State Privacy Notice

This State Privacy Notice supplements SpendCaddie's Privacy Policy. It describes additional rights that may be available to residents of certain U.S. states, including California and Colorado, to the extent applicable law applies to SpendCaddie.

SpendCaddie is a U.S.-only consumer debt planning and debt coaching service operated by Bobby Built Ventures, LLC d/b/a SpendCaddie.

1. Applicability

Some U.S. state privacy laws apply only to businesses that meet certain thresholds or process certain types or volumes of personal information. Nothing in this notice is an admission that any particular law applies to SpendCaddie in every circumstance.

As a product practice, SpendCaddie makes core access, correction, deletion, export, opt-out, and preference controls available to U.S. users where reasonably available, subject to verification, legal exceptions, security exceptions, technical limitations, and account status.

2. Categories of personal information

SpendCaddie may collect the following categories of personal information:

We do not intentionally collect Social Security numbers, driver's license numbers, government ID numbers, race, ethnicity, religion, health diagnoses, precise geolocation, citizenship status, sexual orientation, union membership, or biometric identifiers used for identification as part of the core Service.

3. Sources of personal information

We collect personal information from:

• you;
• your device or browser;
• your use of the Service;
• Plaid and connected financial institutions when you authorize a connection;
• Stripe for web billing;
• Apple and RevenueCat for iOS billing and entitlement status;
• Supabase, Vercel, Resend, Anthropic, Upstash, Expo, browser push providers, and other service providers; and
• legal, security, or compliance sources where necessary.

4. Purposes for collection and processing

We use personal information to:

• provide and operate the Service;
• create and maintain accounts;
• authenticate users;
• generate deterministic debt plans and projections;
• connect read-only financial accounts through Plaid;
• process payment logs;
• provide AI explanations;
• manage subscriptions and entitlements;
• send transactional communications;
• provide support;
• manage consent and preferences;
• maintain security;
• prevent fraud and abuse;
• comply with law;
• enforce terms;
• process privacy requests; and
• improve the Service.

5. Disclosure of personal information

We disclose personal information to service providers and processors that help us operate the Service. These may include Plaid, Stripe, Apple, RevenueCat, Supabase, Vercel, Resend, Anthropic, Upstash, Expo, browser push providers, and similar providers.

We may also disclose information at your direction, for legal and safety reasons, in connection with business transfers, and as otherwise described in our Privacy Policy.

6. Sale and sharing

SpendCaddie does not sell personal information. SpendCaddie does not currently share personal information for cross-context behavioral advertising. SpendCaddie does not currently use advertising cookies, ad pixels, or retargeting pixels.

7. Sensitive personal information

SpendCaddie treats financial account data as highly sensitive personal information. Some information may be legally classified as sensitive personal data under applicable law if it falls within categories defined by that law.

We use sensitive personal information only as reasonably necessary to provide the Service, secure accounts, process requests, prevent fraud, comply with law, and otherwise as permitted by applicable law. We do not use sensitive personal information to infer characteristics about you for advertising.

8. Your rights

Depending on your state and applicable law, you may have rights to:

• confirm whether we process your personal information;
• access personal information;
• know categories and specific pieces of personal information;
• correct inaccurate personal information;
• delete personal information;
• obtain a portable copy of personal information;
• opt out of sale;
• opt out of sharing for cross-context behavioral advertising;
• opt out of targeted advertising;
• opt out of certain profiling;
• limit certain uses and disclosures of sensitive personal information;
• appeal a denied request; and
• not be discriminated against for exercising privacy rights.

You can exercise many rights in account settings or by emailing privacy@spendcaddie.com.

9. Verification

We may verify your identity before fulfilling a request. Verification may include matching the email address on your request to your account, requiring login, asking for information we already maintain, or using another reasonable method.

We may deny or limit requests where permitted by law, including if we cannot verify your identity, the request is excessive or unfounded, disclosure would compromise security, disclosure would reveal trade secrets, or retention is permitted or required by law.

10. Authorized agents

Where applicable law permits authorized agents, you may use an authorized agent to submit a request. We may require proof of authorization and may ask you to verify your identity directly with us.

11. Response timing

Where applicable law requires, we will respond to verified requests within 45 days and may extend by an additional 45 days when reasonably necessary, with notice to you.

12. California residents

To the extent the California Consumer Privacy Act, as amended, applies, California residents may have rights to know/access, delete, correct, opt out of sale or sharing, limit certain uses and disclosures of sensitive personal information, and non-discrimination.

SpendCaddie does not sell personal information and does not currently share personal information for cross-context behavioral advertising. We honor Global Privacy Control as a valid opt-out signal for SpendCaddie-controlled settings where applicable and technically detectable.

13. Colorado residents

To the extent the Colorado Privacy Act applies, Colorado residents may have rights to access, correct, delete, portability, opt out of sale, targeted advertising, or certain profiling, and appeal a denied request.

SpendCaddie does not sell personal data and does not currently process personal data for targeted advertising. We honor Global Privacy Control and similar universal opt-out mechanisms for SpendCaddie-controlled settings where applicable and technically detectable.

If we deny your Colorado privacy request and Colorado law gives you appeal rights, you may appeal by emailing privacy@spendcaddie.com with the subject line "Colorado Privacy Appeal." If your appeal is denied, you may contact the Colorado Attorney General.

14. Other U.S. states

Residents of states with comprehensive privacy laws may have additional rights depending on the effective date, scope, exemptions, and thresholds of those laws. SpendCaddie will process state privacy requests as required by applicable law and may voluntarily provide similar controls to all U.S. users.

15. Contact

Privacy Inquiries: privacy@spendcaddie.com
Bobby Built Ventures, LLC d/b/a SpendCaddie
1500 N Grant St, Ste R
Denver, CO 80203, USA