Universal rights (anyone, anywhere)
Regardless of where you live, you can ask us to:
- Access the personal information we hold about you.
- Correct inaccurate or incomplete information.
- Delete information we no longer need to retain for a legal or contractual reason.
- Export your data in a portable machine-readable format (JSON or CSV).
- Object to specific processing you believe is unjustified.
Send requests to privacy@cipherforces.com with enough detail for us to identify you (typically the email you used when ordering). We respond within 30 days (45 days for CCPA requests; we'll tell you if we need an extension).
California residents (CCPA / CPRA)
If you are a California resident, you have these additional rights under the CCPA as amended by the CPRA:
- Right to know the categories and specific pieces of personal information we've collected about you in the last 12 months.
- Right to delete personal information, subject to statutory exceptions (tax records, fraud prevention, etc.).
- Right to correct inaccurate personal information.
- Right to opt-out of the "sale" or "sharing" of personal information.
- Right to limit use of sensitive personal information.
- Right to non-discrimination — we will not deny service, charge different prices, or provide a different quality of service because you exercised a right.
Do we sell or share your personal information? We do not sell personal information for money. We "share" pseudonymous analytics data with Google Analytics only if you consent to the analytics cookie category. You can opt out at any time:
If your browser sends a Sec-GPC: 1 signal, we honor it as an opt-out without any additional action from you.
Authorized agents
A California resident may designate an authorized agent to submit requests on their behalf. Send a signed authorization to privacy@cipherforces.com. We may ask the agent to provide proof and may independently verify the underlying consumer's identity.
Notice at Collection (Cal. Civ. Code §1798.100(b))
Categories of personal information we collect:
- Identifiers (name, email, phone, address, truncated IP, license token).
- Commercial information (order history, subscription status).
- Internet or other electronic network activity (pages visited, interactions with tools — only if analytics cookies are accepted).
- Geolocation data (approximate city-level from IP, for tax and rate-limiting only).
- Professional or employment-related information (only if you enter it into the Resume Builder; stored only in your browser).
- Inferences drawn from the above (minimal; mostly for cart-abandonment recovery and analytics aggregates).
We do not collect sensitive personal information as defined by the CPRA (Social Security numbers, precise geolocation, etc.) unless you voluntarily provide it in a message to us. We do not use personal information to make automated decisions that produce legal or similarly significant effects.
Retention
See the Privacy Policy for per-category retention periods.
Other US state privacy laws
If you reside in Colorado, Connecticut, Utah, Virginia, Texas, Oregon, Montana, Delaware, New Hampshire, New Jersey, Iowa, Tennessee, Indiana, Minnesota, Maryland, Nebraska, Rhode Island, or Kentucky (state laws passed as of 2026), you have comparable rights of access, correction, deletion, portability, and opt-out. We honor requests the same way — email privacy@cipherforces.com.
European Union / United Kingdom (GDPR / UK GDPR)
You have the right to:
- Access your personal data (Art. 15).
- Rectify inaccurate data (Art. 16).
- Erase your data in certain circumstances (Art. 17).
- Restrict processing (Art. 18).
- Data portability (Art. 20).
- Object to processing based on legitimate interest (Art. 21).
- Withdraw consent at any time where processing is based on consent (Art. 7(3)).
- Lodge a complaint with your national supervisory authority.
Supervisory authority. For the UK, this is the Information Commissioner's Office. For EU Member States, see the EDPB directory.
EU representative. If you are in the EU/EEA and we process your personal data subject to GDPR, you may contact our EU representative (when designated) by emailing privacy@cipherforces.com with the subject "EU Representative Request." Below the Art. 27 threshold we do not currently have a designated representative; requests go directly to CipherForces.
Canada — including Quebec Law 25
Under PIPEDA (federal) and Quebec's Law 25, Canadian residents can request access, correction, and withdrawal of consent, and may ask to be notified of automated decision making that significantly affects them. Quebec residents additionally have the right to data portability and may request that we cease sharing their information with sub-processors in specific cases.
Contact privacy@cipherforces.com with "Law 25 request" in the subject for Quebec-specific requests.
Other regions
We handle requests from residents of Australia (Privacy Act), Brazil (LGPD), Japan (APPI), Switzerland (nFADP), South Africa (POPIA), and other jurisdictions on the same email channel. We aim for the strictest applicable standard in every case.
Identity verification
To protect you from someone else impersonating you, we may ask you to confirm details of a recent order or respond from the email on file. We don't require you to create an account or send ID documents.
Contact
Privacy team: privacy@cipherforces.com.
Postal: CipherForces, Glendale, CA, USA (full address on request).