California Privacy Notice

1. Introduction

This California Privacy Notice ("Notice") describes the privacy practices of CVNio Inc. as required by the California Consumer Privacy Act of 2018 as modified by the California Privacy Rights Act (collectively, "CCPA/CPRA"). This Notice explains how we collect, use, and disclose personal information about California residents and explains the rights California residents have under California law.

In this Notice, "personal information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household.

This Notice supplements our Privacy Policy and applies solely to California residents. Unless otherwise stated, terms defined in the CCPA/CPRA have the same meaning when used in this Notice.

2. Personal Information We Collect

In the past 12 months, we have collected the following categories of personal information:

Sensitive Personal Information

The CPRA defines certain types of personal information as "sensitive personal information." We collect the following categories of sensitive personal information:

• Financial account information (when processing payments)
• Contents of email or text messages (when you communicate with us)

We only use sensitive personal information for purposes permitted by the CCPA/CPRA, such as:

• Providing the services you requested
• Ensuring security and integrity of our services
• Short-term, transient use
• Performing services on behalf of our business
• Verifying or maintaining the quality of our services

3. Sources of Personal Information

We collect personal information from the following sources:

4. How We Use Your Personal Information

We use the personal information we collect for the following business or commercial purposes:

• Providing our services: Operating our website and applications, processing your transactions, managing your account, and providing customer support.
• Resume creation and management: Enabling you to create, edit, store, and share resumes using our templates and tools.
• AI assistance features: Powering our AI assistant to provide resume suggestions, optimizations, and personalized recommendations.
• Improving our services: Analyzing usage patterns, conducting research, and developing new features and functionality.
• Marketing and advertising: Sending promotional communications, displaying targeted advertisements, and measuring the effectiveness of our marketing.
• Personalization: Tailoring our services to your preferences and activities.
• Security and fraud prevention: Protecting against unauthorized access, detecting and preventing fraudulent activities.
• Legal compliance: Complying with applicable laws, regulations, and legal processes.
• Business operations: Managing our business operations, including accounting, auditing, and other internal functions.

5. Disclosure and Sharing of Personal Information

In the past 12 months, we have disclosed the following categories of personal information to the following categories of third parties for business purposes:

Sales or Sharing of Personal Information

The CCPA/CPRA defines "sale" and "sharing" broadly to include the disclosure of personal information to a third party for monetary or other valuable consideration, or for cross-context behavioral advertising purposes.

In the past 12 months, we have not sold personal information as traditionally understood. However, we may have shared certain information (such as identifiers and internet activity information) with advertising and analytics partners who may use this information for cross-context behavioral advertising purposes. Under the CCPA/CPRA, some of these disclosures may be considered a "sale" or "sharing" of your personal information.

We do not sell or share the personal information of consumers under 16 years of age without affirmative authorization.

6. Your California Privacy Rights

The CCPA/CPRA provides California residents with specific rights regarding their personal information. This section describes your rights and explains how to exercise those rights.

Right to Know

You have the right to request that we disclose certain information to you about our collection, use, disclosure, and sale or sharing of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:

• The categories of personal information we collected about you
• The categories of sources from which we collected the personal information
• Our business or commercial purpose for collecting, selling, or sharing the personal information
• The categories of third parties with whom we share the personal information
• The specific pieces of personal information we collected about you
• If we sold or shared your personal information: the categories of personal information sold or shared and the categories of third parties to whom we sold or shared it
• If we disclosed your personal information for a business purpose: the categories of personal information disclosed and the categories of third parties to whom we disclosed it

Right to Delete

You have the right to request that we delete the personal information we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service providers to:

• Complete the transaction for which we collected the personal information, provide a service you requested, or complete a contract between us
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities
• Debug products to identify and repair errors that impair existing intended functionality
• Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law
• Comply with the California Electronic Communications Privacy Act
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest
• Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us
• Comply with a legal obligation
• Make other internal and lawful uses of that information that are compatible with the context in which you provided it

Right to Correct

You have the right to request that we correct inaccurate personal information that we maintain about you. Once we receive and confirm your verifiable consumer request, we will use commercially reasonable efforts to correct the inaccurate personal information as directed, taking into account the nature of the personal information and the purposes of processing.

