6. Your Rights & Choices

At RaiseIt, we believe transparency and user control are fundamental to trust. This section outlines your rights regarding your personal information and explains how you can exercise those rights. Applicable rights may vary based on your jurisdiction, but we strive to provide clear, actionable options for all users globally.

6.1 Rights Under GDPR & UK GDPR

If you reside in the EEA or the UK, data protection laws grant you the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we process about you, including details on how it is used.
• Right to Rectification: Ask us to correct inaccurate, incomplete, or outdated information.
• Right to Erasure: Request deletion of your data when it is no longer necessary for the original purpose, or if you withdraw consent.
• Right to Restrict Processing: Limit how we use your data under certain circumstances, such as when accuracy is contested.
• Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format and transfer it to another controller.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes at any time.
• Right to Withdraw Consent: Withdraw consent for processing activities where consent is the legal basis, without affecting prior lawful processing.
• Automated Decision-Making: You have the right not to be subject to solely automated decisions, including profiling, that produce legal or similarly significant effects.

6.2 Rights Under California Privacy Law (CCPA/CPRA)

California residents are afforded specific rights under the California Consumer Privacy Act and the California Privacy Rights Act:

• Right to Know: Request disclosure of categories and specific pieces of personal information collected, used, shared, or sold in the past 12 months.
• Right to Delete: Request deletion of personal information collected or maintained by RaiseIt, subject to certain legal exceptions.
• Right to Correct: Request correction of inaccurate personal information we hold about you.
• Right to Limit Use & Sharing: Opt out of the sale or sharing of sensitive personal information for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not deny services, charge different prices, or provide a different quality of service because you exercise your privacy rights.

6.3 Marketing & Communications Preferences

You maintain full control over how we communicate with you. You may update your preferences at any time by:

• Clicking the "Unsubscribe" link at the bottom of any promotional email.
• Visiting Account Settings > Notifications to toggle email, SMS, or push preferences.
• Opting out of personalized advertising via Your Ad Choices or DAA Opt-Out.

Please note that opting out of marketing communications does not prevent us from sending transactional, security, or account-related messages necessary for your use of RaiseIt.

6.4 Cookies & Tracking Technologies

RaiseIt uses cookies, local storage, and similar technologies to ensure platform functionality, analyze usage trends, and deliver relevant experiences. You can manage these preferences through:

• The initial Cookie Consent Banner that appears on your first visit.
• Our centralized Cookie Preference Center.
• Your browser or device settings (blocking, deleting, or restricting cookies).

Disabling certain cookies may impact platform performance or limit access to personalized features.

6.5 How to Exercise Your Rights

To submit a privacy request or exercise any of the rights outlined above, please use one of the following secure channels:

1. Online Portal: Submit a verified request via our Data Subject Request Form.
2. Email: Contact our Privacy Team at privacy@raiseit.com with the subject line "Privacy Request".
3. Mail: Send a written, signed request to: RaiseIt Inc., Privacy Department, 100 Innovation Drive, Suite 400, San Francisco, CA 94105, USA.

6.6 Verification & Response Timeline

To protect your data and prevent unauthorized access, we may need to verify your identity before processing your request. This typically involves confirming your registered email address, account details, or other reasonable verification steps.

We aim to acknowledge receipt of your request within 7 business days and respond substantively within 30 days. For complex or numerous requests, we may extend this timeline by an additional 60 days, with prior notification and justification. All requests are processed free of charge, except where local law permits us to charge a reasonable fee for manifestly unfounded, repetitive, or excessive requests, or to extend the response period.

6.7 Third-Party Services & External Links

RaiseIt integrates with trusted payment processors, analytics providers, and marketing partners. While we contractually require these partners to comply with applicable privacy standards, your rights regarding data shared with them should typically be exercised directly with those third parties. We maintain a current list of data sharing partners in our main Privacy Policy.