California Consumer Privacy Rights
California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA) — Last updated: August 24, 2026
Categories of Personal Information We Collect
ClaraPay collects the following categories of personal information in connection with our debt collection services:
- Identifiers (name, address, email, phone number, IP address)
- Financial information (account balance, payment history)
- Commercial information (debt account details, original creditor information)
- Internet or network activity (pages visited, session logs)
- Communications (emails, SMS, call records related to your account)
We collect this information to administer debt accounts, process payments, comply with legal obligations, and communicate with you about your account.
We Do Not Sell Your Personal Information
ClaraPay does not sell your personal information to third parties for monetary or other valuable consideration, as defined under the CCPA/CPRA. We have never sold, and do not sell, information about consumers whose accounts we service.
We do, however, share limited information for cross-context behavioral advertising in one narrow circumstance, and we want to be precise about it. On our public marketing pages only— our home page and our pricing, features, contact, book-a-demo, healthcare, commission, learn, future, get-started, brand and build pages, and these legal pages — we use advertising technologies from LinkedIn, Meta, and Google. These send your browsing activity on those pages to those platforms so we can measure our advertising and reach similar audiences. Under the CPRA that counts as “sharing”, even though no money changes hands. For California residents this sharing begins when you arrive and continues until you opt out; the next section explains how.
This does not happen anywhere in the consumer portal, the client portal, or any signed-in area. Nothing about your account, your balance, your payments, or the fact that you have a debt with us is ever shared with an advertising platform. Those pages carry no advertising technology at all.
Your Rights as a California Resident
Right to Know
You may request that we disclose the categories and specific pieces of personal information we have collected about you, the sources, our business purpose for collecting it, and any third parties we share it with.
Right to Delete
You may request that we delete personal information we have collected about you, subject to certain exceptions. We may retain information where required by law (including FDCPA record-keeping requirements), necessary to complete a transaction, or needed for other legally permitted purposes.
Right to Correct
If you believe we hold inaccurate personal information about you, you may request that we correct it. We will use commercially reasonable efforts to honor your request.
Right to Opt Out of Sale / Sharing
We do not sell your personal information. We do share browsing activity on our public marketing pages for cross-context behavioral advertising, as described above, and you have the right to opt out of that sharing.
To opt out, use the Your Privacy Choices link in the footer of our marketing and legal pages and turn off the Advertising category. Your choice takes effect immediately, and we keep honoring it until you tell us otherwise. We store an opt-out for up to five years rather than expiring it on the same clock as a permission. Some browsers impose their own shorter limit on how long any site may remember a setting; if yours removes the record, the banner will ask you again rather than assume.
We also honor the Global Privacy Control signal. If your browser or a privacy extension sends one, we treat it as an opt-out of sharing and apply it automatically — you do not need to do anything else, and we do not require you to create an account or verify your identity to exercise this right.
Right to Non-Discrimination
We will not discriminate against you for exercising any of your CCPA rights. We will not deny you services, charge different prices, or provide a different level of service based on your exercise of these rights.
Right to Limit Use of Sensitive Personal Information
We only use sensitive personal information (such as financial data) for the purpose of providing our debt collection services. We do not use it for inferring characteristics or other secondary purposes that would require a limitation right opt-out.
How to Submit a Request
If you have an account with us, the simplest way to exercise your right to delete is from the Data Deletion control on the Preferences page of your consumer portal. Because you are signed in, your authenticated portal session confirms the request is yours, so no separate identity check is required.
You can also submit any privacy request through our contact page. Include your full name, the email or phone number associated with your account, and a description of your request. For requests made this way, our compliance team verifies your identity before processing, using information already associated with your account.
We will review and respond to verifiable requests within 30 days. If a request is especially complex and we need additional time, we will let you know, as permitted by law.
You may also have an authorized agent submit a request on your behalf through our contact page. We handle these through the same manual review and may require written authorization from you along with verification of both your identity and the agent’s.
Data Retention
We retain personal information for as long as necessary to fulfill the purposes for which it was collected and to satisfy our legal, accounting, and reporting obligations — including the record-keeping requirements of the FDCPA and applicable state law. Different categories of information are kept for different periods:
- Account, payment, and letter records are retained for as long as we are required to keep them under the FDCPA and state record-keeping rules. Because that obligation extends through the life of the account and beyond, these records are not deleted on a fixed schedule.
- Contact details (phone numbers and email addresses) tied to an account are purged approximately one year after the account reaches a terminal status — for example closed, recalled, returned, paid in full, or settled — unless the same consumer still has an active account with us.
- Communications records are retained on a rolling basis: text messages and email for about 24 months. Physical letters are retained to meet FDCPA obligations.
- Call recordings are retained for about 12 months.
- Compliance audit logs are retained for at least three years to meet regulatory and evidentiary requirements.
When you exercise your right to delete, we erase your contact details and other non-required identifiers. We retain the account, payment, communication, and audit records the law requires us to keep, together with the name and account information needed to identify you on those retained records.