6.1 US Jurisdiction-Specific Notices

California Residents. The California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (collectively, the “CCPA”), applies only to certain businesses that meet specific statutory thresholds. Based on our current data collection and processing activities, we do not meet those thresholds, and the CCPA does not presently apply to our operations. We continue to evaluate our practices and, should the CCPA become applicable to us in the future, we will update this Privacy Policy to reflect any new rights or obligations.

Nevada Residents. We do not currently meet the statutory definitions that would classify us as a “data broker” or otherwise bring us within the scope of Nevada’s privacy laws governing certain types of personal information sales. As a result, Nevada’s consumer privacy rights provisions do not apply to our data practices at this time.

Should our activities change such that Nevada’s privacy requirements become applicable, we will revise this Privacy Policy accordingly.

Other US States. The privacy laws of several states—including Virginia, Colorado, Connecticut, Utah, Iowa, Indiana, Kentucky, Rhode Island, Oregon, Texas, Tennessee, Montana, South Dakota, New Jersey, Delaware, Maine, Arizona, Arkansas, and Florida—provide residents with certain rights related to the processing of their personal data. Our business meets the applicability thresholds of these laws because we conduct business in these states, collect personal data from their residents, and process personal data in quantities that meet or exceed the statutory thresholds for covered entities.

Although we do not sell or share personal data for monetary consideration or for targeted advertising within the meaning of these state laws, and we do not process categories of data defined as “sensitive personal data,” we do engage in targeted advertising, cross‑context behavioral advertising, and certain forms of profiling. As such, we comply with the obligations imposed on controllers under these state privacy statutes. These obligations include, as applicable:

Your Rights. Residents of these states may have the right to:

• Access the personal data we maintain about them.

• Correct inaccuracies in their personal data.

• Delete personal data they have provided to us or that we have obtained about them.

• Receive a copy / portability of certain personal data in a usable, portable format.

  
  

Opt out of:

• targeted advertising;

• profiling in furtherance of decisions that produce legal or similarly significant effects;

• the sale of personal data (noting that we do not engage in such sales).

Some states also allow residents to appeal our response if we deny a rights request.

Our Responsibilities as a Data Controller. To comply with these state laws, we:

• Provide clear disclosures about our data collection and use practices;

• Limit data processing to what is adequate, relevant, and reasonably necessary for disclosed purposes;

• Implement reasonable administrative, technical, and physical security measures to protect personal data;

• Perform assessments when engaging in certain processing activities, such as targeted advertising or profiling that may pose a heightened risk of harm;

• Respond to consumer privacy rights requests within the timelines required by applicable laws; and

• Refrain from processing “sensitive personal data,” as defined by these laws, unless required by law or authorized by the consumer (which we do not currently do).

6.2 EEA Residents. 

At this time, we do not intentionally collect personal data from individuals in the European Economic Area (“EEA”). Because our activities do not involve the targeted offering of goods or services to EEA residents, nor the monitoring of their behavior within the EEA, the GDPR and related data protection laws do not currently apply to our processing activities. Nevertheless, if you reside in the EEA and believe we have collected personal data about you, you may contact us to request deletion or correction. While we are not legally obligated to do so under the GDPR, we will use reasonable efforts to respond in a manner consistent with our commitment to responsible data practices.

6.3 Use or Access Outside of the United States. 

If you access or use the Services from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States. The data protection and privacy laws of the United States may offer a different level of protection than the laws in your country of residence.

By using the Services, you acknowledge and consent to the transfer of your information to the United States and to the processing of your information in accordance with this Privacy Policy.

6.4 Submitting a Request. 

Residents of the jurisdictions listed above may submit a request to exercise their privacy rights by contacting us at:

- Email: privacy@co-aI.xyz

- Phone: +1 (213) 378-4206

- Mail: 33 Nassau Ave, 2nd Floor, Brooklyn, NY 11222

We will authenticate and respond to requests in accordance with the requirements of the applicable privacy laws. If we decline to act on your request, you may have the right to appeal our decision; we will provide instructions on how to submit an appeal at that time.