U.S. State Privacy Notice
Effective August 18, 2026
This notice supplements the Privacy Policy. It describes categories used during the preceding 12 months and provides a common process for rights available under California and other applicable U.S. state privacy laws. A law may not apply to Mithra or to every request because coverage and exemptions vary.
Notice at collection
| Category | Source | Purpose | Recipients | Retention |
|---|---|---|---|---|
| Identifiers and contact information | Directly from you; account and service providers | Inquiries, bookings, client administration, privacy requests, security | Hosting, authentication, email, calendar, payment, security providers as needed | Review after 24 months when inactive; longer for active contracts, legal, tax, or dispute needs |
| Commercial and professional information | Directly from you and authorized staff | Proposals, CRM, service delivery, payment requests | Hosting, payment, email, and professional advisers as needed | Active relationship plus applicable contract, tax, dispute, or legal period |
| Internet or network activity | From a consenting browser and hosting edge | Optional engagement measurement, security, and debugging | Hosting/security; Google Analytics only with consent | Engagement 13 months; resolved errors 90 days |
| Approximate geolocation | Hosting edge after analytics consent | Aggregate regional engagement | Hosting/database and authorized staff | 13 months |
| Payment metadata | Payment processor and authorized staff | Payment requests, reconciliation, refunds, disputes | Payment processor, hosting/database, email | Applicable contract, tax, dispute, and chargeback period |
We do not intentionally collect sensitive personal information through public forms. Do not submit government identifiers, account passwords, precise geolocation, health information, payment-card numbers, or regulated records. Card details are entered directly on the payment processor’s hosted checkout.
Sale, sharing, advertising, and profiling
Mithra does not sell personal information, share it for cross-context behavioral advertising, use it for targeted advertising, or profile people to make decisions producing legal or similarly significant effects. Mithra does not offer financial incentives for personal information.
Your rights
Depending on applicable law, you may request confirmation, access, correction, deletion, or portability; opt out of covered sale, sharing, targeted advertising, or profiling; limit certain sensitive-data uses; or appeal a denial. Because Mithra does not conduct the covered sale, sharing, targeted advertising, or profiling described above, an opt-out will confirm those practices. Global Privacy Control and Do Not Track also keep optional analytics off.
Submit or appeal a request
Use the privacy request form or email contact@mithraecommerce.com. We verify requests proportionately, do not discriminate for exercising rights, and respond within the period required by the law that applies. Authorized agents may act where permitted, subject to verification. Select “Appeal” on the request form to challenge a denial.