Do Not Sell or Share My Personal Information

Under the CCPA/CPRA, California residents have the right to:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: Request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information we maintain about you.
• Right to Opt-Out: Opt out of the sale or sharing of your personal information. Since we do not sell or share your data, no opt-out action is necessary.
• Right to Limit Use of Sensitive PI: Direct us to limit the use and disclosure of your sensitive personal information. We only use sensitive PI as necessary to provide the Services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

Sources: Directly from you, from your organization administrator, from identity providers (Google, Microsoft), and automatically from your device.

Retention: Account data is retained while your account is active. Security logs are retained for 30 days to 1 year. Compliance records may be retained for 5–7 years as required by regulation. You may request deletion at any time via Settings > Profile or by emailing contact@biznerva.com.

We may collect limited sensitive personal information as defined under the CPRA, specifically incident report details that may contain information about workplace injuries or witness identities. We only use this sensitive PI as strictly necessary to provide the workplace safety compliance services you have requested. We do not use it for purposes beyond what is necessary or permitted under the CPRA.

If you wish to limit the use of your sensitive personal information, contact us at contact@biznerva.com. Note that limiting use may affect our ability to provide certain compliance services.

BizNerva uses AI services provided by Anthropic (Claude), OpenAI (GPT-4o), and Google AI (Gemini) to power compliance analysis features. This processing is not a "sale" or "sharing" of personal information under the CCPA/CPRA.

Pay Transparency Compliance Checker

Our job posting compliance checker sends job posting text and a system prompt with compliance auditing instructions to AI providers (OpenAI, Anthropic, or Google AI) for regulatory analysis. No personal identifiers are included. Limited to 5 checks per month per organization.

AI Compliance Assistant

When you use the AI Compliance Assistant, organization compliance data (plans, tasks, evidence summaries, regulatory controls) may be sent to Anthropic for analysis. Personal identifiers are systematically redacted before transmission. Uploaded documents are pre-screened for sensitivity — restricted documents are blocked from AI processing entirely. Data is transmitted over encrypted (HTTPS/TLS) connections, and Anthropic processes data under API terms that prohibit use for model training.

We do not use AI to profile individuals, make automated decisions about employment, or sell data to AI providers.

We honor the Global Privacy Control (GPC) signal. If your browser sends the Sec-GPC: 1 header, we treat it as a valid opt-out request under the CCPA/CPRA. Since we do not sell or share personal information, no additional action is taken — your data is already protected.

You can exercise your California privacy rights through the following methods:

• In-App: Use Settings > Profile to export your data, update your information, or request account deletion.
• Email: Contact contact@biznerva.com with your request.

We will verify your identity before fulfilling your request. For requests submitted via email, we may ask you to verify ownership of the email address associated with your account. We will respond within 45 days of receiving your verifiable request.

We will not discriminate against you for exercising your CCPA/CPRA rights. We will not deny you services, charge you different prices, provide a different quality of service, or suggest that you will receive a different level of service for exercising your rights.