Privacy Policy - State Specific
Last Updated: December 1, 2023
This page contains more information for residents of certain states about what rights they may have under state law and how they may exercise those rights. This page should be read in conjunction with OpenAP’s Privacy Policy and the OpenID Privacy Policy.
TABLE OF CONTENTS
Additional Information for Individuals in California
Additional Information for Individuals in Connecticut
Additional Information for Individuals in Colorado
Additional Information for Individuals in Nevada
Additional Information for Individuals in Virginia
Additional Information for Individuals in Utah
Additional Information for Individuals in California
The California Consumer Privacy Act (“CCPA”) provides California residents enhanced rights with respect to their personal information that is collected by businesses.
We do not use or disclose sensitive personal information, and we do not “sell” or “share” personal information as those terms are defined by the CCPA, and we have not in the prior 12 months. The CCPA requires us to state that we do not have actual knowledge that we sell or share the personal information of California residents under 16 years of age.
First, California residents may opt-out of having their personal information sold to, or shared with, other persons or parties. As stated, OpenAP does not sell or share your information.
Second, California residents have a right to know:
What specific pieces of information a business has about the resident;
Categories of personal information it has collected about the resident;
Categories of sources from which the personal information is collected;
Categories of personal information that the business sold, shared, or disclosed for a business purpose about the resident;
Categories of third parties to whom the personal information was sold, shared, or disclosed for a business purpose; and
The business or commercial purpose for collecting, selling, or sharing personal information.
Third, California residents can request that the personal information a business has collected from them be deleted from the business’s systems and records, subject to certain exceptions.
Fourth, California residents can request that inaccurate personal information a business maintains about them be corrected.
Fifth, California residents can request to limit the use or disclosure of their sensitive personal information. As stated above, OpenAP does not collect sensitive personal information.
To make a “request to know,” “request to delete,” or “request to correct” your personal information or the personal information of an individual for whom you are an authorized agent, please send us an e-mail at legal@openap.tv. (If you email us, please put “California Request to Know,” “California Request to Delete,” or “California Request to Correct” in the subject heading of your email.)
We will confirm receipt of your request to know, delete, or correct within 10 days along with a description of what steps we will take to verify and respond. We must provide the requested information or delete your personal information within 45 days of receipt of your request but can use an additional 45 days, but we will let you know if additional time is needed.
When contacting us, we may ask you to provide certain, limited personal information, such as your name, e-mail address and/or username to verify your request and to match with our records and systems. We will not retain this personal information or use it for any other purpose.
To inquire about exercising these rights, or if you are a California resident and a job applicant or current or former employee of OpenAP and wish to understand how we may collect, use, or disclose your personal information in that capacity, please contact us at legal@openap.tv.
CCPA Metrics
OpenAP’s has compiled the following metrics about CCPA requests it received in 2022:
Type of Request | Number of requests received, complied with in whole or in part, and denied | Median or mean number of days to substantively respond to each request |
Request to delete | 0 | Not applicable |
Request to correct | 0 | Not applicable |
Request to know | 0 | Not applicable |
Request to opt out of sale/sharing (as stated, OpenAP does not sell or share your information) | 0 | Not applicable |
Request to limit use of sensitive personal information (as stated, OpenAP does not collect sensitive personal information) | 0 | Not applicable |
California's “Shine The Light” Law
We do not respond to requests under California’s “Shine The Light” law (California Civil Code § 1798.83) because in the immediately preceding calendar year we have not disclosed the types of personal data requiring disclosure under that law.
Additional Information for Individuals in Colorado
We may be subject to the Colorado Privacy Act based on our interactions with Colorado residents and our use of their personal information. The Colorado Privacy Act provides Colorado residents enhanced rights with respect to their personal data when acting in an individual or household context.
In this section, "CPA personal data” refers to personal information that is linked or reasonably linkable to an identified or identifiable Colorado resident. CPA personal data does not include de-identified or publicly available information, as defined in the Colorado Privacy Act.
First, a Colorado resident may opt out of processing their CPA personal data for purposes of targeted advertising, the sale of their CPA personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning that Colorado resident.
