US State Privacy Notice
On this page
This Notice is for individuals residing in certain US states and is designed to help you better understand how we collect, use, and disclose your personal information and how to exercise available rights under various applicable privacy laws, including:
- California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA)
- Colorado Privacy Act (CPA)
- Connecticut Data Privacy Act (CTDPA)
- Utah Consumer Privacy Act (UCPA)
- Virginia Consumer Data Protection Act (VCDPA)
This Notice supplements our main Privacy Policy and applies specifically to residents of states with comprehensive privacy laws.
We Do Not "Sell" Your Personal Information
Tanqory does not "sell" your personal information as that term is defined under US Privacy Laws.
We do not exchange your personal information for monetary or other valuable consideration. For categories of sensitive personal information that we collect, we only use or disclose such information either with your specific consent when required, or as otherwise permitted by law.
Personal Information We Collect
Below is a summary of the categories of personal information we may have collected about you over the past 12 months and with whom we may have disclosed that information, depending on how you use Tanqory.
Categories of Personal Information Collected
| Category | Examples | Collected | Disclosed To |
|---|---|---|---|
| Identifiers | Name, email address, mailing address, phone number, account name, IP address, unique device identifiers | Yes | Service providers, merchants (for your orders), payment processors, analytics providers |
| Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) | Name, address, telephone number, credit card number, debit card number, financial information | Yes | Payment processors (PCI DSS certified), fraud prevention services, service providers |
| Commercial information | Products or services purchased, obtained, or considered; purchasing or consuming histories or tendencies | Yes | Merchants, service providers, analytics providers |
| Photos and videos | Photos you upload (profile pictures, product images for merchants) | Yes | Cloud storage providers, content delivery networks |
| Internet or other electronic network activity information | Browsing history, search history, information regarding interaction with our website, application, or advertisements | Yes | Analytics providers, advertising partners (with consent), security services |
| Geolocation data | Approximate location derived from IP address (city/state level) | Yes | Fraud prevention services, analytics providers |
| Inferences | Profile reflecting your preferences, characteristics, behavior, attitudes, abilities | Yes | Service providers for personalization |
| Sensitive personal information | Government-issued IDs (merchants only), account credentials, precise device location (if enabled), voluntary disclosures about protected characteristics | Limited | Identity verification providers, payment processors |
Sources of Personal Information
We collect personal information from the following sources:
Directly from you:
- When you create an account or place an order
- When you contact our support team
- When you participate in surveys or promotions
- When you configure your privacy settings
Automatically from your devices:
- Through cookies and similar tracking technologies
- Through log files and device information
- Through our mobile applications
From third parties:
- Payment processors and financial institutions
- Identity verification services
- Social media platforms (if you connect your account)
- Business partners and marketplace integrations
- Analytics providers
How We Use Your Personal Information
We use the personal information we collect for the following business and commercial purposes:
Providing our Services:
- Processing transactions and fulfilling orders
- Providing customer support
- Managing your account
- Enabling merchant-customer transactions
Security and Fraud Prevention:
- Detecting and preventing fraudulent activity
- Protecting our users and platform
- Verifying identity for account access
- Complying with legal obligations
Improving our Services:
- Analyzing usage patterns
- Developing new features and products
- Fixing bugs and technical issues
- Conducting internal research
Marketing and Personalization:
- Sending promotional communications (with your consent)
- Personalizing your experience
- Showing relevant recommendations
- Contextual advertising
Disclosure of Personal Information
We may disclose your personal information to the following categories of recipients:
Service Providers:
- Cloud infrastructure providers (AWS, Google Cloud)
- Payment processors (Stripe, PayPal) - PCI DSS Level 1 certified
- Shipping and fulfillment partners
- Email and communication providers
- Analytics and monitoring services
- Security and fraud prevention services
Merchants:
- When you make a purchase, the merchant receives order information necessary to fulfill your order
Business Partners:
- With your consent, for joint marketing or co-branded services
Law Enforcement and Legal:
- When required by valid legal process
- To protect our rights, privacy, safety, or property
- To comply with applicable laws and regulations
Sensitive Personal Information
For categories of sensitive personal information that we collect, we only use or disclose such information either with your specific consent when required, or as otherwise permitted by law.
| Sensitive PI Category | Collected | Purpose |
|---|---|---|
| Government-issued IDs | Merchants only | Business verification (KYC/AML compliance) |
| Account credentials | Yes | Account access and security |
| Financial account information | Yes | Payment processing via PCI DSS certified providers |
| Precise geolocation | Only if enabled | Location-based services (with explicit consent) |
| Protected characteristics | Only if voluntarily disclosed | Diversity reporting, user research (anonymized) |
Your Right to Limit: You can direct us to limit our use and disclosure of sensitive personal information to uses necessary to provide the services you request. Limit the Use of My Sensitive Personal Information
Retention of Personal Information
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account information | Duration of account + 2 years | Service provision and potential reactivation |
| Transaction records | 7 years | Tax, accounting, and legal compliance |
| Customer support records | 3 years | Quality assurance and dispute resolution |
| Usage analytics | 2 years | Service improvement |
| Marketing preferences | Until opt-out or account deletion | Communication preferences |
| Fraud prevention data | 7 years | Security and legal compliance |
When information is no longer needed, we delete or anonymize it in accordance with our data retention policies.
Your Privacy Rights
Under applicable US state privacy laws, you may have the following rights:
Right to Know
You have the right to request that we disclose:
- The categories of personal information we have collected about you
- The categories of sources from which we collected your personal information
- The business or commercial purpose for collecting, selling, or sharing your personal information
- The categories of third parties to whom we disclose your personal information
- The specific pieces of personal information we have collected about you
Right to Access
You have the right to request a copy of your personal information in a portable, readily usable format.
