Legal

U.S. State Privacy Rights & Do Not Sell or Share Notice

Last updated: August 18, 2026

This notice supplements our Privacy Policy and describes the rights available to residents of U.S. states with comprehensive privacy laws, including California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon, Montana, and others, together with how to exercise those rights.

1. Your Rights

Subject to your state’s law and to verification, you may have the right to:

Know / Access — request the categories and specific pieces of personal information we have collected about you.
Delete — request deletion of personal information we hold about you.
Correct — request correction of inaccurate personal information.
Portability — obtain a copy of your personal information in a portable format.
Opt out of sale or sharing — opt out of the “sale” or “sharing” of your personal information and of targeted advertising.
Limit sensitive information — where applicable, limit the use and disclosure of sensitive personal information.
Non-discrimination — not receive discriminatory treatment for exercising your rights.
Appeal — where your state provides it, appeal a decision on your request.

2. Do Not Sell or Share My Personal Information

Because our identity resolution Services match online identifiers to contact and firmographic information and make that information available to our customers, some of that activity may constitute a “sale” or “sharing” of personal information under state law. You may opt out at any time by:

Emailing [email protected] with the subject line “Do Not Sell or Share,” or
Enabling the Global Privacy Control (GPC) in a supported browser or extension. When we detect a GPC signal from your browser, we treat it as a valid request to opt out of sale/sharing for that browser and device.

3. How to Submit a Request

To submit an access, deletion, correction, or portability request, email [email protected] and include enough information for us to locate and verify your records (for example, the email address, name, or identifiers associated with you). We will take steps to verify your identity before responding and will respond within the timeframe required by your state’s law.

Because much of the visitor data we process is collected on behalf of our business customers, we may need to refer certain requests to, or coordinate with, the customer whose website collected the data.

4. Authorized Agents

You may use an authorized agent to submit a request on your behalf. We may require the agent to provide proof of authorization and may require you to verify your identity directly.

5. Categories of Information and Recipients

The categories of personal information we collect, the sources, the purposes for which we use them, and the categories of recipients to whom we disclose them are described in our Privacy Policy. We do not knowingly sell or share the personal information of individuals under 16 years of age.

6. Contact

For questions about your privacy rights, contact [email protected], or write to Granularity, Inc., [insert registered business mailing address].