California Privacy Rights
CCPA & CPRA Compliance Notice
This notice describes the privacy rights of California residents under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).
ProperPost does not sell your personal information. We do not share your data with third parties for monetary or other valuable consideration.
If you would like to opt-out of any future data sharing (should our practices change), you can submit a request using the button below.
Global Privacy Control (GPC)
ProperPost recognizes and honors the Global Privacy Control (GPC), a universal browser signal that communicates your preference not to have your personal information sold or shared.
What is GPC?
Global Privacy Control is a specification developed by privacy advocates that allows you to tell websites not to sell or share your personal information with a single browser setting, rather than having to opt-out on every site individually.
Learn more at GlobalPrivacyControl.org
How We Respond to GPC Signals
- We automatically detect when your browser sends a GPC signal
- We treat the signal as a valid opt-out request under CCPA/CPRA
- No personal information will be sold or shared with third parties
- The signal applies to your entire browsing session on our site
How to Enable GPC
Enable GPC in privacy-focused browsers:
- Brave Browser: GPC enabled by default
- DuckDuckGo: Privacy settings → Global Privacy Control
- Firefox: Install the GPC browser extension
- Chrome/Edge: Install the OptMeowt or GPC extension
Your California Privacy Rights
Right to Know
Request disclosure of what personal information we collect, use, disclose, and sell (if applicable). You can request this information for the preceding 12 months.
Right to Delete
Request deletion of personal information we have collected from you, subject to certain exceptions (e.g., legal obligations, fraud prevention).
Right to Correct
Request correction of inaccurate personal information we maintain about you.
Right to Opt-Out
Opt-out of the sale or sharing of your personal information. Note: We do not currently sell personal information.
Right to Non-Discrimination
Exercise your privacy rights without receiving discriminatory treatment, such as being denied goods or services.
Sensitive Personal Information
Under CPRA, California residents have the right to limit the use and disclosure of "sensitive personal information" to purposes necessary to provide requested services.
What We Collect:
ProperPost may collect the following sensitive information:
- Precise geolocation data (IP address)
- Account login credentials (encrypted)
We use this information only for essential service purposes: authentication, fraud prevention, and compliance with legal obligations.
If you wish to limit use of your sensitive personal information beyond these purposes, you may submit a request below.
Categories of Personal Information We Collect
| Category | Examples | Purpose |
|---|---|---|
| Identifiers | Name, email, phone, IP address | Process opt-out requests, provide services |
| Commercial Information | Communication preferences, opt-out history | Honor preferences, maintain compliance |
| Internet Activity | Browser type, pages visited, timestamps | Security, analytics, user experience |
| Geolocation Data | IP-based approximate location | Fraud prevention, compliance |
How to Exercise Your Rights
Questions about your privacy rights? Our privacy team is here to help.
Verification Process
To protect your privacy, we verify your identity before processing CCPA requests. The verification process may include:
- Confirming your phone number or email address
- Matching information in your request with records we maintain
- Requesting additional documentation for sensitive requests (e.g., deletion)
Our Response Timeline:
- • Initial acknowledgment within 10 days
- • Full response within 45 days (may extend to 90 days if complex)
- • You will be notified of any delays
Data Retention & Disclosure
How Long We Keep Your Data
- Opt-out requests: Indefinitely (CAN-SPAM and TSR compliance - to honor your preferences)
- Privacy request records: 3-5 years (state law compliance)
- Audit logs: 7 years (SOC 2, Fair Housing Act, and regulatory compliance)
- Communication records: 5-7 years (TSR and Fair Housing Act compliance)
- Marketing data: Deleted upon request or when no longer needed (FTC data minimization)
Note: Our retention periods comply with federal requirements (TSR, CAN-SPAM, Fair Housing Act), state privacy laws, and FTC guidance on data minimization. We balance legal defensibility with privacy protection.
Third-Party Disclosures
In the past 12 months, we have not sold or shared personal information with third parties. We may disclose information to:
- Service providers (hosting, security, analytics) under strict contracts
- Law enforcement when legally required
- Business successors in case of merger or acquisition