Rights for All Users
Access Your Information: You may review, correct or modify information maintained in your online account by logging into your account. To request a copy of the personal data we hold about you, email us at help@shiftnudge.com and we will provide it.
Delete Your Account: To delete your account, email us at help@shiftnudge.com and we will process the request, including deletion of your saved AI advisor conversations. Note that some information you provide through the Services may continue to be accessible and that we may continue to store information about you as required by law or for legitimate business purposes. We may also retain cached or archived copies of information about you for a certain period of time.
Marketing Communications: We send marketing emails in accordance with applicable law (including CAN-SPAM and PECR). You can opt out at any time by using the unsubscribe link in the email or by emailing help@shiftnudge.com. If you opt out, we may still send you non-promotional communications, such as those about your account or our ongoing business relations.
California Residents (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
Categories of Personal Information: We collect the following categories of personal information: identifiers (name, email, IP address); commercial information (purchase history, payment information); internet activity (browsing history, interactions with our Services); and professional information (occupation, if provided).
Right to Know: You have the right to request that we disclose what personal information we collect, use, disclose, and sell about you.
Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions.
Sale/Share of Personal Information: We do not sell your personal information for monetary consideration. We may use advertising cookies and similar technologies and share personal information, such as identifiers (for example, device and cookie identifiers) and internet activity, with advertising partners (including platforms such as Google and Meta) to deliver and measure advertising, including cross-context behavioral advertising as defined by the CPRA. You can opt out of this sharing at any time by: (1) using the cookie or consent controls on our site where available; (2) broadcasting an opt-out preference signal such as the Global Privacy Control (GPC), which we honor as a valid opt-out request where required by law; or (3) emailing help@shiftnudge.com with "Do Not Sell or Share" in the subject line. We do not knowingly sell or share the personal information of consumers we know to be under 16 years of age.
Sensitive Personal Information: We do not use or disclose Sensitive Personal Information for purposes other than those permitted by the CPRA (e.g., to provide the Services, ensure security, or as otherwise allowed by law).
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
Submitting Requests & Verification: You may submit Right-to-Know or Deletion requests by emailing help@shiftnudge.com with "California Privacy Rights" in the subject line or by mail to the address in Section 13. We will verify your request by matching information you provide with information we maintain. You may designate an authorized agent to make a request on your behalf; the agent must provide proof of authorization, and we may still require you to verify your identity directly.
Response Time: We will respond to verifiable consumer requests within 45 days of receipt (extendable once by 45 days when reasonably necessary with notice).
Financial Incentives: We do not offer programs that provide price or service differences related to the collection, retention, sale, or sharing of personal information. If this changes, we will describe the material terms and how to opt in.
Other U.S. State Privacy Rights
Depending on your state of residence, you may have additional privacy rights under your state's comprehensive privacy law, which may include the right to access, correct, delete, obtain a portable copy of, or opt out of the sale of personal data, targeted advertising, or certain profiling activities. You may opt out of targeted advertising by contacting help@shiftnudge.com and by adjusting cookie preferences where available. To exercise other rights, please contact help@shiftnudge.com with your state and request details. If we deny your request, you may appeal by replying "Appeal" to our decision email within a reasonable time; we will explain our decision in writing within the timeframe required by your state's law.
Nevada Residents
We do not sell covered information as defined under Nevada law. Nevada residents may submit a verified request to help@shiftnudge.com to opt out of the sale of covered information.
EU and UK Residents (GDPR)
If you are located in the European Economic Area (EEA) or United Kingdom, you have certain rights under the General Data Protection Regulation (GDPR):
Controller: Studio MDS, LLC is the controller of your personal data. For our direct Services to individual users, we act as a controller. For certain team or enterprise features where we process personal information solely on a customer's instructions, we act as a processor and our data processing terms apply.
Legal Basis for Processing: We process your personal data based on the following legal grounds: (a) with your consent; (b) to perform our contract with you (e.g., to provide Services you have requested); (c) for our legitimate interests (e.g., to improve our Services, prevent fraud); and (d) to comply with legal obligations.
International Transfers: We rely on Standard Contractual Clauses approved by the European Commission and, where applicable, data transfer frameworks or adequacy decisions.
Right to Access: You have the right to access personal data we hold about you and to receive a copy of it.
Right to Rectification: You have the right to correct inaccurate or incomplete personal data.
Right to Erasure: You have the right to request deletion of your personal data in certain circumstances.
Right to Restriction: You have the right to request that we restrict processing of your personal data in certain circumstances.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used format and transmit it to another controller.
Right to Object: You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw consent at any time.
Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in your jurisdiction.
Automated Decision-Making: We do not use personal data for decisions producing legal or similarly significant effects based solely on automated processing.
To exercise these rights, please email help@shiftnudge.com with "GDPR Request" in the subject line. We will respond to your request within one month.
Lodging Complaints: EEA residents may lodge a complaint with their local data protection authority; a list is available from the European Data Protection Board (EDPB). UK residents may contact the Information Commissioner's Office (ICO) at ico.org.uk.