Legal

    California Privacy Notice

    Effective: April 15, 2026

    This notice for California residents supplements the information contained in the Dryink Privacy Policy and applies solely to visitors, users, and others who reside in the State of California.

    Categories of Personal Information Collected

    We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device. The following table describes the categories of personal information we may collect or may have collected from California residents within the last twelve (12) months.

    The categories and examples below are those defined in the CCPA/CPRA. Not all examples in each category were necessarily collected, but we believe in good faith that some information from the applicable categories may have been collected.

    Cat.CategoryExamplesCollected
    AIdentifiersReal name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name.Yes
    BCalifornia Customer Records (Cal. Civ. Code § 1798.80(e))Name, address, telephone number, payment information. Some information in this category may overlap with other categories.Yes
    CProtected classificationsAge, race, color, ancestry, national origin, citizenship, religion, marital status, medical condition, disability, sex, sexual orientation, veteran or military status, genetic information.No
    DCommercial informationRecords of products or services purchased on the Services.Yes
    EBiometric informationGenetic, physiological, behavioral, and biological characteristics or activity patterns used to extract a template or other identifier.No
    FInternet or network activityInteraction with our Services or Websites.Yes
    GGeolocation dataApproximate physical location derived from IP address.Yes
    HSensory dataAudio, electronic, visual, thermal, olfactory, or similar information.No
    IProfessional or employment-related informationCurrent or past job history. Collected only in the context of job applications to Dryink.Employment context only
    JNon-public education informationEducation records directly related to a student maintained by an educational institution or party acting on its behalf.No
    KInferencesProfile reflecting a person's preferences, characteristics, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.No
    LSensitive personal informationAccount login and password information, collected solely for authentication purposes.Yes

    Under CCPA/CPRA, personal information does not include publicly available information from government records, deidentified or aggregated consumer information, or information excluded from the CCPA/CPRA's scope (such as information covered by HIPAA, CMIA, GLBA, or the Driver's Privacy Protection Act).

    Sources of Personal Information

    We obtain the categories of personal information listed above from the following sources:

    • From you. For example, during account creation on the Services.
    • From documents. For example, if a document you submit to the Services contains incidental personal information such as a name or email address.
    • Automatically. For example, through your use of the Services or through cookies.
    • From third parties. For example, third-party vendors that we use to provide the Services.

    Personal Information in Customer Documents. When we process personal information contained in documents submitted by our customers, we act as a service provider or contractor under the CCPA/CPRA, as applicable. Our customers determine the purposes for which such information is processed, and we process it on their behalf in accordance with our Terms of Service and applicable data protection laws.

    Use of Personal Information

    We may use or disclose personal information we collect for business purposes or commercial purposes as described in the "Use of Your Personal Information" section of our Privacy Policy. If we decide to collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes, we will update this notice.

    Disclosure of Personal Information

    We may use or disclose, and may have used or disclosed in the last twelve (12) months, the following categories of personal information for business or commercial purposes:

    • Category A: Identifiers
    • Category B: California Customer Records
    • Category D: Commercial information
    • Category F: Internet or network activity
    • Category G: Geolocation data
    • Category I: Professional or employment-related information (employment context only)

    When we disclose personal information for a business or commercial purpose, we enter a contract that describes the purpose and requires the recipient to keep that information confidential and not use it for any purpose except performing the contract.

    Sale and Sharing of Personal Information

    As defined in the CCPA/CPRA, "sell" and "sale" mean selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating a consumer's personal information to a third party for valuable consideration.

    We do not sell or share personal information, as those terms are defined in the CCPA/CPRA. We disclose personal information to service providers, such as hosting, payment and advertising-measurement providers, only under contracts that limit their use of it to providing services to us.

    Personal Information of Minors

    Our Services are not intended for anyone under 18 years of age. We do not knowingly collect personal information directly from individuals under 18 through their use of the Services. If we learn that an individual under 18 has provided us with personal information, we will take appropriate steps to delete it.

    Your Rights Under the CCPA/CPRA

    If you are a California resident, you have the following rights:

    • Right to know / access. You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, our purposes for collecting or selling it, and the categories of third parties with whom we share it.
    • Right to delete. You have the right to request deletion of your personal information, subject to certain exceptions (for example, where retention is necessary to complete a transaction, detect security incidents, comply with legal obligations, or exercise free speech rights).
    • Right to correct. You have the right to request correction of inaccurate personal information we maintain about you.
    • Right to opt out of sale/sharing. If we sell or share personal information in the future, you may have the right to opt out as provided by applicable law.
    • Right to limit use of sensitive personal information. Where applicable, you may have the right to limit certain uses and disclosures of sensitive personal information. We use account credentials solely for authentication. Sensitive personal information contained in customer-uploaded documents is processed on behalf of our customers.
    • Right to non-discrimination. You have the right not to be discriminated against for exercising any of your CCPA/CPRA rights.

    Exercising Your Rights

    To exercise any of the rights described above, you can contact us by email at [email protected]. Only you, or a person you authorize to act on your behalf (including a person registered with the California Secretary of State), may make a verifiable request related to your personal information.

    Your request must provide sufficient information to allow us to verify your identity and describe the request with enough detail for us to properly understand, evaluate, and respond. We will respond to verifiable requests free of charge within 45 days of receipt. If additional time is needed, we will notify you of the extension and the reason for it.

    Do Not Track

    The Services do not respond to Do Not Track browser signals. Some third-party websites we link to may track your browsing activities; you can manage tracking preferences through your browser's privacy settings.

    California Shine the Light

    Under California Civil Code Section 1798.83, California residents with an established business relationship with us may request information once a year about sharing their personal information with third parties for the third parties' direct marketing purposes. To make such a request, please contact us at [email protected].

    Changes to This Notice

    We may update this California Privacy Notice from time to time. Changes will take effect when posted unless otherwise specified.

    Contact Us

    If you have questions about this California Privacy Notice or wish to exercise your rights, you can contact us by email at [email protected].