Do Not Sell or Share My Personal Information

Effective Date: April 16, 2026 · Last Updated: April 16, 2026

Summary: AlecRae does not sell or share your personal information.

We are structurally a zero-data-broker business. We do not sell, rent, trade, or share personal information for cross-context behavioural advertising. This page documents your rights under California law and how to exercise them — even though, in our case, there is nothing to opt out of.

1. Your rights under the CCPA and CPRA

If you are a California resident, the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"), gives you the following rights in relation to your personal information:

• The right to know what personal information we collect, use, disclose and retain.

• The right to delete personal information we have collected about you.

• The right to correct inaccurate personal information.

• The right to opt out of the "sale" or "sharing" of your personal information.

• The right to limit the use and disclosure of sensitive personal information.

• The right to non-discrimination for exercising any of these rights.

• The right to appoint an authorised agent to submit requests on your behalf.

2. What we do (and do not) do with your personal information

AlecRae does not and has never:

• Sold personal information for monetary or other valuable consideration.

• Shared personal information for cross-context behavioural advertising.

• Allowed third-party advertising networks or data brokers inside the product.

• Used the content of your email to build advertising profiles.

• Trained external advertising or ad-tech AI models on your email content.

AlecRae does:

• Use subprocessors to deliver the service (see our Subprocessor list).

• Process your data inside our own AI pipelines so we can deliver the product you asked for.

• Respond to valid legal process when required by law.

Because of this architecture, there is nothing to "opt out" of — the default position for every user is already "do not sell, do not share". However, you may still file a request to have that position recorded against your account.

3. Global Privacy Control (GPC)

AlecRae honours the Global Privacy Control signal as a valid opt-out of "sale" and "sharing" under the CPRA. If your browser transmits a GPC signal, we will automatically record your opt-out preference the first time you load the site. You can verify GPC is active at globalprivacycontrol.org.

4. How to submit a request

To submit a "Do Not Sell or Share" request, a deletion request, a correction request or any other California rights request, email [email protected] with "CCPA Request" in the subject line, or use the in-product Privacy > California rights screen. We will:

• Confirm receipt within 10 business days.

• Verify your identity in a way that matches the sensitivity of the request.

• Respond within 45 calendar days (extendable once by 45 days with notice).

• Never charge a fee, unless the request is manifestly unfounded or excessive.

5. Authorised agents

You may designate an authorised agent to submit a request on your behalf. We will require written proof of the agent's authority (e.g., a signed permission or a power of attorney), plus identity verification of the consumer making the request.

6. Non-discrimination

We will never deny service, charge a different price, or provide a different level of quality because you exercised a privacy right.

7. Contact

AlecRae, Inc.

Attn: Privacy Team

548 Market Street, Suite 45000, San Francisco, CA 94104

[email protected] · [email protected]

Toll-free: 1-888-ALECRAE (available once activated)