U.S. State Privacy Supplement and Notice at Collection
The fourteen policies from the earlier private preview, before the financing-partner questionnaire. No public adoption or effective date was recorded.
Archived policy links stay within this version. Privacy request and provider pages describe current website controls. Historical runtime contact details were not recorded; current settings are not inserted into these archived documents.
1. Scope and notice at collection
This supplement applies to personal information collected for the Cybercab Collective Website by Broodex, Inc. It describes state-specific rights where the applicable law covers the person, information and business. California and other state laws have differing thresholds, definitions and exemptions. This notice does not claim that every state statute applies to every record, or that a future financial-services exemption automatically covers today's leads.
Our Privacy Policy identifies the operator, contact details, purposes and general practices. At or before submitting a form you will receive a concise collection notice linking to these documents. We do not require agreement to a sale of information or optional tracking to use the interest register.
2. Categories, uses, recipients and retention
Identifiers and contact details include name, email, IP address and related online identifiers. SMS numbers are not collected by the current interest form; a separate notice will apply if SMS enrollment is introduced. We use them for the requested register, verification, permitted communication, security and rights requests. Service providers and authorized professional or legal recipients may receive them for those purposes. Contact details are not sold as a lead list. Active leads generally follow the 24-month retention period in the Privacy Policy; unverified submissions generally follow seven days.
Inquiry and interest information includes approximate intended amounts, vehicle-equivalent choices, preliminary qualification answers, broad residence or location and correspondence. It is used to administer the inquiry and assess demand, not to guarantee eligibility. Authorized operating providers and advisers may receive it where necessary; advertisers do not receive these form answers. Active-record retention is as stated above, with minimized legal records retained separately when justified.
Internet or electronic activity and approximate geolocation include ordinary network-request information, referral attribution, limited security events and an optional IP-derived country suggestion. They are used for requested operation, referral attribution and security. The local country lookup does not send your IP to a geolocation service or save it in the lead record. No optional analytics, advertising or session replay is currently enabled. Cookie lifetimes appear in the active inventory; infrastructure-log schedules depend on the actual provider configuration, as explained in the Privacy Policy and provider register.
Permission and correspondence records include accepted versions, choices, verification events, privacy requests, complaints and suppression instructions. They are used for administration, compliance, legal claims and preference enforcement. Access is restricted to appropriate personnel, providers and advisers. The Privacy Policy's minimized-evidence and necessity criteria apply.
The categories described are the categories contemplated for this Website. The actual enabled services and history of disclosures must match the current provider register and notices. We do not claim to collect government IDs, financial account access credentials, precise geolocation, biometric identifiers or other sensitive categories through the lead form. A later verification service requires a new notice and analysis.
3. California rights where applicable
Where the California Consumer Privacy Act applies, you may request access to categories and specific pieces of personal information, correction of inaccuracies, deletion subject to exceptions, and information about relevant sources, purposes and categories of recipients or disclosures. You may opt out of sale or sharing and exercise any applicable right to limit use or disclosure of sensitive personal information. You may use an authorized agent subject to proportionate verification.
We do not use or disclose sensitive personal information collected at this lead stage for purposes requiring a separate limitation mechanism. We do not knowingly sell or share personal information of people under 16 and do not intentionally collect leads from anyone under 18. We do not currently offer or pay a financial incentive for providing personal information. A referral code records attribution only; any possible future incentives require a separately announced program and its terms and are not guaranteed.
No sale, sharing or targeted advertising is currently enabled through the Website. Your Privacy Choices states that current status and provides a contact route for applicable rights without opening an account or supplying unnecessary information. If covered activity is introduced, we will provide the required opt-out controls and honor applicable Global Privacy Control signals before it begins. Where a future opt-out applies to a browser rather than a known profile, it will apply to that browser and more broadly when it can reliably be associated without collecting unnecessary information.
4. Other U.S. state rights where applicable
Relevant state laws may allow access, correction, deletion and portability; opting out of targeted advertising, sale or certain profiling; withdrawing consent for covered sensitive processing; and an appeal of a refusal. Where required, we provide information about specific third parties or categories of third parties that received personal information. A request may be subject to lawful exceptions and proportionate verification.
We honor applicable authorized-agent requests. No covered advertising activity is currently enabled; any future implementation will honor recognized universal opt-out mechanisms where required. Our lead-stage Website does not make an automated decision producing a legally significant investment outcome. Ask for human review of a location or routing error using the privacy contact.
5. How to exercise rights and appeal
Use Your Privacy Choices or privacy@cybercabcollective.com, or write to Broodex, Inc, Attn: Cybercab Collective Privacy, 30 N Gould St Ste R, Sheridan, WY 82801, USA. Identify the right you wish to exercise and a way to respond. Do not send an ID scan unless we explain why a limited verification step is necessary and provide a secure method. We do not require a new account or payment.
We respond within the deadline applicable to the request; access, correction and deletion requests under many covered U.S. state laws generally have a 45-day response period, with extensions only as permitted and explained. Opt-out requests may have shorter deadlines and are applied promptly. We do not delay the effect of a straightforward marketing opt-out while processing a separate access request.
To appeal a denial where a right of appeal applies, reply with "Privacy appeal" or contact privacy@cybercabcollective.com. We will explain the decision within the applicable period and identify a relevant state regulator or complaint route when required. Privacy rights are not restricted by Website arbitration or a choice-of-law provision to the extent they are nonwaivable.