Privacy Notice for California Residents 
Overview
This Privacy Notice for California Residents supplements Tomba's Privacy Policy and applies exclusively to visitors, users, and others who reside in the State of California ("consumers" or "you").
We adopt this notice to comply with the California Consumer Privacy Act of 2018 (CCPA). Terms defined in the CCPA have the same meaning in this Notice.
Information We Collect
We collect information that identifies, relates to, describes, or could reasonably be linked to you or your household ("personal information").
Exclusions: Personal information does not include publicly available information from government records.
Categories of Personal Information Collected
In the past 12 months, we have collected the following categories:
| Category | Examples |
|---|---|
| Identifiers | Name, email address, IP address, unique identifiers, social media handles |
| California Customer Records | Name, address, telephone number, payment information |
| Commercial Information | Products or services purchased, transaction history |
| Internet Activity | Browsing history, search history, website interactions |
| Geolocation Data | City, state, country, business address |
| Professional Information | Employer, industry, job title, seniority |
Sources of Personal Information
- Directly from you - Forms, account registration, purchases
- Indirectly from you - Website activity, usage patterns
- Publicly available sources - Business websites indexed by our crawler
Use of Personal Information
We use personal information to:
- Fulfill transactions and provide requested services
- Create, maintain, and secure your account
- Process payments and prevent fraud
- Provide customer support and respond to inquiries
- Personalize your experience and deliver relevant content
- Maintain security and integrity of our services
- Conduct research, testing, and product development
- Comply with legal obligations
- Complete mergers, acquisitions, or asset transfers
We will not use personal information for materially different purposes without notice.
Sharing Personal Information
We may share personal information with third parties for business purposes. When we do, we require recipients to keep information confidential and use it only for the contracted purpose.
Categories Disclosed for Business Purposes
In the past 12 months, we have disclosed:
- Identifiers
- California Customer Records categories
- Commercial information
- Internet activity
- Geolocation data
Recipients
We disclose personal information to:
- Service providers (payment processing, hosting, analytics)
- Business partners (with your consent)
- Legal authorities (when required by law)
Sale of Personal Information
We do not sell personal information. We have not sold personal information in the preceding 12 months.
Your CCPA Rights
California residents have specific rights regarding personal information:
Right to Know
You may request disclosure of:
- Categories of personal information collected
- Sources of personal information
- Business purposes for collection or sale
- Categories of third parties with whom we share
- Specific pieces of personal information collected
Right to Delete
You may request deletion of personal information we collected, subject to certain exceptions.
We may deny deletion if the information is necessary to:
- Complete a transaction or provide a service
- Detect security incidents or fraudulent activity
- Debug products or fix errors
- Exercise free speech or other legal rights
- Comply with legal obligations
- Conduct research in the public interest
- Enable internal uses aligned with your expectations
Right to Opt-Out
You have the right to opt out of the sale of your personal information. Since we do not sell personal information, this right is not applicable.
Right to Non-Discrimination
We will not discriminate against you for exercising CCPA rights. We will not:
- Deny goods or services
- Charge different prices
- Provide different quality of service
- Suggest you may receive different treatment
Exercising Your Rights
Submit a Request
To exercise your rights, contact us at:
Email: privacy@tomba.io
Verification
You (or an authorized representative) may submit a verifiable consumer request. You may make an access or portability request twice per 12-month period.
Your request must:
- Provide sufficient information to verify your identity
- Describe your request with enough detail for us to respond
We cannot respond if we cannot verify your identity. Requests through password-protected accounts are considered sufficiently verified.
Response Timeline
We will respond to verifiable requests within 45 days. If we need more time (up to 90 days), we will notify you in writing.
Responses cover the 12-month period before the request. We will explain any reasons we cannot comply.
We do not charge fees for processing requests unless they are excessive, repetitive, or manifestly unfounded.
Minors
If you are 16 years or older, you may opt out of personal information sales at any time. We do not sell personal information of consumers we know are under 16.
Shine the Light
California's "Shine the Light" law (Civil Code § 1798.83) permits California residents to request information about disclosure of personal information to third parties for direct marketing.
To make such a request, email: privacy@tomba.io
Changes to This Notice
We may amend this notice at any time. Changes will be posted with an updated effective date. Continued use constitutes acceptance of changes.
Contact Information
For questions about this notice or your rights:
Email: privacy@tomba.io
Mail: Tomba Technology Web Service LLC 2803 Philadelphia Pike Suite B #1228 Claymont, Delaware 19703 United States