Do Not Sell My Personal Information
Effective March 21, 2026 · v1.0 · Material changes will be communicated via email to active subscribers.
Our commitment
AutoSAM, operated by GovCertix LLC (“we,” “us,” “our”), does not sell personal information as defined under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).
We also do not share personal information for cross-context behavioral advertising purposes. We do not participate in data-broker networks, real-time bidding, retargeting, or any similar data exchange arrangements. All data sharing is strictly limited to service providers operating under binding contractual obligations to process data only on our behalf and only for the purposes described in this page and our Privacy Policy.
Categories of personal information we collect
Under CCPA/CPRA, the following table describes the categories of personal information AutoSAM collects, examples of each, and the business purpose for collection:
| CCPA Category | Examples | Business Purpose |
|---|---|---|
| Identifiers | Name, email address, account ID, IP address | Account creation, authentication, communication, security |
| Commercial information | Subscription tier, billing history, payment method type | Billing, subscription management, revenue reporting |
| Internet or other electronic network activity | Usage logs, feature interactions, session data, page views | Product analytics, performance monitoring, support |
| Professional or employment-related information | Company name, job title, role (user-provided) | Account personalization, team workspace context |
| Inferences drawn from the above | Compliance health score, engagement score, usage patterns | Product improvement, feature recommendations, alerting |
For more detail on data retention periods, see our Privacy Policy.
How we share personal information
AutoSAM shares personal information only with service providers (subprocessors) who are contractually bound to process data solely on our behalf and only for the purposes of delivering the AutoSAM platform. All sharing is for service delivery only — we do not share personal information for advertising, marketing by third parties, or any purpose unrelated to operating the service.
| Service Provider | Data Shared | Purpose |
|---|---|---|
| Supabase Inc. | Account data, authentication tokens | Database hosting and authentication |
| Stripe Inc. | Billing and payment information | Payment processing and subscription management |
| Vercel Inc. | Request logs, IP addresses | Application hosting and CDN |
| Resend Inc. | Email addresses, notification content | Transactional email delivery |
| PostHog Inc. | Usage events, anonymized identifiers | Product analytics (with consent only) |
| Sentry Inc. | Error traces, session identifiers | Error monitoring and performance diagnostics |
| Upstash Inc. | Rate-limiting counters, cache keys | Redis caching and rate limiting |
For the full list of subprocessors, their data locations, and privacy policies, see our Subprocessors page.
Sensitive personal information
AutoSAM does not knowingly collect sensitive personal information as defined under CPRA. This includes, but is not limited to: Social Security numbers, driver's license or state ID numbers, financial account numbers with access credentials, precise geolocation, racial or ethnic origin, religious beliefs, biometric information, health data, sexual orientation, or the contents of private communications. If we become aware that sensitive personal information has been inadvertently collected, we will promptly delete it.
Your rights under California law
If you are a California resident, the CCPA/CPRA grants you the following rights regarding your personal information:
- Right to Know — You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business purposes for collecting it, and the categories of third parties with whom we have shared it.
- Right to Delete — You may request that we delete the personal information we have collected about you, subject to certain exceptions (for example, data required for billing compliance or legal obligations).
- Right to Correct — You may request that we correct inaccurate personal information that we maintain about you.
- Right to Opt-Out of Sale / Sharing — You have the right to opt out of the sale or sharing of your personal information. However, this right is not applicable to AutoSAM because we do not sell or share personal information as defined under CCPA/CPRA.
- Right to Limit Use of Sensitive Personal Information — You have the right to limit the use and disclosure of sensitive personal information. This right is not applicable to AutoSAM because we do not collect sensitive personal information.
- Right to Non-Discrimination — We will not deny you services, charge you different prices, provide a different level or quality of service, or suggest that you will receive any of these as a result of exercising your privacy rights.
How to submit a request
To exercise any of the rights described above, please email privacy@autosam.io with the subject line “California Privacy Request.” Include your full name and the email address associated with your AutoSAM account so we can locate your records.
- Response time: We will acknowledge your request within 10 business days and provide a substantive response within 45 calendar days of receipt. If we need additional time, we will notify you of a one-time 45-day extension and explain the reason.
- Identity verification: To protect your privacy, we may need to verify your identity before fulfilling your request. Verification typically involves confirming your email address and account ownership.
- Authorized agents: You may designate an authorized agent to submit a request on your behalf. The agent must provide a signed, written authorization from you, and we may still require you to verify your identity directly.
Appealing a denied request
If we deny your request in whole or in part, we will explain the basis for the denial. To appeal, email privacy@autosam.io with the subject line “Appeal — California Privacy Request.” We will review your appeal and respond within 45 calendar days. If the appeal is denied, we will provide information on how to contact the California Attorney General to submit a complaint.
California “Shine the Light”
Under California Civil Code Section 1798.83 (the “Shine the Light” law), California residents may request information about whether a business has disclosed personal information to third parties for their direct marketing purposes. AutoSAM does not disclose personal information to third parties for their own direct marketing purposes. California residents may request confirmation of this practice by contacting privacy@autosam.io.
Changes to this page
We may update this page from time to time to reflect changes in our data practices or applicable law. Material updates will be reflected on this page with an updated effective date. Active subscribers will be notified by email of material changes.
If you have questions about this page or want to submit a privacy request, contact privacy@autosam.io.