U.S. State Privacy Notice Supplement (CCPA/CPRA, VCDPA, CPA, UCPA, TDPSA & Others)

This U.S. State Privacy Supplement applies to users residing in the U.S., including residents of states with specific consumer privacy laws (e.g,. California, Virginia, Colorado, Connecticut, Utah, Texas, Florida, Iowa, Indiana, Oregon, Montana, Tennessee, New Jersey), as well as those in states where no dedicated privacy statute currently exists. Where applicable, we apply the highest level of protection available under U.S. law. It complements our Privacy Policy and addresses state-specific rights and disclosures in accordance with laws such as the California Consumer Privacy Act (CCPA/CPRA), Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), and others. At this time, we do not meet the applicability thresholds under the Florida Digital Bill of Rights (effective July 1, 2024), but we will monitor future developments.

Note: Adsy.com and theadsy.com are operated by Invise Inc., a company incorporated in the state of Delaware, USA.

1. Categories of Personal Information Collected (Past 12 Months)

Why this matters: Certain states require us to disclose what types of personal information we collect and how we’ve used it in the last 12 months.

The categories listed below reflect the types of personal data collected in the past 12 months in accordance with applicable U.S. state privacy laws, including those in California, Colorado, Virginia, Connecticut, Utah, Texas, Florida, Iowa, Oregon, Montana, and Tennessee.

Adsy may collect the following categories of personal information:

Identifiers (e.g., name, email address, IP address)
Commercial information (e.g., transaction records)
Internet or other electronic activity (e.g., session data, login timestamps)
Geolocation data (approximate, based on IP)
Professional or employment-related information (e.g., publisher affiliation)
Inferences derived from interactions with the platform

We do not collect sensitive personal information (such as race, religion, precise geolocation, biometric identifiers, or health data) as defined under applicable U.S. state privacy laws. If this changes, we will update this notice and obtain your consent where required.

2. State-Specific Consumer Rights

Why this matters: Different U.S. states give you specific rights regarding your personal information. This section outlines those rights based on where you live.

California Residents (CCPA/CPRA):

Right to Know, Access, Delete, Correct, Opt-Out of Sale/Sharing, and Non-Discrimination
Right to Limit Use of Sensitive Personal Information (if applicable)

Virginia, Colorado, Connecticut, Texas Residents:

Right to Access, Correct, and Delete
Right to Data Portability
Right to Opt-Out of targeted advertising, profiling, and sale (as defined by each state)

Utah Residents:

Right to Access and Delete
Right to Opt-Out of targeted advertising and sale

Florida Residents (FDBR):

Right to Access, Delete, and Correct
Right to Opt-Out of Sale or Sharing of Personal Data
Right to Opt-Out of Targeted Advertising and Profiling
Right to Confirm Whether Data is Being Processed

Iowa Residents (ICDPA):

Right to Access and Delete
Right to Data Portability
Right to Opt-Out of Sale and Targeted Advertising

Oregon Residents (OCPA):

Right to Access, Correct, Delete
Right to Data Portability
Right to Opt-Out of Sale, Targeted Advertising, and Profiling
Right to Limit Use of Sensitive Personal Data

Montana Residents:

Right to Access, Delete, and Correct
Right to Opt-Out of Sale and Targeted Advertising

New Jersey Residents (NJDPA)

Right to Access, Correct, Delete, and Port Data
Right to Opt Out of Targeted Advertising, Sale, and Profiling
Recognized browser signals (e.g., GPC) must be honored

Tennessee Residents (TIPA):

Right to Access, Correct, Delete, and Port Data
Right to Opt Out of Targeted Advertising, Sale, and Profiling
Right to Appeal Denied Requests (starting July 1, 2025)

3. Opt-Out of Personal Data Sharing and Targeted Advertising

Why this matters: Several U.S. privacy laws grant you the right to opt out of specific uses of your personal information—such as sharing with third parties for advertising purposes—even when no money is exchanged.

We do not sell your personal data for monetary gain. However, we may allow third-party platforms like Meta (Facebook), Google Ads, Twitter/X, LinkedIn, and Reddit Ads to set cookies or use similar technologies on our website. These tools may collect information about your online behavior across websites and services to deliver personalized advertising. This type of processing may qualify as:

“Sharing” under California law (CPRA), known as cross-context behavioral advertising (CCBA)
“Targeted advertising” under laws in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Indiana, Tennessee, and other states

How to opt out:

You may opt out of this type of data use at any time by:

Clicking the “Do Not Sell or Share My Personal Information” link located in the footer of our website, or
Enabling the Global Privacy Control (GPC) signal in your browser (recognized in states such as California, Colorado, and Oregon).

We honor opt-out requests in all U.S. states where such rights apply.

4. Verification and Authorized Agents

Why this matters: To protect your privacy and prevent unauthorized access, we must verify your identity before fulfilling any rights request. You may also authorize someone to act on your behalf.

To process your request, we may ask for information necessary to reasonably verify your identity (such as your name, email address, or account-related details).

If you use an authorized agent, we may require:

A signed authorization from you,
Or proof that the agent has power of attorney under applicable law.

We reserve the right to deny a request if we cannot verify the requester's identity or the agent's authority.

5. Retention and Use of Data

Why this matters: Several U.S. state privacy laws require businesses to disclose how long personal data is retained or the criteria used to determine the retention period.

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in our Privacy Policy and Cookie Policy, including legal, regulatory, tax, accounting, or reporting obligations.

Where a specific retention period is not legally required, we determine the appropriate retention period based on the nature of the data, the potential risk of harm from unauthorized use or disclosure, and whether we can achieve the purposes through other means.

6. Appeals Process (Where Applicable)

Why this matters: Some U.S. states allow you to appeal if we deny your privacy rights request.

If you reside in Virginia, Colorado, Connecticut, Indiana, Montana, or Tennessee and we decline your request, you have the right to submit an appeal within a reasonable time. You can do so by contacting us at contact@adsy.com and stating that you are requesting a review of our decision.

We will review your appeal and respond within the timeframe required by law.

Last Updated: January 7, 2026