Second, a Colorado resident has the right to confirm whether we are processing CPA personal data concerning them and to access their CPA personal data. As part of a request for access, the Colorado resident may also request to receive their CPA personal data in a portable and, if technically feasible, readily usable format.
Third, a Colorado resident may have the right to correct inaccuracies in their CPA personal data we hold.
Fourth, a Colorado resident may have the right to request we delete CPA personal data concerning them.
To exercise your rights, please email us at legal@openap.tv. If you email us, please put in the subject line of your email the right you are seeking to invoke: “Colorado Right to Opt Out,” “Colorado Right to Access,” “Colorado Right to Correct,” or “Colorado Right to Delete.”
You may submit multiple requests at once in an email. There is no cost for submitting your first request; if you submit multiple requests in a twelve-month period, we may charge you a fee for answering your request. We are permitted to use commercially reasonable efforts to authenticate you are who you say you are, and if you are submitting the requesting on behalf of another, that you have the authority to do so. So we may need to ask you for more information, in light of the rights exercised, the type, sensitivity, value, or volume of personal information, the level of possible harm if we improperly grant the request, and the cost to us. If we cannot authenticate you or your authority, we will deny the request.
If you submit a request, we will inform you of the result of your request (including, if you submit a Right to Access, your personal information) without undue delay and within 45 days after we receive your request. We may extend that deadline by 45 days, to 90 days in total, in some cases. If we extend the deadline, we will tell you that and why.
The Colorado Privacy Act includes exceptions for personal information regulated under other laws or maintained for certain reasons or in certain contexts. For example, the Colorado Privacy Act does not apply to publicly available information, including information that we reasonably believe Colorado residents have lawfully made available to the general public. As another example, we will not delete personal information when it is necessary to maintain that personal information to comply with a legal obligation.
If we don’t grant your request, we will explain why it cannot be fulfilled. You may appeal our decision by emailing us at legal@openap.tv with the subject line “Appeal of Request” and including our response to your request. We will also include this information in our response to your request. If you appeal our decision, we have 45 days to respond. We may also extend our deadline by 45 days, to 90 days in total, in some cases. If we extend the deadline, we will tell you that and why. If you have concerns about the results of your appeal, you may contact the Colorado attorney general.
In addition, when you visit our website, we may use the information we collect automatically through online interactions, as described above in the Interest-Based Advertising section for targeted advertising, which we may disclose or make available to advertising and social media networks. Although we do not engage in targeted advertising, as it is defined under the Colorado Privacy Act, we do process CPA personal data as a controller that may be subsequently used by our clients for targeted advertising.
Additional Information for Individuals in Connecticut
We may be subject to the Connecticut Data Privacy Act based on our interactions with Connecticut residents and our use of their personal information. This law provides Connecticut residents enhanced rights with respect to their personal information when they are not acting solely in a commercial or employment context (such as a B2B communication) with interacting with us.
In this section, "CTDPA personal data” refers to personal information that is linked or reasonably linkable to an identified or identifiable Connecticut resident. CTDPA personal data does not include de-identified or publicly available information, as defined in the Connecticut Data Privacy Act.
First, a Connecticut resident may have the right to confirm whether we are processing CTDPA personal data concerning them and to access their CTDPA personal data.
Second, a Connecticut resident may have the right to correct inaccuracies in their CTDPA personal data we hold.
Third, a Connecticut resident may have the right to request we delete CTDPA personal data concerning them.
Fourth, a Connecticut resident may also request to receive their CTDPA personal data in a portable and, if technically feasible, readily usable format.
Fifth, a Connecticut resident may opt out of processing their CTDPA personal data for purposes of targeted advertising, the sale of their CTDPA personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning that Connecticut resident.
To exercise your rights, please email us at legal@openap.tv. If you email us, please put in the subject line of your email the right you are seeking to invoke: “Connecticut Right to Access,” “Connecticut Right to Correct,” “Connecticut Right to Delete,” “Connecticut Right to Portability,” and “Connecticut Right to Opt Out.”
