This Notice at Collection is provided pursuant to the California Consumer Privacy Act (CCPA), as amended by the CPRA. It explains the categories of personal information (PI) we collect, the purposes for which we collect or use PI, whether we sell or share PI (as defined by California law), our retention practices, and how California residents can exercise their rights — including the right to opt out of sale/sharing and to limit the use of Sensitive Personal Information (SPI) where applicable.
Who this applies to: Visitors to hyvery.com, prospects, business contacts, and users of Hyvery’s SaaS platform in a consumer or business context. Employee/contractor applicants receive a separate applicant notice.
| CPRA Category | Examples | Source(s) | Business/Commercial Purpose(s) | Sold? | Shared for Cross‑Context Behavioral Advertising? | Typical Retention |
|---|---|---|---|---|---|---|
| Identifiers | Name, email, phone, IP address, account ID | You; your org; device/browser | Account setup, authentication, support; security/fraud; communications | No | No | Life of account + up to 3 years; IP/log data 12–24 months |
| Customer Records (Cal. Civ. Code §1798.80(e)) | Business contact and billing info | You/your org | Billing, account administration, customer success | No | No | Contract term + up to 7 years (tax/recordkeeping) |
| Commercial Information | Subscription tier, feature usage | Your use of the Service | Provide and improve Services; analytics (aggregate) | No | No | Life of account + 3 years (aggregate analytics may be de‑identified) |
| Internet/Network Activity | Log data, device/browser type, pages, referrers | Your device; cookies/SDKs | Security, performance, debugging, analytics | No | No | 12–24 months |
| Geolocation (approximate) | City/region derived from IP | Your device | Security, fraud prevention, localization | No | No | 12–24 months |
| Professional/Employment Information | Role, department, organization | You/your org | Account administration; role‑based access | No | No | Life of account + 3 years |
| Inferences (limited) | Feature adoption segments (non‑sensitive) | Derived from usage (aggregate) | Improve product and support | No | No | Up to 24 months (de‑identified where possible) |
| Sensitive Personal Information (SPI) | Account credentials (hashed), MFA indicators | You | Authentication/security | No | No | Life of account + security schedule |
We do not knowingly collect: government ID numbers, precise geolocation, biometric data, or protected health information (PHI) via the product by default. Do not upload such data unless your agreement with Hyvery expressly permits it and you enable appropriate safeguards.
We collect and use PI to provide and operate the Service; secure the Service (fraud/abuse detection, incident response); support users; improve features and performance; communicate about the Service; and comply with legal obligations. See our Privacy Policy for additional details.
Hyvery does not sell personal information.
Hyvery does not share personal information for cross‑context behavioral advertising.
If this changes, we will update this Notice, provide opt‑out mechanisms, and honor signals such as Global Privacy Control (GPC).
California residents may have the right to know/access, correct, delete, data portability, opt out of sale/sharing, and limit the use of SPI (where applicable). You also have the right not to be discriminated against for exercising your rights and the right to appeal certain decisions.
How to Exercise Your Rights
Use any of these options:
Privacy Requests Portal: [Link: “Privacy Requests”]
Email: privacy@hyvery.com
Toll‑free: 1‑833‑HYVERY‑0
Verification: We will verify your identity (e.g., account email + second factor or reasonable proof) before fulfilling certain requests. Authorized agents may submit requests with proof of authorization and, where applicable, user verification. We generally respond within 45 days (extendable once by 45 days for complexity with notice).
Appeals: If we deny your request, you may appeal by replying to our decision email or contacting privacy@hyvery.comwith the subject “Appeal.”
Because we do not sell or share PI for cross‑context behavioral advertising, there is nothing to opt out of today. However, we provide the following mechanisms for transparency and future use:
Button/Link (site footer): Do Not Sell or Share My Personal Information — opens the Privacy Requests portal to record your preference.
GPC Signals: We honor Global Privacy Control (GPC) signals on our marketing sites; when detected, we treat it as an opt‑out signal for sale/sharing where relevant.
Cookie Controls: Use the Cookie Preferences link to adjust non‑essential cookies/analytics.
Hyvery does not use SPI to infer characteristics about you beyond what is necessary for authentication and security. If your configuration introduces SPI, you may submit a Limit SPI request via the Privacy Requests portal; we will restrict use to permitted purposes and confirm.
We retain PI only as long as necessary for the purposes stated above and to meet legal obligations. Typical periods are listed in the table in §1. Backups follow our retention schedule and are deleted on a rolling basis. De‑identified/aggregated data may be retained without time limit where it cannot reasonably be re‑identified.
The Site and Service are not directed to children under 16. We do not knowingly collect PI from children. If you believe a child has provided PI, contact privacy@hyvery.com and we will delete it.
Hyvery, Inc.
4004 Sunburst View Cir., Kissimmee, FL 34746, USA
Email: privacy@hyvery.com
Support: support@hyvery.com
Toll‑free: 1‑833‑HYVERY‑0