California Resident Privacy Notice

VEDCRAFT, LLC d/b/a VedXAI · Effective Date: September 1, 2026 · Last Updated: September 1, 2026

Effective Date: September 1, 2026. Last Updated: September 1, 2026.

This California Resident Privacy Notice (“Notice”) supplements the information and disclosures contained in our Privacy Policy. It applies to individuals residing in California from whom VEDCRAFT, LLC, a California limited liability company doing business as VedXAI (“Vedcraft,” “VedXAI,” “we,” “us,” or “our”), collects Personal Information.

1. Personal Information Collection, Disclosure, and Sale

For purposes of this Notice, “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household, or as otherwise defined by the California Consumer Privacy Act of 2018 (California Civil Code §§ 1798.100 to 1798.199) and its implementing regulations, as amended or superseded from time to time (the “CCPA”).

Personal Information does not include information that is:

Lawfully made available from government records;
De-identified or aggregated; or
Otherwise excluded from the scope of the CCPA.

The chart below provides the categories of Personal Information under the CCPA that we have collected, disclosed for a business purpose, sold, or used for business or commercial purposes in the preceding twelve months, along with the categories of sources and recipients. The examples provided for each category reflect the category’s statutory definition and may not reflect every specific type of Personal Information associated with that category.

Categories of Personal Information

Category	We collect	We disclose for a business purpose	We sell	Categories of recipients
A. Identifiers — e.g., name, email address, account name, online identifiers, IP address	Yes	Yes	No	Service providers (cloud, hosting, authentication, AI, analytics, email, notification, payment processing); social networks at your direction; professional advisers; parties as legally required
B. Personal information in Cal. Civ. Code § 1798.80(e) — e.g., name, contact information; payment card data is received and processed by our payment processor rather than stored by us	Yes	Yes	No	Service providers (particularly our payment processor); cloud and infrastructure providers; parties as legally required
C. Characteristics of protected classifications under California or federal law — e.g., race, gender identity, genetic information	No	N/A	N/A	N/A
D. Commercial information — e.g., subscription plan, transaction and billing history, entitlements and usage allowances	Yes	Yes	No	Service providers (cloud, payment processing, analytics); professional advisers; parties as legally required
E. Biometric information	No	N/A	N/A	N/A
F. Internet or other electronic network activity information — e.g., interactions with our website and Services, usage, device, and log data	Yes	Yes	No	Service providers (cloud and infrastructure, analytics, security)
G. Geolocation data — e.g., precise physical location	No	N/A	N/A	We do not collect precise geolocation. We may infer approximate location from IP address for security and service operation
H. Sensory information — e.g., profile images and avatars obtained from connected social-media accounts	Yes	Yes	No	Service providers (cloud and infrastructure); social networks at your direction
I. Professional or employment-related information — e.g., company name and job title you provide in your account	Yes	Yes	No	Service providers (cloud and infrastructure)
J. Non-public education information (as defined in 20 U.S.C. § 1232g; 34 C.F.R. Part 99)	No	N/A	N/A	N/A
K. Inferences drawn from Personal Information — e.g., usage patterns, preferences, and activity history used to operate and improve the Services	Yes	Yes	No	Service providers (cloud, infrastructure, analytics)

Customer Content you submit — such as prompts, uploaded documents, brand specifications, and generated outputs — may contain Personal Information. We process Customer Content to provide the Services and disclose it only to service providers (including AI and document-processing providers) as reasonably necessary to provide the features you request and as described in our Privacy Policy.

In the preceding twelve months, we have not sold any California resident’s Personal Information, and we do not share Personal Information for cross-context behavioral advertising.

2. Sources of Personal Information

We collect Personal Information from the following categories of sources:

Directly from you, including information you provide when registering, using the Services, or contacting us;
Automatically through your use of the website and Services (usage, device, and log information);
From organization administrators who invite you or manage your account;
From connected Third-Party Services you authorize, including social-media accounts; and
From our service providers, which process information on our behalf.

3. Purposes for Collecting and Using Personal Information

We collect, use, retain, share, and disclose the categories of Personal Information described above for the following business and commercial purposes:

To provide, operate, maintain, secure, and improve the Services;
To create and administer accounts and authenticate users;
To process Customer Content and generate requested outputs, including AI-assisted content;
To enable requested integrations, scheduling, publishing, notifications, and connected-account features;
To process payments and administer subscriptions;
To communicate with you about the Services, support, security, and, where permitted, marketing;
To monitor performance, diagnose issues, and maintain service quality;
To detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms;
To comply with legal obligations, enforce agreements, and protect rights and safety; and
To create and use de-identified and aggregated information.

We do not use or disclose Sensitive Personal Information for purposes other than those permitted without providing a right to limit, as described in Section 6.

4. Sharing Personal Information

We disclose Personal Information to the following categories of third parties for business or commercial purposes:

Service providers and contractors — cloud, hosting, storage, database, content-delivery, security, infrastructure, authentication, AI and machine-learning, document-processing, analytics, notification, email, support, and payment-processing providers, under contracts that restrict their use of Personal Information;
Social networks and connected services — when you connect an account or request publishing, at your direction;
Professional advisers — legal, accounting, insurance, audit, and financing purposes;
Government authorities and other parties — to comply with law, respond to lawful requests, protect rights and safety, and enforce agreements; and
Successors — in connection with a merger, acquisition, reorganization, financing, sale of assets, or similar transaction.

