US State Privacy Rights Notice
US State Privacy Rights Notice
Effective date: July 24, 2026 Version: 1.0
This US State Privacy Rights Notice supplements the SEOverts Privacy Policy and describes the rights of U.S. residents under state privacy laws with respect to personal data that Meerkat 9000 LLC ("Company," "SEOverts," "we," "us") processes as a business/controller (Customer and Member account data). For personal data we process on behalf of a Customer (personal data within Integration Data retrieved from connected third-party accounts), the Customer is the controller/business and is the appropriate party to handle requests; we act as a service provider/processor and will assist the Customer as described in our DPA.
Positioning note. The Service is intended for business users in the United States and is not directed to residents of the State of California. Nonetheless, where California or other state privacy laws apply to you, we honor the applicable rights described in this Notice.
1. Categories of Personal Information We Collect, Use, and Disclose
Over the preceding 12 months, as a business/controller, we have collected the following categories of personal information (as defined by the California Consumer Privacy Act, as amended by the CPRA, together "CCPA"):
| CCPA category | Examples | Collected | Disclosed for a business purpose |
|---|---|---|---|
| Identifiers | Name, email, account ID, IP address | Yes | Yes (to service providers) |
| Customer records (Cal. Civ. Code § 1798.80) | Business contact and billing details | Yes | Yes (to service providers) |
| Commercial information | Subscriptions, Credit usage, transactions, plan history | Yes | Yes (to service providers) |
| Internet/network activity | Usage, log, and device data | Yes | Yes (to service providers) |
| Geolocation | Coarse location inferred from IP | Yes | Yes (to service providers) |
| Professional/employment information | Role, organization affiliation | Yes | Yes (to service providers) |
| Inferences | Limited product-usage inferences | Yes | Yes (to service providers) |
| Sensitive personal information | Account log-in credentials; OAuth tokens for connected Integrations | Yes | Used only as necessary to provide the Service; not used to infer characteristics |
We collect this information from you, your use of the Service, and our service providers. SEO and ads metrics (rankings, backlinks, audits, campaign performance) are primarily information about websites and campaigns rather than individuals. We use personal information for the purposes described in the Privacy Policy, including to provide, secure, and improve the Service, process billing, communicate, and comply with law. Data obtained from Google APIs is used only as permitted by the Google API Services User Data Policy, including its Limited Use requirements.
2. Sale and Sharing of Personal Information
We do not sell personal information for monetary consideration. However, if you enable or consent to optional advertising and measurement tags on our website (such as Google Ads signals or the Meta Pixel), that activity may be considered a "sale" or "sharing" for cross-context behavioral advertising under the CCPA and similar laws. Our first-party analytics (Plausible) are cookieless and not used for cross-context behavioral advertising.
You, whether a Customer or a Member, can opt out of any such "sale"/"sharing" as described in Section 4.
We do not knowingly sell or share the personal information of individuals under 16.
3. Sensitive Personal Information
The only "sensitive personal information" we process as a business is account log-in credentials and the OAuth tokens for Integrations you connect, used solely to provide and secure the Service (tokens are encrypted at rest and deleted when you disconnect the Integration). We do not use or disclose sensitive personal information for purposes that would trigger the Right to Limit the use of sensitive PI; nonetheless, where the right applies, we honor it (Section 5).
4. Right to Opt Out of Sale/Sharing; "Do Not Sell or Share"; GPC
You have the right to opt out of the sale or sharing of your personal information. To exercise it:
- Use the "Do Not Sell or Share My Personal Information" link/control available on our website and in Cookie Settings; and/or
- Decline or withdraw consent to optional advertising cookies in the cookie banner.
Global Privacy Control (GPC). We recognize and honor the Global Privacy Control (GPC) and other recognized universal opt-out mechanisms as a valid request to opt out of sale/sharing for the browser or device transmitting the signal. Where you are logged in, we will apply the signal to your account where feasible.
5. Rights to Know, Delete, Correct, and Limit
Subject to applicable law and verification, you have the right to:
- Know/Access: the categories and specific pieces of personal information we have collected, the sources, the business/commercial purposes, and the categories of third parties to whom we disclose it.
- Delete: request deletion of personal information we collected from you, subject to legal exceptions.
- Correct: request correction of inaccurate personal information.
- Limit: limit the use and disclosure of sensitive personal information (to the extent applicable).
- Opt out of sale/sharing (Section 4).
6. Non-Discrimination
We will not discriminate against you for exercising your privacy rights, including by denying the Service, charging different prices, or providing a different level or quality of Service, except as permitted by law.
7. How to Submit a Request; Verification; Authorized Agents
- Submit a request by emailing privacy@getseoverts.com (or by using the controls on our website). Please tell us which right you wish to exercise and provide enough information for us to locate and verify your record.
- Verification. To protect your information, we will take reasonable steps to verify your identity (for example, by matching information you provide against our records). We may decline requests we cannot verify.
- Authorized agents. You may use an authorized agent to submit a request. We may require the agent to provide proof of authorization and may require you to verify your identity directly or confirm the agent's authority.
- Integration Data requests. If your personal information appears in data we process on a Customer's behalf (for example, within a Customer's connected analytics or ads accounts), the Customer is the business/controller; please contact that business; we will route or assist as its service provider.
We will respond within the timeframes required by applicable law (generally 45 days, extendable as permitted).
8. California "Shine the Light"
California Civil Code § 1798.83 ("Shine the Light") permits California residents to request information about disclosures of personal information to third parties for their direct-marketing purposes. We do not disclose personal information to third parties for their own direct-marketing purposes. You may direct any Shine the Light inquiry to privacy@getseoverts.com.
9. Right to Appeal
Where applicable state law provides a right to appeal a decision on your request (including Virginia, Colorado, Connecticut, Texas, Oregon, Montana, and others), you may appeal by replying to our decision or by emailing privacy@getseoverts.com with the subject "Privacy Appeal." We will respond within the time required by the applicable law and, if we deny the appeal, will inform you how to contact your state attorney general.
10. Multi-State Rights
Residents of states with comprehensive privacy laws have rights that may include the right to confirm/access, correct, delete, obtain a portable copy, and opt out of targeted advertising, sale, and certain profiling. We honor these rights as applicable, including under:
- Virginia: Virginia Consumer Data Protection Act (VCDPA)
- Colorado: Colorado Privacy Act (CPA)
- Connecticut: Connecticut Data Privacy Act (CTDPA)
- Utah: Utah Consumer Privacy Act (UCPA)
- Texas: Texas Data Privacy and Security Act (TDPSA)
- Oregon: Oregon Consumer Privacy Act (OCPA)
- Montana: Montana Consumer Data Privacy Act (MCDPA)
- Other states with comprehensive privacy laws now or hereafter in effect.
Universal opt-out mechanisms. Where required by these laws (e.g., Colorado, Connecticut, Texas, Oregon, Montana), we recognize universal opt-out mechanisms such as the Global Privacy Control (GPC) for opting out of targeted advertising and sale.
Targeted advertising / sale opt-out. To opt out of targeted advertising or any sale/sharing across all applicable states, use the controls in Section 4 or email privacy@getseoverts.com.
11. Contact
- Privacy requests: privacy@getseoverts.com
- Mailing address: Meerkat 9000 LLC, [Address], South Carolina, USA
We may update this Notice from time to time; the effective date above reflects the latest version.