You may submit multiple requests at once in an email. There is no cost for submitting your first request; if you submit multiple requests in a twelve-month period, we may charge you a reasonable fee to cover the administrative costs of complying with your requests or decline to act on your requests. For requests other than a Right to Opt Out, we are permitted to use commercially reasonable efforts to authenticate you are who you say you are and if you are making a request on behalf of another, that you have the authority to do so. If we are unable to do so, we may request that you provide additional information reasonably necessary to authenticate you. If we cannot authenticate you or your authority, we will deny the request. If you submit a Right to Opt Out request, we are permitted to deny the request if we have a good faith, reasonable and documented belief that the request is fraudulent, and we will tell you that and why.
If you submit a request, we will inform you of the result of your request (including, if you submit a Right to Access, your personal information) without undue delay and within 45 days after we receive your request. We may extend that deadline by 45 days, to 90 days in total, in some cases. If we extend the deadline, we will tell you that and why.
Connecticut’s law includes exceptions for personal information regulated under other laws or maintained for certain reasons or in certain contexts. For example, it does not apply to publicly available information, including information that we reasonably believe Connecticut residents have lawfully made available to the general public. As another example, we will not delete personal information when it is necessary to maintain that personal information to comply with a legal obligation.
If we don’t grant your request, we will explain why it cannot be fulfilled. You may appeal our decision by emailing us at legal@openap.tv with the subject line “Appeal of Request” and including our response to your request. We will also include this information in our response to your request. If you appeal our decision, we have 60 days to respond.
In addition, when you visit our website, we may use the information we collect automatically through online interactions, as described above in the Interest-Based Advertising section for targeted advertising, which we may disclose or make available to advertising and social media networks. Although we do not engage in targeted advertising, as it is defined under the Connecticut Data Privacy Act, we do process CTDPA personal data as a controller that may be subsequently used by our clients for targeted advertising.
Additional Information for Individuals in Nevada
If you are a Nevada resident, Nevada law provides you with a limited right to opt out of the sale of certain types of your personal information that we may collect through the Internet, which Nevada law refers to as “covered information.”
We do not sell covered information under Nevada law. Nonetheless, if you wish to exercise your right to direct us not to sell your covered information, please email us at legal@openap.tv, with the subject line “Nevada Right to Opt Out.” We are permitted to use commercially reasonable means to authenticate you are who you say you are. If we cannot authenticate you, we will deny the request.
If you submit a do-not-sell request, we will respond to your request within 60 days after we receive your request. We may extend that deadline by 30 days, to 90 days in total, if we determine it is reasonably necessary. If we extend the deadline, we will tell you that.
Additional Information for Individuals in Virginia
We may be subject to the Virginia Consumer Data Protection Act based on our interactions with Virginia residents and our use of their personal information. The Virginia Consumer Data Protection Act provides Virginia residents enhanced rights with respect to their personal information when acting in an individual or household context.
In this section, "CDPA personal data” refers to personal information that is linked or reasonably linkable to an identified or identifiable Virginia resident. CDPA personal data does not include de-identified or publicly available information, as defined in the Virginia Consumer Data Protection Act.
First, a Virginia resident may opt out of processing their CDPA personal data for purposes of targeted advertising, the sale of their CDPA personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning that Virginia resident.
Second, a Virginia resident has the right to confirm whether we are processing CDPA personal data concerning them and to access their CDPA personal data.
Third, a Virginia resident may also request to receive their CDPA personal data in a portable and, if technically feasible, readily usable format.
Fourth, a Virginia resident may have the right to correct inaccuracies in their CDPA personal data we hold.
Fifth, a Virginia resident may have the right to request we delete CDPA personal data concerning them.
To exercise your rights, please email us at legal@openap.tv. If you email us, please put in the subject line of your email the right you are seeking to invoke: “Virginia Right to Opt Out,” “Virginia Right to Access,” “Virginia Right to Portability,” “Virginia Right to Correct,” or “Virginia Right to Delete.”
You may submit multiple requests at once in an email. There is no cost for submitting your first two requests; if you submit more than two requests in a twelve-month period, we may charge you a reasonable fee to cover the administrative costs of complying with your requests or decline to act on your requests. We are permitted to use commercially reasonable efforts to authenticate you are who you say you are, and if we are unable to do so, we may request that you provide additional information reasonably necessary to authenticate you. If we cannot authenticate you or your authority, we will deny the request.
