What "sell or share" means
Under the California Consumer Privacy Act (as amended by the CPRA) the words "sell" and "share" cover a broader range of activities than the everyday meaning. "Sell" includes any disclosure of personal information for monetary or other valuable consideration. "Share" specifically covers cross-context behavioural advertising — for example, dropping a third-party advertising pixel that lets another company target you across the web.
What Veracly does today
Veracly does not sell your personal information for money. We do not currently run cross-context behavioural advertising pixels (no LinkedIn Insight Tag, no Meta Pixel, no Google Ads remarketing tag). We do use first-party Vercel Analytics, which is privacy-preserving and does not transmit personal data to advertising networks. If we ever add a tracker that meets the CCPA definition of "share," we will update this page, surface the change in the cookie banner, and respect any opt-out you have already submitted.
Global Privacy Control (GPC)
Veracly honours the Global Privacy Control browser signal. If your browser sends "Sec-GPC: 1" with the request, we treat that as a valid opt-out from sale or sharing under CCPA § 7025 — no form needed. You can confirm your browser is sending GPC at globalprivacycontrol.org. The honoring is enforced in our Next.js middleware and persisted in our consent store, so you do not need to repeat it on each visit.
Rights you can invoke here
California (CCPA/CPRA): right to know, delete, correct, opt-out of sale/share, limit use of sensitive personal information, opt-out of automated decision-making. Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), Delaware (DPDPA), Nebraska (NDPA): right to access, correct, delete, port, opt-out of targeted advertising, sale, and certain profiling. EU/UK (GDPR): right of access, rectification, erasure, restriction, portability, objection (including to direct marketing), and the right not to be subject to a decision based solely on automated processing that produces legal effects.
How we respond
We acknowledge every request within 10 business days and complete it within 45 calendar days (CCPA/CPA/CTDPA/TDPSA/OCPA/MCDPA/DPDPA/NDPA) or one calendar month (GDPR). If your request is unusually complex we may extend once by 45 days (US) or twice by two months (GDPR), and we will tell you why. We will not retaliate against you for exercising any of these rights — your account, pricing, and service quality remain unchanged.
Authorised agents
If a parent, lawyer, or service is acting on your behalf, the agent must submit (1) the agent's contact details, (2) a signed written authorisation from you, and (3) for CCPA requests, proof of California residency. We may contact you directly to confirm the authorisation before we act.
If you disagree with our decision
Several state laws (CO, CT, TX, OR, MT, DE, NE, VA) require us to offer an appeal. Email privacy@veracly.app within 45 days of our decision and we will reconsider. If we still cannot resolve it, you may complain to your state attorney general (US) or your supervisory authority (EU/UK).