California Data Rights Notice

1. Overview of California Privacy Rights

California residents have rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), Cal. Civ. Code §1798.100 et seq. This notice explains your rights and the methods available to exercise them.

2. Categories of Personal Information Collected

• Identifiers: name, email address, account identifiers, and university affiliation details if provided.
• Usage and activity data: simulated trading activity, lesson and quiz progress, streaks, achievements, and leaderboard participation.
• Device and technical data: IP address, browser type, operating system, and device metadata.
• Educational data: lesson completion status, quiz attempts, and learning progress metrics.
• Inferences: product engagement and performance patterns derived from account activity.

3. Sources of Personal Information

• Directly from you: account registration, settings updates, support requests, and waitlist forms.
• Automatically collected: cookies, telemetry, and browser/device signals from your interactions with the Service.
• Service providers: trusted providers that support authentication, billing, and transactional communications.

4. Business or Commercial Purposes for Collection

• Provide and operate PaperTrade Academy.
• Personalize user experience and educational progression.
• Maintain leaderboards, competitions, and account features.
• Improve platform reliability, quality, and performance.
• Detect fraud, abuse, and security incidents.
• Provide communications, account support, and legal compliance.

5. Categories of Personal Information Disclosed

We disclose personal information only as reasonably necessary for business purposes, including:

• Service providers: hosting/infrastructure, authentication, payments, and operational email delivery.
• Internal business operations: analytics, product operations, and customer support.
• Legal compliance: where required by law, legal process, or enforceable governmental request.

6. “Sale” or “Sharing” of Personal Information

Under Cal. Civ. Code §1798.140(ad), “sale” is broadly defined. Under Cal. Civ. Code §1798.140(ah), “sharing” includes disclosure for cross-context behavioral advertising.

PaperTrade Academy does not sell personal information for monetary compensation and does not sell or share personal information as defined by Cal. Civ. Code §§1798.140(ad) and 1798.140(ah).

7. Right to Opt-Out of Sale or Sharing

California residents have the right to direct a business not to sell or share personal information (Cal. Civ. Code §1798.120(a)). We provide the “Do Not Sell or Share My Personal Information” link in our footer so this right is available without login.

8. Right to Know

You may request details about: (a) categories of personal information collected, disclosed, sold, or shared; (b) specific pieces of personal information we hold about you; and (c) sources and purposes of collection (Cal. Civ. Code §§1798.100, 1798.110, 1798.111).

9. Right to Delete

You may request deletion of personal information we collected from you, subject to statutory exceptions for legal obligations, security, fraud prevention, and internal operational needs (Cal. Civ. Code §1798.105).

10. Right to Correct

You may request correction of inaccurate personal information we maintain about you (Cal. Civ. Code §1798.106).

11. Right to Limit Use of Sensitive Personal Information

California residents may have the right to limit use and disclosure of sensitive personal information (Cal. Civ. Code §1798.121). At this time, PaperTrade Academy does not collect or use sensitive personal information for purposes that trigger this right.

12. Right to Non-Discrimination

We will not discriminate against you for exercising California privacy rights, except as permitted by law (Cal. Civ. Code §1798.125).

13. How to Submit Requests

• Email: support@papertradeacademy.com (use subject line “California Privacy Request”).
• Account dashboard: authenticated users may submit deletion requests through account tools.
• Web request route: use the footer “Do Not Sell or Share My Personal Information” link to reach this notice and instructions.

We verify requests before fulfillment where required by law and respond within 45 days, with one permitted extension of up to 45 additional days when reasonably necessary (Cal. Civ. Code §1798.130(a)(2)(A)).

14. Authorized Agent Requests

You may designate an authorized agent to submit requests on your behalf. We may require written authorization and identity verification consistent with California law and regulations, including Cal. Civ. Code §1798.130(a)(2)(B)(i).

15. Data Retention

We retain personal information for as long as reasonably necessary and proportionate to disclosed purposes, consistent with CPRA requirements. See Privacy Policy section 11 for current retention periods and criteria.

16. Minors’ Data Rights

For consumers under 16, California law requires an affirmative opt-in before sale or sharing of personal information (Cal. Civ. Code §1798.120(c)). Our Terms require users to be at least 18, and we do not knowingly sell or share personal information.

17. Global Privacy Control (GPC)

We recognize Global Privacy Control (GPC) and browser Do Not Track signals as requests to disable non-essential tracking where required by law. When a valid opt-out preference signal is present, our non-essential analytics pathway is suppressed.

18. Updates to This Notice

We may update this notice from time to time. Material updates are reflected by revising the “Last updated” date and, when required, by providing additional notice.

19. Contact

For California privacy rights requests or questions, contact support@papertradeacademy.com.