds)

• PaxLabs does not sell personal information for money.
• PaxLabs does not share personal information for cross-context behavioural advertising.
• PaxLabs does not use sensitive personal information for purposes that require you to opt out.
• You can still submit an opt-out, access, correction, or deletion request below. We will confirm receipt and respond within the statutory time frame.

2. Who this applies to

This page applies to any natural person who is a resident of a US state whose privacy law grants the rights discussed here. Those laws apply irrespective of your dealings with us — whether you visit our sites, email us, or appear in our business records.

3. What "sell" and "share" mean

Under the CCPA/CPRA, "sell" means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating personal information to a third party for monetary or other valuable consideration. "Share" means disclosing personal information to a third party for cross-context behavioural advertising.

Other state laws use substantially similar definitions, sometimes under different terminology ("target advertising", "profiling", etc.).

4. Our position

In the last twelve months, PaxLabs has not sold personal information and has not shared personal information for cross-context behavioural advertising.

We do not operate an advertising business. We do not embed tracking pixels for ad networks. We do not participate in real-time bidding. We do not transfer personal information to data brokers.

If this changes, we will update this page at least thirty (30) days before any such activity commences, and present a clear opt-out mechanism.

5. Categories of information

Categories of personal information PaxLabs collects — expressed in the terminology of the CCPA/CPRA:

• Identifiers. Name, email address, IP address, account alias (if any), device identifiers derived from log data.
• Customer records. Contact details submitted in correspondence or applications.
• Professional information. Employment history, education, portfolio, where voluntarily submitted.
• Internet activity. Pages viewed on our sites, referer data, and similar log data.
• Inferences. Limited inferences drawn from the above solely for the purposes listed below.

We do not collect: precise geolocation, biometric identifiers, genetic information, contents of private communications to which we are not a party, citizenship, immigration status, financial account numbers, debit or credit card numbers, or medical information.

6. Sources of information

We collect personal information from the following sources:

• Directly from you — when you email us, submit a form, or correspond with us in any channel;
• Automatically — from your device and browser when you visit our websites, to the extent described in our Cookie Policy;
• From our service providers — acting on our behalf.

7. Business purposes

We use personal information only for the following business purposes:

1. Responding to your communications;
2. Evaluating applications and correspondence;
3. Operating and securing our websites;
4. Detecting and preventing fraud, abuse, and unauthorised access;
5. Complying with legal obligations and defending legal claims;
6. Aggregated, de-identified analysis of site usage.

8. Sensitive personal information

We do not intentionally collect sensitive personal information as defined in the CCPA/CPRA (such as government identifiers, account credentials, or precise geolocation). If you voluntarily include sensitive information in an email to us, we use it solely for the purpose for which you submitted it.

9. Your rights

Depending on your state of residence, you may have the right to:

• Know what personal information we collect, use, and disclose, and to receive a portable copy;
• Correct inaccurate personal information;
• Delete personal information, subject to legal retention obligations;
• Opt out of the sale or sharing of personal information — as noted, we do not sell or share;
• Opt out of targeted advertising and certain profiling — we do not engage in either;
• Limit use of sensitive personal information — we do not use it for purposes that would require a limit;
• Appeal a denial of a rights request, where provided by state law.

10. How to exercise them

Submit a request by one of the following methods:

• Email: Send a message to privacy@paxlabs.inc with the subject line State Privacy Request. Include your request type (access, correction, deletion, opt-out), your state of residence, and enough context for us to identify you in our records.
• Global Privacy Control: If your browser sends a GPC signal, we treat it as an opt-out of sale and sharing for that session, and record a corresponding preference cookie against the browser on subsequent visits.

11. Verification

To protect your information, we must verify that the person submitting a request is actually the subject of the request (or that subject's authorised agent). We do this by matching your request against information we already hold — including the email address associated with the request — and may request additional information when we cannot verify on the basis of what we already have.

We will not use information you provide for verification for any purpose other than verification and will delete it once the request is resolved.

12. Authorised agents

You may designate an authorised agent to submit a request on your behalf. We require the agent to provide written permission signed by you, and may separately request your verification of the agent's authority — except where the agent has provided a valid power of attorney under applicable state law.

13. Response times

• We acknowledge receipt of all requests within ten (10) business days.
• We respond substantively within forty-five (45) calendar days, extendable once by an additional forty-five (45) days where reasonably necessary, with notice of the extension.
• If we deny a request, we explain why in writing.

14. Non-discrimination

We will not discriminate against you for exercising any right under state privacy laws. We do not offer financial incentives in exchange for personal information. The quality or availability of our services does not change based on whether you exercise your rights.

15. Contact

PaxLabs Privacy Desk — privacy@paxlabs.inc.

If you believe we have failed to respond adequately to your request, you may contact the attorney general of your state or your state's equivalent privacy regulator.