If you are a resident of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, New Hampshire, Delaware, Iowa, Nebraska, New Jersey, Tennessee, Minnesota, Maryland, Kentucky, Indiana, Rhode Island or another U.S. state that has similar privacy legislation (collectively, “Covered States”), you may have specific rights regarding your personal information under: the California Consumer Privacy Act (“CCPA”), Virginia Consumer Data Protection Act, Colorado Privacy Act, Connecticut Data Privacy Act, Utah Consumer Privacy Act, Texas Data Privacy and Security Act, Oregon Consumer Privacy Act, Montana Consumer Data Privacy Act, New Hampshire Data Privacy Act, Delaware Personal Data Privacy Act, Iowa Consumer Data Protection Act, Nebraska Data Privacy Act, New Jersey Data Protection Act, Tennessee Information Protection Act, Minnesota Consumer Data Privacy Act, Maryland Online Data Privacy Act, Kentucky Consumer Data Protection Act, Indiana Consumer Data Protection Act, Rhode Island Data Transparency and Privacy Protection Act or similar laws in other U.S. states (collectively, “State Privacy Laws”). This section describes the rights that consumers of Covered States have and explains how to exercise those rights. To be clear, these rights are granted only to the extent that Kerv is subject to such State Privacy Laws and you are considered a consumer of Covered State and we are acting as a “controller” or “business” (as applicable) under State Privacy Laws with respect to your personal information. The rights in this section are not intended to grant you additional rights, but only your rights under the State Privacy Laws.

The categories of personal information we process, our purposes for processing your personal information, the categories of personal information that we share with third parties, and the categories of third parties with whom we share it are set forth in the terms of the Privacy Policy above.

In addition to the rights set forth in our Privacy Policy, State Privacy Laws may, depending on your state of residence, provide you with the following rights:

• Right to know. You may have the right to know whether we process your personal information and to access such personal information. You may also have the right to request that we disclose certain information to you about our collection, use, or disclosure of your personal information.  Residents of Minnesota or Oregon have the right to: (i) confirm additional information about the categories of personal information we have processed about them; and (ii) obtain a list of third parties to which we have disclosed the personal information of Minnesota or Oregon consumers. Residents of Delaware or Maryland have the right to obtain a list of the categories of third parties to which we have disclosed the personal information of Delaware or Maryland consumers
• Right to data portability. You may have the right to obtain a copy of your personal information that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another business without hindrance, where the processing is carried out by automated means. 
• Right to delete. You may have the right to delete personal information that you have provided or that we have obtained about you. Please note that we may deny such a request if the requested deletion falls under an exception as set forth in the State Privacy Laws. Additionally, for residents of Colorado, Connecticut, and Texas, if you request deletion of your personal information and we have obtained such information from a third-party source, we may retain such data by keeping a record of the deletion request and the minimum data necessary to ensure that your personal information remains deleted from our records and that such retained data is not used for any other purpose, or we may opt you out of the processing of such personal information for any purpose except for those allowed under State Privacy Laws. Some State Privacy Laws, like those of Iowa and Utah, limit this right to only the data you have provided us.
• Right to correct. You may have the right to correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes for which we process it. 
• Right to opt out. You may have the right to opt out of the processing of your personal information for purposes of: (i) targeted advertising; (ii) the sale of personal information; (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you or (iv) selling/sharing (as defined by the CCPA).
  
  We do not use your personal information for targeted advertising (also called “sales” or “shares” under the CCPA).
  
  We do not use personal information collected on this Website for profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
  
  Where required by State Privacy Laws, we will treat valid opt-out preference signals (such as the Global Privacy Control) as a request to opt-out.

• Right to Limit the Use of Sensitive Personal Information. We do not knowingly collect sensitive personal information through the Website.
• Right to nondiscrimination. You have the right not to receive discriminatory treatment by us for the exercise of your privacy rights. Unless permitted by the State Privacy Laws, we will not:
  • Deny you goods or services;
  • Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;
  • Provide you a different level or quality of goods or services; or 
  • Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

EXERCISING YOUR U.S. STATE PRIVACY RIGHTS. 

To exercise any of the rights described above, you may:

• Email us at  dpo@kerv.ai.
• Fill out our webform at  https://kerv.ai/consent-and-opt-out/

Only you, or a person or business entity that you authorize to act on your behalf (an “authorized agent”), may make the requests set forth above. You may also make a request on behalf of your minor child. If you do so, the agent must present signed written permission to act on your behalf and you may also be required to independently verify your identity. If you are an authorized agent or an adult acting on behalf of your minor child, please reach out by emailing to dpo@kerv.ai so we can verify your authority.

In order to protect the security of your personal information, we will not honor a request if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.  However, we will process opt-out requests without any additional verification, unless we suspect fraud. The method used to verify your identity will vary depending on the nature of the request. Generally speaking, verification will be performed through technical means of matching your device or identifiers to the data we possess.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

We will make every effort to respond to your request within 45 days from when you contacted us. If you have a complex request, the State Privacy Laws may allow us up to 90 days to respond. We will still contact you within 45 days from when you contacted us to let you know we need more time to respond.

If we decline to take action on a request that you have submitted, we will inform you of our reasons for doing so, and provide instructions for how to appeal the decision. Depending on your state of residence you may have the right to appeal within a reasonable period of time after you have received our decision. If you have this appeal right, within 60 days (or 45 days for residents of Colorado) of our receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If we deny your appeal, we will provide you with a method for contacting your state attorney general’s office to submit a complaint to the extent required by State Privacy Laws.

In addition to the above rights, under California Civil Code Section 1798.83 (“Shine the Light”), California residents may have the right to request in writing from businesses with whom they have an established business relationship: (a) a list of the categories of personal data, as defined under Shine the Light, such as name, email address, and mailing address, and the type of services provided to the customer that a business has disclosed to third parties (including affiliates that are separate legal entities) during the immediately preceding calendar year for the third parties’ direct marketing purposes; and (b) the names and addresses of all such third parties. To request the above information, please contact us by email at dpo@kerv.ai. If you do not want your personal data shared with any third party who may use such information for direct marketing purposes, then you may opt out of such disclosures by sending an email to us at dpo@kerv.ai.