If you submit a request, we will inform you of the result of your request (including, if you submit a Right to Access, your personal information) without undue delay and within 45 days after we receive your request. We may extend that deadline by 45 days, to 90 days in total, in some cases. If we extend the deadline, we will tell you that and why.
The Virginia Consumer Data Protection Act includes exceptions for personal information regulated under other laws or maintained for certain reasons or in certain contexts. For example, the Virginia Consumer Data Protection Act does not apply to publicly available information, including information that we reasonably believe Virginia residents have lawfully made available to the general public. As another example, we will not delete personal information when it is necessary to maintain that personal information to comply with a legal obligation.
If we don’t grant your request, we will explain why it cannot be fulfilled. You may appeal our decision by emailing us at legal@openap.tv with the subject line “Appeal of Request” and including our response to your request. We will also include this information in our response to your request. If you appeal our decision, we have 60 days to respond.
In addition, when you visit our website, we may use the information we collect automatically through online interactions, as described above in the Interest-Based Advertising section for targeted advertising, which we may disclose or make available to advertising and social media networks. Although we do not engage in targeted advertising, as it is defined under the Virginia Consumer Data Protection Act, we do process CDPA personal data as a controller that may be subsequently used by our clients for targeted advertising.
Additional Information for Individuals in Utah
Beginning December 31, 2023, we may be subject to the Utah Consumer Privacy Act based on our interactions with Utah residents and our use of their personal information. The Utah Consumer Privacy Act provides Utah residents enhanced rights with respect to their personal information when acting in an individual or household context.
In this section, "UCPA personal data” refers to personal information that is linked or reasonably linkable to an identified or identifiable Utah resident. UCPA personal data does not include de-identified or publicly available information, as defined in the Utah Consumer Privacy Act.
First, a Utah resident has the right to confirm whether we are processing UCPA personal data concerning them and to access their UCPA personal data.
Second, a Utah resident may have the right to request we delete UCPA personal data concerning them.
Third, a Utah resident may also request to receive their UCPA personal data that they provided to us in a portable and, if technically feasible, readily usable format.
Fourth, a Utah resident may opt out of processing their UCPA personal data for purposes of targeted advertising or the sale of their UCPA personal data.
To exercise your rights, please email us at legal@openap.tv. If you email us, please put in the subject line of your email the right you are seeking to invoke: “Utah Right to Access,” “Utah Right to Delete,” “Utah Right to Portability,” or “Utah Right to Opt Out.”
You may submit multiple requests at once in an email. Subject to certain exceptions, ordinarily there is no cost for submitting your first request; if you submit more than one request in a twelve-month period, we may charge you a reasonable fee to cover the administrative costs of complying with your requests or decline to act on your requests. We are permitted to use commercially reasonable efforts to authenticate you are who you say you are, and if we are unable to do so, we may request that you provide additional information reasonably necessary to authenticate you. If we cannot authenticate you or your authority, we will deny the request.
If you submit a request, we will inform you of the result of your request (including, if you submit a Right to Access, your personal information) without undue delay and within 45 days after we receive your request. We may extend that deadline by 45 days, to 90 days in total, in some cases. If we extend the deadline, we will tell you that and why.
The Utah Consumer Privacy Act includes exceptions for personal information regulated under other laws or maintained for certain reasons or in certain contexts. For example, the Utah Consumer Privacy Act does not apply to publicly available information, including information that we reasonably believe Utah residents have lawfully made available to the general public. As another example, we will not delete personal information when it is necessary to maintain that personal information to comply with a legal obligation.
In addition, when you visit our website, we may use the information we collect automatically through online interactions, as described above in the Interest-Based Advertising section for targeted advertising, which we may disclose or make available to advertising and social media networks. Although we do not engage in targeted advertising, as it is defined under the Utah Consumer Privacy Act, we do process UCPA personal data as a controller that may be subsequently used by our clients for targeted advertising.