Auto-generated multi-state compliant privacy policy based on your assessment results. Review, edit, and export when ready.
**Last Updated: May 13, 2026**
**Effective Date: May 13, 2026**
This privacy policy ("Policy") describes how Acme Corp ("Company," "we," "us," or "our") collects, uses, discloses, and otherwise processes personal information in connection with our websites, mobile applications, and other online services that link to this Policy (collectively, the "Services"), as well as offline activities.
This Policy has been designed to comply with the privacy laws of the following U.S. states: California (CCPA/CPRA), Texas (TDPSA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Oregon (OCDPA), New Jersey (NJDPA), and Delaware (DPDPA).
We collect personal information you voluntarily provide when you:
Categories of personal information collected include:
When you use our Services, we automatically collect:
We may receive personal information from:
We use personal information for the following purposes:
We may share personal information with:
Third parties that perform services on our behalf (e.g., hosting, payment processing, analytics, customer support). These providers are contractually obligated to use personal information only as directed by us.
With your consent or as necessary to provide co-branded services or joint offerings.
When required by law, regulation, legal process, or governmental request, or to protect our rights, privacy, safety, or property.
In connection with a merger, acquisition, reorganization, or sale of assets, subject to standard confidentiality requirements.
We do not sell personal information as defined by the CCPA/CPRA, TDPSA, VCDPA, CPA, CTDPA, or other applicable state privacy laws.
Depending on your state of residence, you may have the following rights:
You have the right to request information about the categories and specific pieces of personal information we have collected about you.
Available in: California, Texas, Virginia, Colorado, Connecticut, Oregon, New Jersey, Delaware
You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
Available in: California, Texas, Virginia, Colorado, Connecticut, Oregon, New Jersey, Delaware
You have the right to request correction of inaccurate personal information.
Available in: California, Texas, Virginia, Colorado, Connecticut, Oregon, New Jersey, Delaware
You have the right to receive your personal information in a portable, readily usable format.
Available in: California, Texas, Virginia, Colorado, Connecticut, Oregon, New Jersey, Delaware
You have the right to opt out of:
We will not discriminate against you for exercising any of your privacy rights.
Available in: All applicable states
We honor Global Privacy Control (GPC) signals as a valid opt-out request for the sale/sharing of personal information and targeted advertising, as required by California (CCPA/CPRA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), Montana (MCDPA), Oregon (OCDPA), New Jersey (NJDPA), and Delaware (DPDPA).
To exercise any of the rights described above, you may:
We will verify your identity before processing your request. You may designate an authorized agent to make a request on your behalf.
Response Timeframes:
Appeals: If we deny your request, you have the right to appeal. We will respond to appeals within the timeframe required by applicable law.
We process the following categories of sensitive personal information only with your explicit consent or as otherwise permitted by applicable law:
California Residents: You have the right to limit our use of sensitive personal information to purposes necessary to provide the Services.
Oregon Residents: Sensitive data includes data revealing transgender status or status as a victim of crime.
Our Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
For users aged 13-16: We obtain opt-in consent before selling or sharing personal information of consumers we know are between 13 and 16 years of age (California) or under 18 years of age (applicable states with enhanced minor protections).
We retain personal information for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law.
We implement appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction.
We may update this Policy from time to time. We will notify you of material changes by posting the updated Policy on our website and updating the "Last Updated" date.
If you have questions about this Policy or our privacy practices, please contact us: