California Consumer Privacy Act (CCPA) Disclosure

What is the CCPA?

The California Consumer Privacy Act (CCPA) is a state law that grants California residents rights related to the access, deletion, and sharing of their data. It applies to businesses that meet certain thresholds and collect personal information from California residents.

Information collected

We do not engage in selling or renting your personal information to others for promotional or marketing purposes. However, we may collect your personal information in the following cases to provide you with SIMPLE IRA, SEP IRA, and Individual IRA management services:

• Information provided during account creation and service requests: This includes your name, business address, email address, phone number, and payment information. Your phone number may also be used to notify you about updates related to your account or service.
• User feedback and interactions: We may collect information provided through user feedback, community discussions, chats, and surveys when users use our platform.
• Customer support and technical assistance: Information is provided while interacting with our customer support or technical team as they assist you in managing your SIMPLE IRA, SEP IRA, and Individual IRA.
• System information: Information collected automatically when you interact with our site, such as your IP address, browser type, and device-related data.
• File uploads: If you upload documents or files from your desktop or mobile device to manage your SIMPLE IRA, SEP IRA, or Individual IRA, we collect and securely store these files and data.
• Payment information: When paying for our services, we collect your credit card information (number and expiration date). However, we do not store this data, as payments are processed through authorized gateways for authentication and approval.
• Referral service information: If you use our referral service to tell a friend about WealthRabbit, we may collect your friend's name and email address.
• Third-party data: We may collect information from publicly available sources or third-party partners to help optimize marketing efforts or enhance our service delivery.

If you have used our services within the last twelve months, we may have collected the following categories of Personal Information from you:

• Identifiers (e.g., name, email, IP address)
• Commercial information (e.g., transaction history, service requests)
• Internet or other electronic network activity (e.g., interactions with our site)
• Geolocation data (e.g., your physical location while using the service)

Exercising your CCPA rights

You have the right to request access to, deletion of, opt out of, correct, or details about the personal information collected by WealthRabbit. To exercise these rights, please contact us through the designated form on our website or email our privacy team. We will respond to your request within the timeframe required by law.

Your CCPA rights

Under the CCPA, California residents have the right to:

1. Right to knowYou can request details about the categories and specific pieces of personal information we have collected about you.
2. Right to deleteYou can ask us to delete the personal information we have collected from you, with certain legal exceptions.
3. Right to opt-outYou have the right to direct us not to sell or share your personal information. We do not sell personal data; however, you can still exercise this right through our privacy settings.
4. Right to correctYou may request corrections to inaccurate personal data we hold about you.
5. Right to non-discriminationWe will not discriminate against you for exercising your CCPA rights. This includes not denying you services, charging different prices, or providing a different level or quality of service.

Information not considered personal information

Under the CCPA, the following types of information are not included under the definition of Personal Information:

• Publicly available information, de-identified or aggregated data, or information exempt from the CCPA, such as:
  • Protected Health Information (PHI) is governed by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA), or clinical trial data.
  • Personal Information is regulated by industry-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-bliley Act (GLBA), the California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994.

How to exercise your rights

You can exercise any of your rights by:

• Calling us at (704) 912-5450
• Emailing us at [email protected]

Only you, or someone legally authorized to act on your behalf, may submit a verifiable request related to your personal information.

You may submit a verifiable consumer request for access or data portability no more than twice within 12 months. The verifiable request must:

• Provide sufficient information to verify that you are the individual whose personal information we collected or an authorized representative.
• Describe your request in sufficient detail for us to understand, evaluate, and respond appropriately.

We cannot respond to requests without verifying your identity or authority. You do not need to create an account to make a verifiable consumer request. We will only use the personal information provided in such requests to verify your identity or authority to act.

CCPA obligation

In compliance with the California Civil Code, you may request a personal data report, opt-out, correct, or request deletion of your data by clicking the button below.

CCPA Obligation

To verify your identity, we may ask for certain information before fulfilling your request.

Response timing and format

We aim to respond to a verifiable consumer request within 45 days of receipt. If more time is required (up to 90 days), we will inform you of the reason and extension period in writing.

• If you have an account with us, we will deliver the response to that account.
• If you do not have an account, we will deliver the response via mail or electronically, per your choice.
• Our response will only cover the 12 months preceding the request. If we are unable to comply with your request, we will explain the reasons.
• For data portability requests, we will provide your personal information in a format that is readily usable, allowing you to transfer it to another entity without hindrance.

We do not charge a fee for processing requests unless they are excessive, repetitive, or unfounded. If a fee is warranted, we will notify you with an estimate before proceeding.

Data security

We implement robust technical and organizational security measures to protect your information from unauthorized access, disclosure, or misuse. However, no system is fully secure, and we encourage you to also take steps to protect your information.

Request your PII information

In compliance with the California Civil Code, you may request a personal data report or request deletion of your data by clicking the button below.

Updates to this CCPA notice

We may update this notice as necessary to stay compliant with relevant laws. updates will be posted here, with the effective date noted.

Last updated: August 26, 2025

For more information about the CCPA, visit the California Attorney General’s CCPA Page