ResonantVibe LLC — Notice at Collection (CCPA/CPRA)
What we collect: identifiers (name, email address); order and payment data — including, for VAVE System purchases paid by ACH bank debit, financial account information (bank account and routing numbers and ACH authorization records, processed by Stripe, our payment processor), and, for subscriptions, in-app purchases, and accessories, payment-card data (also processed by Stripe; we do not store full account or card numbers); health-profile and screening responses you provide through the General Medical Disclaimer — including information about conditions, pregnancy, and seizure history — which is sensitive personal information (data concerning your health), collected only with your consent; device and usage data; and — only with your opt-in consent — Biofeedback Data (brain activity (EEG), heart rate, and, if and when voice analysis is offered, voice-derived acoustic features, together with similar measurements from any future sensor we support), which is sensitive personal information. EEG readings are neural data, expressly sensitive personal information under California law (SB 1223). We also generate inferences from the information described above — including the session insights, trends, and summaries we produce from your Biofeedback Data and your screening responses — and we treat those inferences as a category of personal information we collect about you, per Cal. Civ. Code §1798.140(v)(1)(K). Where an inference is drawn from your health-profile, screening, or Biofeedback Data, we treat that inference as sensitive personal information and handle it on the same terms as the data it was drawn from.
Why: to provide and secure the Services, fulfill orders and subscriptions, administer the health-screening and modality-protection flows, run the biofeedback features you enable, generate the insights and session history your tier allows, and communicate with you.
Sold or shared? We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We use sensitive personal information only to provide the Services you request, so no separate "Limit the Use of My Sensitive Personal Information" step is needed — though the right remains yours.
Retention, by category: as set out in Section 13 of our Privacy Policy — identifiers: life of your account plus 30 days after deletion; order and payment records: 7 years (tax and accounting law); device and usage data: up to 24 months from your last interaction; health-profile and General Medical Disclaimer records: life of your account plus the period needed to defend legal claims; Biofeedback Data: raw sensor readings are deleted once your session summary is computed, and summaries are kept up to 24 months from your last interaction with the Services; inferences: kept and deleted with the data they are drawn from, up to 24 months from your last interaction. We keep device and usage data, Biofeedback summaries and inferences for up to 24 months to show you your own session history and to run the features you chose; we delete them sooner if you delete your account or withdraw your consent. If you delete your account or ask us to delete your data, we delete your name and the personal data we hold about you, and we keep a record that each session took place (the time, the composition, the duration and the VAVE System) without anything that identifies you, as in a Private Mode session (see our Privacy Policy, Section 6): under the account of the person who ran the session, or, for sessions you ran on your own VAVE System, in that System's history.
Full details: Privacy Policy · Consumer Health Data Privacy Policy · Biometric Data Policy.
Exercising your privacy rights will never affect your price, service quality, or access.
ResonantVibe LLC. Notice at Collection, NAC-1.9.