CCPA Notice - California Privacy Rights

California Privacy Notice (CCPA/CPRA)

Last updated: February 13, 2026

This notice supplements our Privacy Policy and provides California residents with additional disclosures required under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information from California residents:

Category	Examples	Business Purpose
Identifiers	Name, email, IP address, account ID	Account creation, service delivery
Personal information (Cal. Civ. Code 1798.80)	Name, address, phone number, date of birth	Data broker scanning and removal requests
Internet activity	Browsing history on our site, feature interactions	Service improvement, security
Commercial information	Subscription tier, payment history	Billing, service management
Inferences	Exposure risk score, broker match confidence	Service delivery, evidence generation

Sale and Sharing of Personal Information

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. This is central to our business model — we exist to remove your data from entities that profit from selling it.

Your Rights Under CCPA/CPRA

As a California resident, you have the right to:

Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collection, and the categories of third parties with whom we share it.
Right to Delete: Request deletion of the personal information we have collected from you, subject to certain exceptions (such as completing a transaction you requested or complying with legal obligations).
Right to Correct: Request correction of inaccurate personal information we maintain about you.
Right to Opt-Out of Sale/Sharing: Although we do not sell or share personal information, you may submit an opt-out request at any time and we will honor it.
Right to Limit Use of Sensitive Personal Information: You may request that we limit the use of sensitive personal information to only what is necessary to provide the Service.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. You will not receive different pricing or quality of service for exercising your rights.

How to Exercise Your Rights

You can submit a request to exercise your California privacy rights by:

Emailing privacy@locko.ai with the subject line "CCPA Request"
Using the privacy tools in your account settings dashboard
Contacting us through our contact form

We will verify your identity before processing your request. For account holders, we verify through your authenticated session. For non-account holders, we may request additional information to confirm your identity. We will respond to verifiable requests within 45 days, with a possible 45-day extension if necessary (with notice).

You may designate an authorized agent to submit a request on your behalf. The authorized agent must provide proof of your written authorization and verify their own identity.

Retention

We retain personal information only for as long as necessary to fulfill the purposes described in our Privacy Policy, or as required by law. When your subscription ends or you request deletion, we remove personal data within 30 days. Evidence artifacts are available for export for 30 days after account closure, then permanently deleted.

Contact for Questions

If you have questions about this CCPA Notice or your California privacy rights, contact us at privacy@locko.ai.