We do not sell Personal Information, and we do not share Personal Information for cross-context behavioral advertising.

5. Retention

We retain Personal Information for as long as reasonably necessary for the purposes described in this Notice and our Privacy Policy, including to provide the Services, maintain your account, comply with legal and recordkeeping obligations, resolve disputes, and protect against fraud and abuse. When Personal Information is no longer needed, we delete, de-identify, or aggregate it in accordance with our Privacy Policy and applicable law. See the Retention section of our Privacy Policy for further details.

6. Sensitive Personal Information

The CCPA defines categories of Sensitive Personal Information, including government identifiers (such as Social Security and driver’s license numbers); account log-in credentials and financial account access; precise geolocation; racial or ethnic origin; religious or philosophical beliefs; union membership; the contents of mail, email, and text messages not generally available to the public; genetic data; biometric data processed to uniquely identify a person; health information; and information concerning sex life or sexual orientation.

We do not knowingly collect, use, or disclose Sensitive Personal Information in the ordinary course of providing the Services. Our Terms of Service prohibit submitting Sensitive Information through the Services unless expressly authorized under a separate written Enterprise agreement and supported configuration.

Because we do not use or disclose Sensitive Personal Information for purposes that would require offering a right to limit under the CCPA, we do not post a “Limit the Use of My Sensitive Personal Information” link. If our practices change, we will update this Notice and provide the required notices, links, and controls.

7. Your California Privacy Rights

Subject to verification requirements and exceptions under California law, you have the following rights:

7.1 Right to know and access

You may request that we disclose:

The categories of Personal Information we have collected about you;
The categories of sources from which we collected that information;
The business or commercial purposes for collecting, using, or disclosing it;
The categories of third parties to whom we disclose it;
The categories of Personal Information sold or shared, if any (we have not sold or shared Personal Information); and
The specific pieces of Personal Information we have collected about you.

7.2 Right to delete

You may request that we delete Personal Information we have collected from you. We may retain information where an exception applies under the CCPA, including to complete a transaction, provide a requested service, reasonably expected functionality; to help ensure security and integrity; to debug errors; to exercise free speech or engage in public or peer-reviewed scientific research; to enable internal uses reasonably aligned with your expectations; to comply with law and legal process; or to exercise or defend legal claims.

We may also direct you to the source of certain information (for example, a connected social account) where we cannot delete it on your behalf.

7.3 Right to correct

You may request that we correct inaccurate Personal Information that we maintain about you. You may also correct certain account information directly through the Services where available.

7.4 Right to opt out of sale or sharing

We do not sell Personal Information or share it for cross-context behavioral advertising, so an opt-out is not required. If our practices change, we will update this Notice and provide a clear “Do Not Sell or Share My Personal Information” link and honor opt-out preference signals, such as Global Privacy Control, where required by law.

7.5 Right to non-discrimination

We will not discriminate against you for exercising any of your privacy rights, including by denying or degrading service, charging different prices, or providing a different level or quality of service, except to the extent permitted by the CCPA.

8. How to Exercise Your Rights

8.1 Submission methods

To submit a request, you may:

Email [email protected] with the subject line “California Privacy Request”; or
Write to us at: VEDCRAFT, LLC, Attn: Privacy Requests, 1401 21st St, Ste R, Sacramento, CA 95811, United States.

8.2 Verification

We will verify your identity and authority before responding to a request, using information reasonably related to the request, such as matching your email address to our records. For requests involving sensitive information or specific pieces of Personal Information, we may request additional verification designed to protect your information. We will only use Personal Information provided in a verification request to verify your identity or authority and to process the request.

8.3 Authorized agents

You may use an authorized agent to submit a request on your behalf, provided the agent has written permission or valid power of attorney to act for you. We may require the agent to provide proof of authorization and may verify your identity directly before responding.

8.4 Response time and appeals

We will respond to your request within 45 days of receipt. If we need more time, we may take up to an additional 45 days, and we will inform you of the reason and the extension period. We will not charge a fee for reasonable requests.

If we deny your request in whole or in part, we will explain why and inform you of your right to appeal by responding to our message or contacting [email protected]. We will respond to appeals within 30 days and explain any further steps available to you.

9. Shine the Light (Cal. Civ. Code § 1798.83)

Under California Civil Code Section 1798.83, California residents may request information about whether we have disclosed Personal Information to third parties for those third parties’ direct marketing purposes. We do not disclose Personal Information to third parties for their direct marketing purposes. If you have questions, contact us at [email protected].

10. Changes to This Notice

We may update this Notice from time to time. Each version applies to Personal Information collected while it was in place. When we update it, we will post the revised version and revise the “Last Updated” date. If a material change affects your rights, we will provide additional notice where required by applicable law, including by email or through the Services.

11. Contact Us

For questions about this Notice or to submit a request, contact:

VEDCRAFT, LLC d/b/a VedXAI
Attn: Privacy Requests
1401 21st St, Ste R
Sacramento, CA 95811
United States
Email: [email protected]