Right to Opt-Out of Sale or Sharing of Personal Information

If we sell or share your personal information, you have the right to opt-out of the sale or sharing of your personal information. To exercise this right, you can:

• Click on the "Do Not Sell or Share My Personal Information" link on our homepage or in our footer
• Adjust your cookie preferences through our Cookie Consent Manager
• Contact us by email at privacy@cvnio.com

Right to Limit Use of Sensitive Personal Information

You have the right to request that we limit our use and disclosure of your sensitive personal information to uses necessary to perform our services or for other permitted purposes. However, as described above, we only use sensitive personal information for purposes permitted by the CCPA/CPRA and do not use or disclose it for purposes that would require offering a right to limit.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA/CPRA rights. Unless permitted by law, we will not:

• Deny you goods or services
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties
• Provide you a different level or quality of goods or services
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services

However, we may offer you certain financial incentives permitted by the CCPA/CPRA that can result in different prices, rates, or quality levels. Any CCPA/CPRA-permitted financial incentive we offer will reasonably relate to your personal information's value and contain written terms that describe the program's material aspects. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time.

7. How to Exercise Your Rights

To exercise your rights described above, please submit a verifiable consumer request to us by emailing us at privacy@cvnio.com with "California Privacy Request" in the subject line.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.

Making a verifiable consumer request does not require you to create an account with us. However, if you have an account with us, we may require you to log in to verify your identity.

We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.

Response Timing and Format

We will acknowledge receipt of your request within 10 business days and provide information about how we will process the request.

We will respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 45 additional days, for a total of 90 days), we will inform you of the reason and extension period in writing.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.

Any disclosures we provide will only cover the 12-month period preceding the receipt of your verifiable consumer request. The response we provide will also explain the reasons we cannot comply with a request, if applicable.

For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

8. Verification Process

To protect your privacy and maintain security, we take steps to verify your identity before granting you access to your personal information or complying with your request. When you make a request, we may ask you to provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information.

The verification steps may include:

• If you have an account with us: We may verify your identity through your existing authentication credentials (e.g., password).
• If you do not have an account with us: We may request information such as your name, email address, and other information we have collected about you. In some cases, we may request additional documentation to verify your identity.

The specific verification process will depend on the nature of your request, the sensitivity of the information requested, and the risk of harm from unauthorized disclosure or deletion. We will use information you provide in your request only for verification purposes.

9. Authorized Agents

You can designate an authorized agent to make a request under the CCPA/CPRA on your behalf. To do so, you must provide the authorized agent with written permission to do so, and we may require you to verify your own identity directly with us. We may deny a request from an agent that does not submit proof that they have been validly authorized to act on your behalf.

If you are an authorized agent seeking to make a request, please contact us using the information in the "Contact Information" section and be prepared to provide documentation showing you are authorized to act on behalf of a California resident.

10. Personal Information of Minors

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will promptly delete that information.

If you believe that a child under the age of 18 has provided us with personal information, please contact us at privacy@cvnio.com.

We do not sell or share the personal information of consumers we know to be less than 16 years of age, unless we receive affirmative authorization (the "right to opt-in") from either the consumer who is between 13 and 15 years of age, or the parent or guardian of a consumer less than 13 years of age. Consumers who opt-in to the sale or sharing of personal information may opt-out of future sales or sharing at any time.

11. Changes to This Notice

We reserve the right to update or modify this Notice at any time. If we make material changes to how we treat our users' personal information, we will notify you through a notice on our website homepage, by email to the primary email address specified in your account, or through other appropriate means.

The date the Notice was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our website and this Notice to check for any changes.

12. Contact Information

If you have any questions or comments about this Notice, our Privacy Policy, the ways in which we collect and use your personal information, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:

When contacting us regarding a California privacy request, please include "California Privacy Request" in the subject line to help us route your inquiry appropriately and respond promptly.