California Privacy Notice (CCPA / CPRA)
Last updated: May 17, 2026
- United States
- California
This notice provides additional information for California residents under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (together, "CCPA"). It supplements our Privacy Policy.
The headline
Millimetric does not sell personal information for money. Millimetric does not "share" personal information for cross-context behavioural advertising as that term is defined in the CCPA. We do not have a "Do Not Sell or Share My Personal Information" link because we do not do either.
Categories of personal information we collect
| Category (CCPA) | From customers / prospects | From Visitors (we process for our customers) |
|---|---|---|
| Identifiers | Email, name, account ID, IP of logged-in admin sessions | Anonymous Visitor ID (mm_aid); IP at ingestion only, then discarded |
| Commercial information | Billing records, plan, payment metadata (last 4 of card) | None unless customer sends purchase events |
| Internet / network activity | Product usage, audit logs | Page URL, referrer, UTMs, click-IDs, coarse user-agent |
| Geolocation | Coarse (country) at sign-in | Coarse (country, region, city) derived from IP at ingestion |
| Inferences | Plan recommendations | Source/medium attribution (e.g. "facebook / paid") |
| Sensitive personal information | None | None, by design |
Sources, purposes, retention
Sources, business purposes and retention periods for each category are described in our Privacy Policy.
Sale / sharing
In the preceding 12 months, Millimetric has not sold personal information and has not shared personal information for cross-context behavioural advertising. We have no actual knowledge of selling or sharing the personal information of consumers under 16 years of age.
Your rights as a California consumer
- Right to know what personal information we have collected, used, disclosed and (if applicable) sold or shared.
- Right to delete personal information we have collected from you, subject to legal exceptions.
- Right to correct inaccurate personal information.
- Right to opt out of sale or sharing (not applicable — we do neither).
- Right to limit the use and disclosure of sensitive personal information (not applicable — we do not process SPI).
- Right to non-discrimination for exercising any of these rights.
How to exercise your rights
Email privacy@millimetric.ai from the address associated with your account, or use our online request form (coming soon — please email in the meantime).
You may use an authorised agent to submit requests on your behalf. We will ask the agent to provide signed written permission and to verify their own identity, and we may verify yours independently.
We will respond within 45 days (with one 45-day extension where reasonably necessary). For Visitor data we hold on behalf of a customer, we will refer the request to that customer and assist them in responding.
Verification
For account-related requests, we verify identity by matching the email used for the request against the email on the account, and by sending a confirmation link. For requests from non-account holders, we may ask for two or three pieces of personal information we already have to verify identity.
Notice of financial incentives
We do not offer financial incentives in exchange for personal information.
Shine the Light
California Civil Code Section 1798.83 ("Shine the Light") permits California customers to request information about disclosures of personal information to third parties for direct marketing. We do not disclose personal information for third-party direct marketing.
Contact
Email privacy@millimetric.ai. To submit a complaint to the California Privacy Protection Agency, visit cppa.ca.gov.