Do Not Sell or Share My Personal Information
California Consumer Privacy Act (CPRA) — request submitted within 30 days.
Defaults does not sell your personal information. We also do not share personal information for cross-context behavioral advertising. We don't run third-party ad pixels on this site and we don't trade your assessment data with anyone.
That said, you have the right under California law (Cal. Civ. Code §1798.120, §1798.135) to direct us not to sell or share your information, and you have the right to know what we collect. The notice below summarizes our practices in the categories required by CPRA. Submit the form to file a formal opt-out request — we'll confirm by email within 30 days.
Notice at collection (CPRA §1798.100)
Categories of PI we collect
- Identifiers: email address, name (via Clerk).
- Customer records: billing identifiers from Dodo Payments (we never see card numbers).
- Internet/electronic activity: pages viewed, button clicks (anonymized via PostHog).
- Inferences: Big Five / HEXACO domain and facet scores computed from your assessment answers.
Sources
- Directly from you (account fields, assessment responses).
- From service providers (auth events from Clerk, payment status from Dodo).
- Generated by us (computed scores, report content).
Business purposes
- Generating your personality report.
- Processing payments and granting paid features.
- Sending transactional and product emails (with opt-out).
- Aggregated product analytics.
Disclosure / sharing
- Service providers under written contract: Clerk, Neon, Vercel, Resend, PostHog, Dodo Payments, Anthropic (for report text generation).
- No sale of personal information.
- No sharing for cross-context behavioral advertising.
Retention
We retain assessment data for as long as your account is active. Delete your account at any time from /settings/privacy — hard delete completes within 30 days.
File an opt-out request
You don't need a Defaults account to file this request. We'll match your email against any account on file and log the opt-out either way.
Authorized agents
If you're an authorized agent acting on a California resident's behalf, email hello@knowthydefaults.com with a copy of your written authorization. We'll verify the request per CPRA §1798.130(a)(7).
Global Privacy Control
We honor the Global Privacy Control (GPC) browser signal as a valid opt-out request under CPRA §1798.135(b). If your browser sends Sec-GPC: 1, we treat that as a Do-Not-Sell / Do-Not-Share request automatically.