CCPA Privacy Notice

California Consumer Privacy Act

This California Consumer Privacy Act (CCPA) Notice supplements our Privacy Policy and applies to California residents. It describes the categories of personal information we collect, the purposes for which we use it, and the rights you have under California law.

1. Categories of Personal Information We Collect

In the preceding 12 months, we have collected the following categories of personal information from California residents:

• Identifiers — name, email address, unique user ID assigned by the platform
• Professional or employment information — job role, department, employer, shift records, availability
• Internet or other electronic network activity — browser type, pages visited, feature usage within the platform
• Geolocation data — approximate location used for geofence-based clock-in verification (if enabled by your employer)
• Inferences — reliability scores and burnout indices derived from platform activity

We do not collect sensitive personal information as defined by the CCPA (such as Social Security numbers, financial account numbers, or precise geolocation beyond what is necessary for geofence verification).

2. Sources of Personal Information

We collect personal information from the following sources:

• Directly from you when you register, set availability, or clock in/out
• Your employer (the organization that invited you to the platform)
• Automatically through your use of the platform (usage data, device information)

3. Purposes for Collecting Personal Information

We collect and use personal information for the following business purposes:

• Providing workforce scheduling, time-and-attendance, and real-time adherence services
• Generating AI-powered insights, forecasts, and reports for your organization
• Sending operational notifications (shift offers, schedule updates, alerts)
• Maintaining platform security and detecting fraudulent activity
• Complying with applicable legal obligations

4. Disclosure of Personal Information

We do not sell personal information. We do not share personal information with third parties for cross-context behavioral advertising.

In the preceding 12 months, we have disclosed personal information to the following categories of third parties for business purposes:

• Infrastructure and hosting providers (Supabase, Vercel)
• AI processing services (Anthropic — for generating recommendations and summaries)
• Email delivery services (Resend — for platform notifications and invites)
• Your employer and authorized managers within your workspace

5. Your Rights Under CCPA

As a California resident, you have the following rights:

• Right to Know — you may request that we disclose the specific pieces of personal information we have collected about you and the categories of sources, purposes, and third parties involved
• Right to Delete — you may request deletion of personal information we have collected about you, subject to certain exceptions
• Right to Correct — you may request correction of inaccurate personal information
• Right to Opt-Out of Sale/Sharing — we do not sell or share personal information, so this right is not applicable
• Right to Non-Discrimination — we will not discriminate against you for exercising your CCPA rights

6. How to Submit a Request

To exercise your CCPA rights, submit a verifiable consumer request by emailing us at support@splocket.com with the subject line "CCPA Request." We will respond within 45 days. We may need to verify your identity before processing your request.

You may designate an authorized agent to submit a request on your behalf. We may require written proof of the agent's authorization.

7. Contact

For California privacy inquiries, contact us at support@splocket.com.