1. Categories of personal information we collect and process

As described in our Privacy Policy, one or more of the following categories of personal information may be processed by us or our affiliated companies:

• Identifiers (such as email address, physical address, and phone number)
• Online identifiers (such as cookies and IP address)
• Online and network activity (such as clicks, page views, and interactions with us online)
• Device and operating system information (such as type, version, and model)
• Installation reports (such as installation type and timestamp)
• Product usage information (such as activity logs)
• Payment and billing information
• Marketing and advertising information (such as clicks, campaign metrics, and referrer URLs)
• Customer support and customer relationship information (such as tickets, subject matter, and status)
• Sign-up, registration, and account management information
• Subscription information
• Analytics and business intelligence information

For more details about the elements in each category, please refer to our Privacy Policy.

2. How we may share personal information

• As a rule, we do not sell your personal information for monetary consideration. We may use advertising and analytics services that could, under California law, be considered “sharing” personal information for cross-context behavioral advertising.
• We may share your personal information with third parties for business purposes, including with our affiliated companies. When we do so, we enter into agreements requiring recipients to keep the information confidential and to use it only for the purposes for which it was disclosed.
• In the preceding twelve (12) months, we may have shared the following categories of personal information for business purposes:

3. Consumer privacy rights (CPRA)

Under the CPRA, you may exercise the following rights:

Access and data portability. You may request access to certain information we have collected about you during the past 12 months. You may also ask us to provide that information in a portable and, where technically feasible, readily usable format, subject to applicable exemptions. If you have an account with us, you may be able to exercise certain rights directly through your account, or you may submit a request by emailing dpo@mysoftware13.com. Upon receipt of your verifiable request, and provided no exception applies, we will process the requested information.

The right to access may include the following information for the preceding 12 months:

• The categories of personal information we collected about you
• The categories of sources from which the personal information was collected
• Our business or commercial purposes for collecting, selling, or sharing that personal information
• The categories of third parties with whom we disclose that personal information
• The specific pieces of personal information we collected about you
• Whether we sold or shared your personal information and, if so, the categories involved

You may only make a request for access or data portability twice within a 12-month period.

Delete personal information. You have the right to request deletion of personal information we retain about you, subject to certain exceptions. If applicable, once we receive and confirm your verifiable consumer request, we will delete your personal information from our records and direct our service providers to do the same, unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service providers to:

• Complete the transaction for which we collected the personal information, provide a good or service you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities
• Debug products to identify and repair errors that impair existing intended functionality
• Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law
• Comply with applicable legal obligations
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to applicable laws and ethics, where deletion may impair the research
• Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us
• Make other lawful uses of that information that are compatible with the context in which you provided it

Rectify personal information. You have the right to request correction of inaccurate personal information we hold about you. Where applicable, we will use commercially reasonable efforts to correct such information.

Opt-out of sharing. We do not sell personal information for monetary consideration. However, we may share certain information for advertising and analytics purposes. You may opt out of such sharing by contacting us at dpo@mysoftware13.com.

4. Exercising your rights and choices

• You may exercise your rights by contacting us at dpo@mysoftware13.com
• A verifiable consumer request must provide sufficient information to allow us to verify your identity and understand your request
• We will only use personal information provided in a request to verify your identity or authority to make the request

5. Response timing and format

• We aim to respond within 45 days of receiving a verifiable request
• If additional time is required (up to 90 days), we will inform you of the reason and extension period
• Responses will cover the 12-month period preceding the request
• We do not charge a fee unless requests are excessive, repetitive, or unfounded

6. Non-discrimination

We will not discriminate against you for exercising any of your CPRA rights. Unless permitted by law, we will not:

• Deny you goods or services
• Charge different prices or rates
• Provide a different level or quality of goods or services
• Suggest you may receive different treatment for exercising your rights

7. Do Not Track signals (CalOPPA)

Do Not Track (DNT) is a browser setting that signals websites you visit that you do not want certain information collected. We do not currently respond to DNT signals.

8. Changes to this privacy statement

We reserve the right to amend this notice at any time. Updates will be communicated as required by applicable law.

9. Contact information

If you have any questions about this notice or your privacy rights, please contact us at dpo@mysoftware13.com.