1.Scope of This Policy

This Privacy Policy applies to personal information we collect from California-based business customers, prospective customers, and visitors to the Site. We currently serve customers located in California, United States, only, and we do not knowingly direct the Services to or collect information from individuals located outside California. We do not knowingly serve international customers.

2.Children's Information

The Services are intended for use by businesses and adult professionals. We do not knowingly collect personal information from children under the age of 13, and the Services are not directed to children. The Children's Online Privacy Protection Act ("COPPA") does not apply to our Services. If you believe a child has provided us with personal information, please contact us at [email protected] and we will delete the information.

3.Information We Collect

3.1 Information You Provide Directly

When you create an account, purchase a subscription, or otherwise interact with the Services, we collect:

• Account information: name, email address, business name, employee scale, and county of operation.
• Payment information: limited card data stored by our payment processor on our behalf, specifically cardholder name, the last four digits of the card number, and the card brand. Full payment card numbers are not stored by MHR Products.
• Communications: messages you send to support and any information you voluntarily provide in those communications.
• Referral program data: a unique promotional code assigned to each customer for referral tracking, and the promo code (if any) entered by a new customer at signup.

3.2 Information Collected Automatically

When you use the Site, we and our service providers automatically collect certain information through cookies and similar technologies, including:

• Essential cookies: required for core Site functionality such as account login, session management, and payment processing.
• Analytics cookies: used to measure Site performance and understand how visitors interact with the Site (e.g., Google Analytics).
• Marketing cookies: used to deliver and measure relevant advertising and marketing communications, including widely used marketing tags and pixels from major advertising platforms.

We do not track which specific Templates customers download, and we do not collect detailed browser or device fingerprinting information beyond what is necessary for analytics and security.

3.3 Information from Third-Party Sources

We receive limited information about you from third parties that support our Services, including:

• Stripe (payment processor): transaction confirmations and the limited card data described above.
• Google Workspace (business productivity and email): account communications and email metadata.
• Google Analytics: aggregated and pseudonymous usage analytics.
• Email engagement data: open rates and click-through rates for newsletters and other emails we send.

4.How We Use Your Information

We use the personal information we collect for the following purposes:

• Service delivery: providing access to Templates, processing payments and renewals, and delivering newsletters and content updates.
• Account management and customer support: managing your subscription, responding to inquiries, and providing support.
• Marketing communications: sending marketing and promotional emails to individuals who have opted in to receive them, whether or not they are paying customers. We do not send unsolicited marketing emails to individuals who have not provided their email address through the Site or otherwise opted in.
• Newsletter delivery: the substantive newsletter (covering legislative updates and template-related content) is available only to paying Tier 2 and Tier 3 subscribers and is sent based on subscription status.
• Product improvement and analytics: analyzing how the Site and Services are used to improve features, performance, and user experience.
• Legal compliance: complying with applicable laws, regulations, court orders, and legal process.
• Fraud prevention and security: detecting, preventing, and addressing fraud, security incidents, and other harmful or unlawful activity.

5.How We Share Your Information

We share personal information only with the following categories of recipients, and only as necessary to operate the Services:

• Stripe, Inc. — payment processing.
• Google LLC — Google Workspace (business email and productivity) and Google Analytics (Site analytics).
• Amazon Web Services, Inc. (AWS) — cloud hosting and storage.
• Squarespace, Inc. — website hosting and related services.

Each of these service providers is contractually limited to processing personal information on our behalf and for the specific purposes for which we engage them. We may also disclose personal information when required to do so by law, in response to valid legal process, or to protect our rights, property, or safety, or that of our customers or others. In the event of a corporate transaction (such as a merger, acquisition, or sale of assets), personal information may be transferred as part of that transaction, subject to standard confidentiality protections.

6.Cookies, Tracking Technologies, and Global Privacy Control

As described in Section 3.2, the Site uses essential, analytics, and marketing cookies. You can manage cookie preferences through your browser settings or through the cookie controls available on the Site.

Global Privacy Control ("GPC"). The Site recognizes and honors GPC browser signals. When we detect a GPC signal from your browser, we treat it as a valid opt-out request with respect to any sale or sharing of personal information for cross-context behavioral advertising and will suppress applicable marketing trackers for that browsing session. Because we do not sell or share personal information, GPC primarily affects whether marketing cookies and pixels load on your visit.

7.Your Privacy Choices and CCPA Rights

California residents have specific rights under the CCPA. You can exercise these rights, manage cookie preferences, and confirm our practices regarding the sale or sharing of personal information through our "Your Privacy Choices" link, available in the footer of every page of the Site.

