State & Regional Privacy Rights Notice
Last updated:
1.Scope of This Notice
This State & Regional Privacy Rights Notice supplements our Privacy Policy with rights and disclosures specific to U.S. state privacy laws. Where this notice conflicts with the Privacy Policy for residents of a covered state, this notice controls for those residents.
2.Rights by Jurisdiction
| State | Law | Your rights |
|---|---|---|
| California | CCPA / CPRA | Know, access, delete, correct, portability, opt out of sale/sharing, limit use of sensitive personal information, non-retaliation, authorized-agent requests. |
| Virginia | VCDPA | Access, correct, delete, portability, opt out of targeted advertising, sale, and profiling with legal effects. Appeal rights. |
| Colorado | CPA | Access, correct, delete, portability, opt out of targeted advertising, sale, and profiling. Universal opt-out signal honored. |
| Connecticut | CTDPA | Access, correct, delete, portability, opt out of targeted advertising, sale, and profiling. Universal opt-out signal honored. |
| Utah | UCPA | Access, delete, portability, opt out of targeted advertising and sale. |
| Oregon | OCPA | Access (including a list of specific third parties), correct, delete, portability, opt out of targeted advertising, sale, and profiling. |
| Texas | TDPSA | Access, correct, delete, portability, opt out of targeted advertising, sale, and profiling. Sensitive-data consent required. |
| Delaware | DPDPA | Access, correct, delete, portability, list of third-party categories, opt out of targeted advertising, sale, and profiling. |
| Montana | MCDPA | Access, correct, delete, portability, opt out of targeted advertising, sale, and profiling. |
| Minnesota | MCDPA (MN) | Access, correct, delete, portability, opt out, plus the right to question the result of profiling. |
| Nebraska | NDPA | Access, correct, delete, portability, opt out of targeted advertising, sale, and profiling. |
| New Hampshire | NHPA | Access, correct, delete, portability, opt out of targeted advertising, sale, and profiling. |
| New Jersey | NJDPA | Access, correct, delete, portability, opt out of targeted advertising, sale, and profiling. Consent for sensitive data. |
| Maryland | MODPA | Access, correct, delete, portability, opt out. Strict limits on sale of sensitive data. |
| Washington | My Health My Data Act | Consent for collection and sharing of consumer health data, right to withdraw consent, right to deletion. Private right of action. |
| Illinois | BIPA | Written notice and consent before biometric collection, published retention schedule, private right of action. |
| Nevada | SB 220 / SB 370 | Opt out of the sale of covered information; limits on sale of consumer health data. |
3.Sensitive Personal Information
We collect the following categories that state laws treat as sensitive:
- Government identifiers and identity-document data — to verify one unique human per account.
- Biometric identifiers — see the Biometric Privacy Notice.
- Precise geolocation — to enforce U.S.-only participation and detect circumvention.
- Political opinions inferred from poll responses — used only in aggregate, never sold or attributed to an identified individual.
We use sensitive personal information only for the purposes permitted under CPRA § 1798.121 and analogous state provisions: providing the service, verifying identity, ensuring security and integrity, and preventing fraud. You may direct us to limit its use to those purposes.
4.No Sale or Sharing; No Targeted Advertising
PolitiMind does not sell personal information and does not share it for cross-context behavioral advertising. We do not conduct targeted advertising against participant data, and we do not sell or license participant-level responses to campaigns, PACs, media, or advocacy organizations. Commercial customers receive aggregate, de-identified analytics only.
Because analytics cookies could be construed as "sharing" under some state definitions, we honor the Global Privacy Control browser signal as a valid opt-out and provide a Do Not Sell or Share request path regardless.
5.Profiling & Automated Decisions
We use automated processing to match participants to relevant polls and to compute typology and integrity scores. These do not produce legal or similarly significant effects. No automated decision denies you a good, service, or right. Residents of states granting profiling opt-outs may exercise them through the request form below; Minnesota residents may additionally request an explanation of a profiling result.
6.How to Exercise Your Rights
- Submit a request via the Data Rights Request form, or email chris@politimind.com.
- Enable Global Privacy Control in your browser, which we treat as a standing opt-out signal.
- Authorized agents may submit on your behalf with written permission; we may verify directly with you.
Verification: we verify requests against information already associated with your account. We will not create new identity records solely to process a request.
Timing: acknowledged within 10 business days and substantively answered within 45 calendar days, extendable once by an additional 45 days with notice.
7.Appeals
If we decline a request, you may appeal within 60 days by replying to our decision or emailing chris@politimind.com with the subject line "Privacy Appeal." We will respond in writing within 45 days with our reasoning. If the appeal is denied, you may contact your state Attorney General.
8.Minors
PolitiMind is not directed to individuals under 18 and we do not knowingly collect their data. We do not sell or share the personal information of consumers under 16.
9.Annual Request Metrics
California requires businesses meeting certain thresholds to publish annual request metrics. PolitiMind publishes request volumes and median response times for the prior calendar year once the platform reaches general availability; metrics for the current period are not yet available.