Effective date: 2026-05-18.
This Notice supplements our Privacy Policy and applies to California residents whose Personal Information ("PI") is processed by wrxstack as a business under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the "CCPA"). Where wrxstack processes PI on behalf of a corporate customer (as a "service provider"), that customer's own privacy notices apply.
1. Categories of PI we collect
In the last 12 months we have collected the following CCPA categories of PI:
| CCPA Category (Cal. Civ. Code § 1798.140(v)) | Examples | Collected? |
|---|---|---|
| A. Identifiers | Name, email, employer, IP address, account ID | Yes |
| B. Customer records (§ 1798.80(e)) | Billing contact, phone | Yes |
| C. Protected classifications | None | No |
| D. Commercial information | Subscription history, support tickets | Yes |
| E. Biometric information | None | No |
| F. Internet / network activity | Page views, feature usage, device and browser metadata | Yes |
| G. Geolocation (general) | Approximate city/region derived from IP | Yes |
| H. Sensory information | None (meeting recordings are Customer Content under the corporate customer's control) | No |
| I. Professional / employment | Job title, employer name | Yes |
| J. Education information | None | No |
| K. Inferences | Aggregate usage-based product-fit inferences (no profiling for automated decision-making with legal effect) | Yes |
| L. Sensitive PI | Login credentials are collected as Sensitive PI for security purposes only; we do not use them to infer characteristics | Limited |
2. Sales and sharing of PI
We do not "sell" PI and we do not "share" PI for cross-context behavioral advertising as those terms are defined in the CCPA. We have not sold or shared PI in the last 12 months, and we do not sell or share PI of any consumer under 16.
3. Sources of PI
We collect PI directly from you, from administrators of the corporate customer that authorizes your account, from your browser or device, and from third-party integrations you enable.
4. Business and commercial purposes
We use PI to provide and improve the Services, secure them, process billing, communicate with you, comply with law, and conduct B2B marketing. See Section 3 of our Privacy Policy for detail.
5. Recipients
We disclose PI to sub-processors that help us provide the Services. The current list is at /legal/subprocessors. We also disclose PI to professional advisors, in corporate transactions, and to authorities as required by law.
6. Retention
We retain each category of PI for as long as is reasonably necessary for the purpose for which it was collected, to provide the Services, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. Specific periods are summarized in our DPA Annex II.
7. Your rights
California residents have the right to:
- Know, request information about the categories and specific pieces of PI we have collected about you, the sources, purposes, and recipients;
- Delete, request that we delete PI we have collected from you, subject to statutory exceptions;
- Correct, request that we correct inaccurate PI;
- Opt out of sale or sharing, not applicable to wrxstack because we do not sell or share PI;
- Limit use of Sensitive PI, restrict use beyond the purposes permitted by § 1798.121;
- Non-discrimination, exercise your rights without facing different pricing, quality, or service levels.
8. How to exercise your rights
Submit a verifiable request:
- By email: contact@wrxstack.com with subject "California Privacy Request";
- By web form: at /contact#privacy.
We will confirm receipt within 10 business days and respond within 45 days, extendable once by an additional 45 days where reasonably necessary. We may need to verify your identity using information already on file or a signed declaration under penalty of perjury.
9. Authorized agents
You may designate an authorized agent to act on your behalf. The agent must provide a written, signed authorization, and we may require you to verify your identity directly or confirm that you have authorized the agent.
10. Children
The Services are intended for users aged 16 and over. We do not knowingly collect PI from children under 16. If you believe a child has provided PI, contact contact@wrxstack.com and we will delete it.
11. Notice at collection
At or before the point of collection we provide a notice describing the categories of PI we collect and the purposes for which we use them. Sections 1 and 4 of this Notice constitute the notice at collection.
12. Shine the Light
California Civil Code § 1798.83 permits California residents to request information regarding our disclosure of PI to third parties for those third parties' direct-marketing purposes. We do not disclose PI to third parties for their direct-marketing purposes.
13. Contact
For questions about this Notice, contact contact@wrxstack.com.