Do Not Sell My Personal Information
Effective July 17, 2026 · v1.1.0 · Material changes will be posted here with an updated effective date.
Our commitment
AutoSAM, operated by GovCertix LLC (“we,” “us,” “our”), does not sell personal information as defined under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).
We also do not share personal information for cross-context behavioral advertising purposes. We do not participate in data-broker networks, real-time bidding, retargeting, or any similar data exchange arrangements. All data sharing is strictly limited to service providers operating under binding contractual obligations to process data only on our behalf and only for the purposes described in this page and our Privacy Policy.
AutoSAM is in an early-access, pre-general-availability phase; the tables below reflect the personal information AutoSAM actually collects and shares today, through the marketing-site lead form, not a live product.
Categories of personal information we collect
Under CCPA/CPRA, the following table describes the categories of personal information AutoSAM collects today, examples of each, and the business purpose for collection:
| CCPA Category | Examples | Business Purpose |
|---|---|---|
| Identifiers | Name, email address, IP address, user agent (from the lead form and server logs) | Responding to inquiries, communication, security |
| Internet or other electronic network activity | Page views, feature interactions, session data (PostHog, only with consent) | Site analytics, performance monitoring |
| Professional or employment-related information | Company name, job title, role, business type (user-provided on the lead form) | Qualifying and responding to your inquiry |
Once AutoSAM reaches general availability, this table will expand to include commercial information (subscription and billing data) and other categories tied to product accounts. For more detail on data retention periods, see our Privacy Policy.
How we share personal information
AutoSAM shares personal information only with service providers (subprocessors) who are contractually bound to process data solely on our behalf and only for the purposes of operating the marketing site and, once live, delivering the AutoSAM platform. All sharing is for service delivery only; we do not share personal information for advertising, marketing by third parties, or any purpose unrelated to operating the service.
Current recipients.
| Service Provider | Data Shared | Purpose |
|---|---|---|
| Vercel Inc. | Request logs, IP addresses | Application hosting for the marketing site |
| Microsoft Corporation | Lead-form and contact-form submission content, email addresses | Exchange Online / M365 SMTP for outbound lead-form and contact-form email |
| PostHog Inc. | Usage events, anonymized identifiers | Product analytics; loaded per the Analytics Behavior statement above |
| Sentry Inc. | Error traces | Functional error monitoring |
Planned recipients (activated at product general availability).
| Service Provider | Data Shared | Purpose |
|---|---|---|
| Supabase Inc. | Account data, authentication tokens | Application database, authentication, and storage |
| Stripe Inc. | Billing and payment information | Payment processing |
For the full list of subprocessors, their data locations, and privacy policies, see our Subprocessors page.
Sensitive personal information
AutoSAM does not intentionally solicit sensitive personal information as defined under CPRA. This includes Social Security numbers, driver's license or state ID numbers, financial account numbers with access credentials, precise geolocation, racial or ethnic origin, religious beliefs, biometric information, health data, and sexual orientation.
The marketing lead form's free-text “Message” field is unstructured. Do not submit sensitive personal information, confidential contract terms, Controlled Unclassified Information (CUI), ITAR/EAR‑controlled data, or other procurement-sensitive material via this form. If you inadvertently submit such data, contact privacy@autosam.io and we will delete it from our records and email store.
Your rights under California law
If you are a California resident, the CCPA/CPRA grants you the following rights regarding your personal information:
- Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business purposes for collecting it, and the categories of third parties with whom we have shared it.
- Right to Delete: You may request that we delete the personal information we have collected about you, subject to certain exceptions (for example, data required for legal or accounting obligations).
- Right to Correct: You may request that we correct inaccurate personal information that we maintain about you.
- Right to Opt-Out of Sale / Sharing: You have the right to opt out of the sale or sharing of your personal information. However, this right is not applicable to AutoSAM because we do not sell or share personal information as defined under CCPA/CPRA.
- Right to Limit Use of Sensitive Personal Information: You have the right to limit the use and disclosure of sensitive personal information. This right is not applicable to AutoSAM because we do not intentionally collect sensitive personal information.
- Right to Non-Discrimination: We will not deny you services, charge you different prices, provide a different level or quality of service, or suggest that you will receive any of these as a result of exercising your privacy rights.
How to submit a request
To exercise any of the rights described above, please email privacy@autosam.io with the subject line “California Privacy Request.” Include your full name and the email address you used to contact AutoSAM so we can locate your records.
This page describes California-specific rights and process. Residents of other US states may submit requests to the same address; response timelines mirror the applicable state's statutory maximum, generally 45 days from receipt with one 45-day extension. See Privacy Policy §8 for the state-by-state summary.
- Response time: We will acknowledge your request within 10 business days and provide a substantive response within 45 calendar days of receipt. If we need additional time, we will notify you of a one-time 45-day extension and explain the reason.
- Identity verification: To protect your privacy, we may need to verify your identity before fulfilling your request. Verification typically involves confirming your email address.
- Authorized agents: You may designate an authorized agent to submit a request on your behalf. The agent must provide signed permission from you and, where required by 11 CCR §7063, proof of the agent's registration with the California Secretary of State. We may still require you to verify your identity directly.
Appealing a denied request
If we deny your request in whole or in part, we will explain the basis for the denial. To appeal, email privacy@autosam.io with the subject line “Appeal: California Privacy Request.” We will review your appeal and respond within 45 calendar days. If the appeal is denied, we will provide information on how to contact the California Attorney General to submit a complaint.
California “Shine the Light”
Under California Civil Code Section 1798.83 (the “Shine the Light” law), California residents may request information about whether a business has disclosed personal information to third parties for their direct marketing purposes. AutoSAM does not disclose personal information to third parties for their own direct marketing purposes. California residents may request confirmation of this practice by contacting privacy@autosam.io.
Changes to this page
We may update this page from time to time to reflect changes in our data practices or applicable law. Material updates will be reflected on this page with an updated effective date.
If you have questions about this page or want to submit a privacy request, contact privacy@autosam.io.
This document: v1.1.0; last reviewed July 17, 2026.