U.S. Privacy Notice

Effective date: August 11, 2026

This Notice is published pursuant to Article 31 (Regional Supplements) of the Meowsaur Terms of Service and supplements the Privacy Policy. It is written to meet the disclosure requirements of the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA") — the most protective comprehensive privacy law currently in effect among U.S. states — and, as a matter of policy, we apply the practices described here to individuals throughout the United States, not only to California residents. Where this Notice conflicts with the Privacy Policy on a matter it specifically addresses, this Notice controls, but only to that extent.

1. Who This Notice Applies To

This Notice applies to personal information we collect about individuals located in the United States in connection with the Meowsaur service — principally, business contacts of our Customers and Resellers, and visitors who use our free public diagnostic tools (such as the light-scan feature) on our website. Where we process personal information on behalf of a Customer as its service provider (as that term is used in the CCPA/CPRA), our processing is governed by our Data Processing Addendum and the Customer's own privacy practices, and this Notice is provided for general transparency rather than as the primary notice for that processing.

2. Categories of Personal Information We Collect

In the 12 months preceding the effective date of this Notice, we have collected the following categories of personal information, as defined under the CCPA/CPRA.

Category Examples
IdentifiersName, email address, phone number, IP address, account identifiers
Customer records informationCompany name, title, billing history, contract plan
Commercial informationSubscription plan, records of Service usage
Internet or other electronic network activityAccess logs, cookies, pages viewed, support interactions
Professional or employment-related informationJob title, department, employer name
InferencesAggregated, de-identified usage and industry-trend statistics (see Article 2 of the Privacy Policy); we do not draw inferences about individual consumer preferences or characteristics

We do not collect Social Security numbers, driver's license numbers, financial account credentials, precise geolocation, biometric information, health information, or other sensitive personal information as defined under the CPRA, in connection with the Service.

3. Sources and Purposes

We collect personal information directly from you (for example, when you sign up, submit a support request, or use a free diagnostic tool), automatically through your use of the Service (access logs, cookies), and from the third-party accounts you choose to connect to the Service (such as Google Search Console or GA4). We use this information for the purposes described in Article 2 (Purposes of Use) of the Privacy Policy — providing the Service, billing, generating reports and recommendations, support, service improvement, de-identified cross-tenant analysis, security and compliance, and important notices.

4. Disclosure to Service Providers and Third Parties

We disclose personal information to the categories of service providers described in Article 4 of the Privacy Policy and listed by name in Section 7 of our Data Processing Addendum, for the business purpose of enabling them to perform services on our behalf (such as hosting, payment processing, and providing the underlying AI, search, and analytics data that power the Service). We require these service providers to use personal information only as necessary to provide their services to us.

5. We Do Not Sell or Share Personal Information

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA. We have not done so in the 12 months preceding the effective date of this Notice. Because we do not sell or share personal information, mechanisms such as a "Do Not Sell or Share My Personal Information" link and honoring of Global Privacy Control signals are not applicable to our current practices; if this changes, we will implement these mechanisms before we begin selling or sharing personal information and will update this Notice accordingly.

6. Your Rights

Subject to certain exceptions, you have the right to: (a) know and access the specific pieces and categories of personal information we have collected about you; (b) delete personal information we have collected from you; (c) correct inaccurate personal information; (d) request information about our data practices, as set out in this Notice; and (e) not receive discriminatory treatment for exercising any of these rights. Because we do not sell or share personal information or use sensitive personal information beyond what is necessary to provide the Service, the rights to opt out of sale/sharing and to limit use of sensitive personal information are not applicable to our current practices.

To exercise these rights, contact us at the address in Section 10, or send an email with the subject line "CCPA/CPRA Request" describing your request. We will verify your identity using information reasonably necessary for that purpose (typically, confirming control of the email address associated with your account) before responding, and will respond within the time period required by applicable law. You may designate an authorized agent to make a request on your behalf; we may require proof of the agent's authorization and, separately, verification of your own identity. If we deny a request, in whole or in part, we will explain the basis for the denial and how you may appeal that decision by replying to our response.

7. Retention

We retain personal information for the periods described in Article 21 (Data Retention Period, Deletion, etc.) of the Terms and Article 8 of the Privacy Policy — generally, for as long as necessary to provide the Service and fulfil the purposes described in this Notice, or as required by law.

8. Financial Incentives

We do not offer any financial incentive, discount, or other benefit in exchange for the collection, sale, or retention of personal information.

9. Other U.S. States and Minors

As described above, we voluntarily apply the practices in this Notice to individuals throughout the United States, including in states with their own comprehensive privacy laws (such as Virginia, Colorado, Connecticut, and Utah), even though many of those laws do not apply to information collected in a business or employment context of the kind the Service principally involves. The rights described in Section 6 are extended on the same voluntary basis outside California to the extent they are technically applicable to our data practices.

The Service is a business analytics tool directed at businesses and professionals, not at children. We do not knowingly collect personal information from individuals under 13 years of age. If we become aware that we have inadvertently collected such information, we will delete it.

10. Contact and Changes to This Notice

For requests or questions relating to this Notice, please contact info@public-design.co.jp. We may update this Notice from time to time; the effective date above reflects the date of the most recent revision.