Effective date: July 20, 2026  ·  Last updated: July 20, 2026

1. The Right to Limit

California residents can limit the use of sensitive personal information to what is necessary to provide the service.

Under the CPRA, California residents may direct a business to limit its use and disclosure of sensitive personal information — such as precise geolocation, government identifiers (e.g., Social Security numbers), account log-in credentials, financial account details, and certain other categories — to the uses necessary to perform the services reasonably expected by the consumer.

2. Sensitive Data We Collect

RateCards currently collects only these categories of sensitive personal information:

  • Account log-in credentials — your password, stored in hashed form, used solely for authentication.
  • Financial information — payment details are collected and processed directly by our payment processor, Stripe; RateCards never stores full card numbers.

We do not collect precise geolocation, Social Security numbers, driver's license numbers, biometric data, or health information. If our practices change — for example, if we introduce background checks requiring government identifiers — we will update this page and our Notice at Collection before collection begins.

3. How We Use It

We use sensitive personal information only for purposes necessary to provide the service you expect — authenticating your account and processing payments — and for security and fraud prevention, as permitted by CCPA regulations (Cal. Code Regs. tit. 11, § 7027(m)). We do not use sensitive personal information to infer characteristics about you, and we do not sell it or share it for cross-context behavioral advertising.

Because our use is already limited to these permitted purposes, there is currently no additional limitation to apply — but you may still submit a request, and it will take effect against any future non-essential use.

4. How to Submit a Request

Submit a "Limit Sensitive Personal Information" request via the California Privacy Rights Request form or email privacy@ratecards.app with the subject line "Limit Sensitive Personal Information". Requests are processed within 15 business days and do not require identity verification. Authorized agents may submit on your behalf.