Do Not Sell or Share My Personal Information
California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA)
1. We do not sell your data
BillSlash does not sell personal information to third parties for monetary or other valuable consideration. We do not "share" personal information for cross-context behavioral advertising as defined by the CPRA. We act as a Service Provider under the CCPA/CPRA, which means we process data only for the business purposes defined by your subscription and our contracts with you.
2. What "selling" and "sharing" mean under CCPA/CPRA
Under California law, "selling" includes disclosing personal information to a third party for value. "Sharing" includes disclosing personal information for cross-context behavioral advertising. We do neither. Our subprocessors (hosting, AI providers, payment processors, financial integrators) receive data only to perform services on our behalf under strict contractual data-protection terms.
3. Your CCPA/CPRA rights
If you are a California resident, you have the right to:• Know what categories of personal information we collect and how we use it. See our Privacy Policy.• Delete your personal information, subject to legal and financial-record retention obligations.• Correct inaccurate personal information.• Opt out of "selling" or "sharing" — which, in our case, is already not occurring.• Limit use of sensitive personal information to what is necessary to provide the Service.• Non-discrimination. We will not discriminate against you for exercising these rights.
4. How to exercise your rights
Submit a request by emailing privacy@billslash.app with the subject line "CCPA Request." Include:• Your full name and email address associated with your account.• The workspace / company name.• The right you wish to exercise (know, delete, correct, opt out, limit).• A description to help us locate your data.
5. Verification
For security, we will verify your identity before fulfilling a request. We may ask for additional information or use the email-verification method tied to your account. We aim to respond within 45 days; if we need more time, we will notify you.
6. Authorized agents
You may designate an authorized agent to submit requests on your behalf. The agent must provide signed written permission, and we may require you to verify your identity directly with us.
7. Third-party financial data
When you connect a bank account via Plaid, Plaid is a separate service provider. Plaid's privacy practices are governed by its own policies. You can review Plaid's practices at the Plaid End User Privacy Policy.
8. Contact
privacy@billslash.app · BillSlash Data Protection