Dated:
Notice at Collection for California Residents
This Notice at Collection is provided to California residents pursuant to the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"). This notice is provided at or before the point of collection and supplements our Privacy Policy and California Residents disclosures.
Categories of Personal Information Collected
The table below describes the categories of Personal Information we collect, the purposes for collection, retention periods, and whether such information may be sold or shared.
| Category | Purposes for Collection | Retention Period | Sold or Shared |
|---|---|---|---|
| Identifiers (name, email, IP address, account name) | Account creation, authentication, customer support, fraud prevention, communications | Account duration + 30 days; backups up to 90 days | Not sold or shared |
| California Customer Records (name, address, phone, financial info) | Order fulfillment, billing, customer support | Account duration + 30 days; financial records 7 years | Not sold; disclosed to payment processors |
| Protected Classifications (gender, age, date of birth) | Service personalization, legal compliance | Account duration + 30 days | Not sold or shared |
| Commercial Information (transactions, purchase history) | Order processing, analytics, service improvement | 7 years from transaction | Not sold or shared |
| Internet or Network Activity (browsing, interactions) | Service operation, security, fraud prevention | 13 months | Not sold or shared with analytics providers |
| Geolocation Data (IP-derived location) | Service delivery, localized content | 13 months | Not sold or shared with analytics providers |
| Sensitive Personal Information (account credentials, payment info) | Authentication, payment processing | Account duration + 30 days; payment data stored by Stripe | Not sold or shared |
| Biometric and Identity Verification Data (depending on verification method: facial images, identity document images, ID numbers, phone numbers) | Identity verification via Stripe | Verification session references, status, and outcome retained locally for account duration; identity documents and facial images hosted by Stripe and redacted upon account deletion or data erasure request | Not sold or shared; disclosed to Stripe for verification |
Your Rights
You have the right to:
- Opt out of the sale or sharing of your Personal Information
- Limit the use and disclosure of Sensitive Personal Information
- Access, correct, or delete your Personal Information
To exercise these rights, visit Your Privacy Choices or submit a request at nusu.ai/legal/data-request.
Contact Us
For questions about this notice, contact us at privacy@nusu.ai or dsr@nusu.ai.