7.1 Categories of Information Collected (CCPA Disclosure)

In the past 12 months, we have collected the following categories of personal information, as defined by the CCPA:

• Identifiers: name, email address, business name, IP address, online identifiers (e.g., cookie IDs).
• Customer records: billing information, including cardholder name, last four digits of card number, and card brand (full card data is processed by Stripe and not stored by us).
• Commercial information: subscription tier, transaction history, referral codes used.
• Internet or other electronic network activity: cookie data, analytics data, email engagement data (open and click rates).
• Geolocation: county of operation as provided by you (no precise geolocation data is collected).
• Inferences: limited inferences drawn from analytics data for product improvement.

We do not collect sensitive personal information as defined by the CCPA.

7.2 Sources of Information

We collect personal information from: (a) you directly, when you sign up, purchase a subscription, or contact us; (b) automatically through your use of the Site (cookies, analytics tools); and (c) from our service providers (Stripe, Google, AWS, Squarespace) acting on our behalf.

7.3 Business Purposes for Collection

We collect personal information for the purposes described in Section 4 (Service delivery, account management, marketing to opted-in individuals, product improvement, legal compliance, and fraud prevention).

7.4 Categories of Recipients

We disclose personal information for business purposes to the categories of service providers listed in Section 5. We do not sell or share personal information.

7.5 Your Rights Under the CCPA

If you are a California resident, you have the following rights, subject to certain exceptions:

• Right to Know: request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes of collection, and the categories of recipients.
• Right to Delete: request deletion of personal information we have collected from you.
• Right to Correct: request correction of inaccurate personal information we maintain about you.
• Right to Opt Out of Sale or Sharing: as noted, we do not sell or share personal information, but you may confirm this election at any time.
• Right to Limit Use of Sensitive Personal Information: not applicable, as we do not collect sensitive personal information.
• Right to Non-Discrimination: we will not discriminate against you for exercising any of your CCPA rights.

7.6 How to Submit a Request

You may submit a verifiable consumer request through any of the following methods:

• Web form: the privacy request form available on the Site (also accessible via the "Your Privacy Choices" link).
• Email: send your request to [email protected] with the subject line "CCPA Request."
• Confirmation email link: a link to the privacy request form is also included in your signup confirmation email for your convenience.

We will verify your identity before responding to a request, as required by the CCPA. You may designate an authorized agent to make a request on your behalf, subject to verification. We will respond to verifiable requests within the timeframes required by law.

8.Data Retention

We retain personal information for up to five (5) years following your most recent interaction with the Services (or, for account holders, following cancellation or termination), for legal, accounting, fraud-prevention, and legitimate business purposes. We will honor verified deletion requests submitted under the CCPA in accordance with applicable law, except for information we are permitted or required to retain (for example, for tax records, audit trails, fraud prevention, or legal defense).

9.Data Security

We implement administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, or disclosure. These safeguards include encryption in transit (e.g., TLS) and encryption at rest for personal information stored in our systems and with our service providers.

Breach Notification. In the event of a security breach affecting your personal information, we will notify all affected customers without undue delay and in accordance with applicable law. Our notification will describe the nature of the breach, the categories of information affected (to the extent known), the measures we have taken to address the incident, and steps we are implementing to prevent future incidents. We may also provide guidance on protective steps you can take.

No security measure is perfect, and we cannot guarantee the absolute security of your personal information. You are responsible for safeguarding your account credentials.

10.Marketing Communications and Email Preferences

We send transactional emails (such as account confirmations, billing notifications, renewal reminders, breach notifications, and policy updates) from a dedicated billing email address. These transactional emails are necessary for the Services and cannot be unsubscribed from while your account is active.

We send marketing emails from a separate marketing email address only to individuals who have opted in to receive them. You may unsubscribe from marketing emails at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at [email protected]. Unsubscribing from marketing emails will not affect your receipt of transactional emails.

The substantive newsletter providing legislative updates and detailed compliance content is available only to paying Tier 2 and Tier 3 subscribers and is delivered as part of the Services.

11.Updating Your Information

You may access and update your account information at any time through your account portal at mhr-products.com. If you need assistance updating information that is not editable in the portal, please contact us at [email protected].

12.Third-Party Links and Services

The Site may contain links to third-party websites or services that are not operated by MHR Products. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites or services you visit.

13.Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated Policy on the Site, update the "Effective Date" above, and notify you by email from our billing email address (which is separate from our marketing email address) to the email associated with your account. Your continued use of the Services following the effective date of the updated Policy constitutes your acceptance of the changes.

14.Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

MHR Products LLC
Privacy and Legal Notices: [email protected]
Website: mhr-products.com
Privacy Request Form: available via the "Your Privacy Choices" link in the Site footer.