CALIFORNIA CONSUMER PRIVACY ACT NOTICE

California Consumer Privacy Act (CCPA) Notice

Last Updated: January 15, 2025 | Effective: January 1, 2023

This notice supplements our Privacy Policy and applies solely to California residents. It explains your rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

Your California Privacy Rights

As a California resident, you have the following rights regarding your personal information:

1

Right to Know

You have the right to request that we disclose:

  • The categories of personal information we collected about you
  • The categories of sources from which we collected your personal information
  • The business or commercial purpose for collecting or selling your personal information
  • The categories of third parties with whom we share your personal information
  • The specific pieces of personal information we collected about you
2

Right to Delete

You have the right to request that we delete your personal information that we collected from you, subject to certain exceptions including:

  • Complete transactions or provide requested services
  • Detect security incidents and protect against fraud
  • Comply with legal obligations (e.g., FINRA, SEC requirements)
  • Exercise free speech or other legal rights
  • Conduct research in the public interest
3

Right to Correct

You have the right to request correction of inaccurate personal information that we maintain about you, taking into account the nature of the information and purposes of processing.

4

Right to Opt-Out of Sale/Sharing

You have the right to opt-out of the "sale" or "sharing" of your personal information. Coreaxis does not sell personal information in the traditional sense but may share information with third parties for cross-context behavioral advertising.

5

Right to Limit Use of Sensitive Information

You have the right to limit our use and disclosure of your sensitive personal information to only what is necessary to perform the services or provide the goods reasonably expected.

6

Right to Non-Discrimination

You have the right not to receive discriminatory treatment for exercising your CCPA rights. We will not:

  • Deny you goods or services
  • Charge you different prices or rates
  • Provide a different level or quality of goods or services
  • Suggest that you may receive a different price or level of quality

Categories of Personal Information We Collect

The table below describes the categories of personal information we collect and have collected in the past 12 months:

Category Examples Business Purpose
Identifiers Name, email, address, IP address, SSN Account creation, verification, security
Financial Information Bank accounts, investments, tax information Transaction processing, portfolio management
Protected Classification Age, citizenship, marital status Compliance, reporting requirements
Commercial Information Transaction history, investment preferences Service improvement, personalization
Internet Activity Browsing history, interactions with platform Analytics, security, feature improvement
Geolocation Data Approximate location from IP address Security, fraud prevention
Sensitive Information SSN, financial account numbers Required by law, identity verification

Sources of Personal Information

We collect personal information from the following sources:

  • Directly from you: When you create an account, make investments, or communicate with us
  • Automatically: Through cookies and similar technologies when you use our platform
  • Service providers: From identity verification services, payment processors, and analytics providers
  • Public sources: From government records and publicly available databases
  • Financial institutions: When you link your bank account or transfer funds

Sale and Sharing of Personal Information

Do Not Sell or Share My Personal Information

Coreaxis does not sell personal information in the traditional sense. However, we may share personal information with third parties for cross-context behavioral advertising, which may be considered a "sale" or "sharing" under CCPA.

Opt-Out Preference Signals

You can exercise your right to opt-out by:

1. Global Privacy Control (GPC)

Enable the Global Privacy Control in your browser settings. We honor GPC signals.

2. Direct Opt-Out

This will set an opt-out cookie in your browser.

3. Email Request

Email privacy@coreaxis.xyz with "CCPA Opt-Out Request" in the subject line.

Third Parties with Whom We Share Information

Service Providers
  • • Cloud hosting services
  • • Payment processors
  • • Customer support platforms
  • • Analytics providers
Advertising Partners
  • • Social media platforms
  • • Advertising networks
  • • Marketing automation tools

Data Retention Periods

We retain personal information for as long as necessary to fulfill the purposes outlined in this notice, unless a longer retention period is required or permitted by law. Our retention periods include:

Account Information

Retained for 7 years after account closure for regulatory compliance (SEC Rule 17a-4).

Financial Records

Retained for 7 years as required by IRS regulations and FINRA rules.

Marketing Data

Retained for 2 years after last interaction, unless you opt-out earlier.

Website Analytics

Retained for 26 months in accordance with our data retention policy.

Authorized Agents

California residents may designate an authorized agent to make CCPA requests on their behalf. To use an authorized agent, you must provide:

  • A signed permission from the consumer authorizing the agent to act on their behalf
  • Verification of the consumer's identity
  • Verification of the agent's authority to act on behalf of the consumer

Authorized agents can submit requests through the same methods described below.

How to Submit CCPA Requests

Email

Send request to:

privacy@coreaxis.xyz

Online Portal

Submit through your account dashboard under "Privacy Settings"

Phone

Call toll-free:

1-800-COREAXIS

(Option 2 for Privacy Requests)

Verification Process

To protect your privacy, we will verify your identity before processing CCPA requests. We may ask for:

  • Information to match what we have on file
  • Verification of email address or phone number
  • For sensitive requests, additional verification may be required

We will respond to verifiable requests within 45 days, with a possible 45-day extension if reasonably necessary.

Frequently Asked Questions

Financial information collected by Coreaxis is subject to both CCPA and federal laws including the Gramm-Leach-Bliley Act (GLBA) and Fair Credit Reporting Act (FCRA). Certain GLBA-covered information may be exempt from some CCPA provisions, but we provide comprehensive privacy protections under all applicable laws.

No. Exercising your CCPA rights will not result in discrimination or affect the quality of services you receive. Coreaxis will continue to provide all investment services regardless of your privacy choices.

We will send confirmation when we receive your request and provide updates throughout the process. You will receive a final response within 45 days (or 90 days if extended).

Yes. If we deny your request in whole or in part, you may appeal within 30 days by contacting us at privacy-appeals@coreaxis.xyz. We will respond to appeals within 60 days.

Contact Information

For CCPA Inquiries

Data Protection Officer: Sarah Johnson

Email: privacy@coreaxis.xyz

Phone: 1-800-COREAXIS (Option 2)

TTY: 1-800-XXX-XXXX

Mailing Address

Coreaxis Financial Technologies, Inc.

Attn: Privacy Office

123 Investment Street, Suite 500

New York, NY 10001

Note: This notice is updated annually. The last revision date is at the top of this page. Changes will be posted here and, if material, communicated to California residents via email.