Right to Correct
You have the right to request that we correct inaccurate personal information that we maintain about you.
Right to Delete
You have the right to request that we delete personal information that we have collected from you, subject to certain exceptions (such as completing transactions, detecting security incidents, or complying with legal obligations).
Right to Opt-Out of Sale/Sharing
You have the right to opt out of the "sale" of your personal information or the "sharing" of your personal information for cross-context behavioral advertising.
Note: Tanqory does not sell personal information. However, you may opt out of sharing for targeted advertising.
Right to Limit Sensitive Personal Information
You have the right to limit our use and disclosure of your sensitive personal information to uses necessary to provide the services you request.
Right to Non-Discrimination
We will not discriminate against you for exercising any of your privacy rights. This means we will not:
- Deny you goods or services
- Charge you different prices or rates
- Provide you a different level or quality of goods or services
- Suggest you may receive a different price or level of service
How to Exercise Your Rights
Submit a Request
You may submit a request to exercise your rights through any of the following methods:
| Method | Details |
|---|---|
| Online Portal | privacy.tanqory.com |
| privacy@tanqory.com | |
| Registered Agent | Tanqory Inc., c/o Harvard Business Services, Inc., 16192 Coastal Hwy, Lewes, DE 19958, USA — Attn: Privacy Compliance |
Tanqory operates exclusively through digital intake channels (web portal, email, postal mail). Tanqory does not currently maintain a toll‑free telephone line for California consumer privacy requests; the web portal and email channels are designed to be the primary, fastest contact method and are available 24/7. If California law (Cal. Civ. Code §1798.130(a)(1)(A)) is later interpreted to require a toll‑free line for our business specifically, we will provision one and update this notice in advance.
Verifying Your Identity
To protect your personal information, we must verify your identity before processing your request. Depending on the type of request, we may ask you to:
- Confirm information we have on file (email, name, recent transactions)
- Provide additional verification documentation
- Submit a declaration under penalty of perjury (for requests for specific pieces of personal information)
Authorized Agents
You may designate an authorized agent to make requests on your behalf. We may require:
- A valid power of attorney under California law, or
- Written authorization signed by you
We may still verify your identity directly even when using an authorized agent.
Response Timing
| Step | Timeline |
|---|---|
| Confirm receipt of request | Within 10 business days |
| Respond to request | Within 45 calendar days |
| Extension (if necessary) | Additional 45 days with prior notice |
Appeal Process
In certain states, you have the right to appeal our decision regarding a request. If you wish to appeal, please contact us at privacy@tanqory.com with "Privacy Rights Appeal" in the subject line. We will respond to your appeal within the timeframe required by applicable law.
Opt-Out Preference Signals
Global Privacy Control (GPC)
We honor the Global Privacy Control (GPC) signal as a valid opt-out of sale/sharing request. When we detect a GPC signal from your browser:
- We will treat it as a request to opt out of "selling" or "sharing" your personal information
- The signal applies to the browser/device sending it
- You may need to enable GPC on each browser and device you use
Browsers supporting GPC: Firefox, Brave, DuckDuckGo, Privacy Badger extension
Do Not Track
We also honor "Do Not Track" signals from your browser.
Children's Privacy
Our services are intended for users who are at least 16 years old (or 13 with parental consent in applicable jurisdictions).
- We do not knowingly sell or share personal information of consumers we know to be under 16 years of age without affirmative authorization (opt-in consent from the minor aged 13-15 or the parent/guardian of a minor under 13)
- If we learn we have collected personal information from a child under 13 without proper consent, we will delete it promptly
CCPA Request Metrics
In accordance with CPRA requirements, we publish annual metrics on consumer privacy requests received and processed:
Metrics for Calendar Year 2024
| Request Type | Received | Completed | Denied | Median Response Time |
|---|---|---|---|---|
| Requests to Know | — | — | — | — days |
| Requests to Delete | — | — | — | — days |
| Requests to Correct | — | — | — | — days |
| Requests to Opt-Out | — | — | — | — days |
Note: Metrics are updated annually by July 1. Data will be populated after our first full calendar year of operation.
California "Shine the Light" Law
Under California Civil Code Section 1798.83, California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes.
Disclosure: Tanqory does not disclose personal information to third parties for their direct marketing purposes. Therefore, there is no information to disclose under this provision.
Changes to This Notice
We may update this Notice from time to time. When we make material changes, we will:
- Update the "Last Updated" date at the top of this Notice
- Notify you by email (if you have an account with us)
- Post a prominent notice on our website
We encourage you to review this Notice periodically.
Contact Us
If you have questions about this Notice or our privacy practices:
Privacy Team
| Region | Contact |
|---|---|
| Americas | Tanqory Inc., Attn: Privacy Team, privacy@tanqory.com |
| Registered Agent | Tanqory Inc., c/o Harvard Business Services, Inc., 16192 Coastal Highway, Lewes, DE 19958, USA |
| Europe | Tanqory OÜ, Attn: Data Protection Officer, dpo@tanqory.com |
Online Resources
- Privacy Portal: privacy.tanqory.com
- Submit a Request: tanqory.com/privacy/request
- Do Not Sell/Share: tanqory.com/privacy/do-not-sell
- Limit Sensitive PI: tanqory.com/privacy/limit-sensitive
Regulatory Contacts
If you are not satisfied with our response, you may file a complaint with:
California Privacy Protection Agency (CPPA) Website: cppa.ca.gov
California Attorney General Website: oag.ca.gov/privacy