U.S. State Privacy Supplement and Notice at Collection

1. Scope and notice at collection

This supplement applies to personal information collected for the Cybercab Collective Website by Broodex, Inc. It describes state-specific rights where the applicable law covers the person, information and business. California and other state laws have differing thresholds, definitions and exemptions. This notice does not claim that every state statute applies to every record, or that a future financial-services exemption automatically covers today's leads.

Our Privacy Policy identifies the operator, contact details, purposes and general practices. At or before submitting a form you will receive a concise collection notice linking to these documents. We do not require agreement to a sale of information or optional tracking to use the interest register.

2. Categories, uses, recipients and retention

Identifiers and contact details include name, email, an optional mobile number in international format and its country, IP address and related online identifiers. The phone number and separate important-milestone SMS choice are collected only if supplied; the number is unverified, and email confirmation does not verify it. SMS delivery and phone verification are not active. Twilio is not currently receiving these numbers from the Website. We use them for the requested register, verification, permitted communication, security and rights requests. Service providers and authorized professional or legal recipients may receive them for those purposes. Contact details are not sold as a lead list. Active leads generally follow the 24-month retention period in the Privacy Policy; unverified submissions generally follow seven days.

Inquiry and interest information includes approximate intended amounts, vehicle-equivalent choices, preliminary qualification answers, broad residence or location and correspondence. It is used to administer the inquiry and assess demand, not to guarantee eligibility. Authorized operating providers and advisers may receive it where necessary; advertisers do not receive these form answers. Active-record retention is as stated above, with minimized legal records retained separately when justified.

Professional and institutional inquiry information includes the representative's contact and residence information, institution name and type, financing-program readiness, financing focus, indicative U.S.-dollar range per deal, lending coverage, and optional market details and public website supplied through the financial-institution option. We use it to administer nonbinding financing-partner inquiries and requested communications; it is not a borrower application, credit report or financial-document submission. Appropriate personnel, operating providers and advisers may receive it for those purposes, and the same lead-retention periods apply. These records are excluded from modeled investor vehicle and capital totals; indicative financing ranges do not establish available or committed funds. Advertisers do not receive these answers.

Internet or electronic activity and approximate geolocation include ordinary network-request information, referral attribution, limited security events and an optional IP-derived country suggestion. They are used for requested operation, referral attribution and security. The local country lookup does not send your IP to a geolocation service or save it in the lead record. No optional analytics, advertising or session replay is currently enabled. Cookie lifetimes appear in the active inventory; infrastructure-log schedules depend on the actual provider configuration, as explained in the Privacy Policy and provider register.

Permission and correspondence records include accepted versions, choices, email-confirmation events, SMS-choice timestamps and the related number/country and unverified status, privacy requests, complaints and suppression instructions. They are used for administration, compliance, legal claims and preference enforcement. Access is restricted to appropriate personnel, providers and advisers. The Privacy Policy's minimized-evidence and necessity criteria apply.

The categories described are the categories contemplated for this Website. The actual enabled services and history of disclosures must match the current provider register and notices. We do not claim to collect government IDs, financial account access credentials, precise geolocation, biometric identifiers or other sensitive categories through the lead form. A later verification service requires a new notice and analysis.

3. California rights where applicable

Where the California Consumer Privacy Act applies, you may request access to categories and specific pieces of personal information, correction of inaccuracies, deletion subject to exceptions, and information about relevant sources, purposes and categories of recipients or disclosures. You may opt out of sale or sharing and exercise any applicable right to limit use or disclosure of sensitive personal information. You may use an authorized agent subject to proportionate verification.

We do not use or disclose sensitive personal information collected at this lead stage for purposes requiring a separate limitation mechanism. We do not knowingly sell or share personal information of people under 16 and do not intentionally collect leads from anyone under 18. We do not currently offer or pay a financial incentive for providing personal information. A referral code records attribution only; any possible future incentives require a separately announced program and its terms and are not guaranteed.

No sale, sharing or targeted advertising is currently enabled through the Website. Your Privacy Choices states that current status and provides a contact route for applicable rights without opening an account or supplying unnecessary information. If covered activity is introduced, we will provide the required opt-out controls and honor applicable Global Privacy Control signals before it begins. Where a future opt-out applies to a browser rather than a known profile, it will apply to that browser and more broadly when it can reliably be associated without collecting unnecessary information.

4. Other U.S. state rights where applicable

Relevant state laws may allow access, correction, deletion and portability; opting out of targeted advertising, sale or certain profiling; withdrawing consent for covered sensitive processing; and an appeal of a refusal. Where required, we provide information about specific third parties or categories of third parties that received personal information. A request may be subject to lawful exceptions and proportionate verification.

We honor applicable authorized-agent requests. No covered advertising activity is currently enabled; any future implementation will honor recognized universal opt-out mechanisms where required. Our lead-stage Website does not make an automated decision producing a legally significant investment outcome. Ask for human review of a location or routing error using the privacy contact.

5. How to exercise rights and appeal

Use Your Privacy Choices or [email protected], or write to Broodex, Inc, Attn: Cybercab Collective Privacy, 30 N Gould St Ste R, Sheridan, WY 82801, USA. Identify the right you wish to exercise and a way to respond. Do not send an ID scan unless we explain why a limited verification step is necessary and provide a secure method. We do not require a new account or payment.

We respond within the deadline applicable to the request; access, correction and deletion requests under many covered U.S. state laws generally have a 45-day response period, with extensions only as permitted and explained. Opt-out requests may have shorter deadlines and are applied promptly. We do not delay the effect of a straightforward marketing opt-out while processing a separate access request.

To appeal a denial where a right of appeal applies, reply with "Privacy appeal" or contact [email protected]. We will explain the decision within the applicable period and identify a relevant state regulator or complaint route when required. Privacy rights are not restricted by Website arbitration or a choice-of-law provision to the extent they are nonwaivable.