Your Privacy Choices
Version 1.0 — Effective August 3, 2026 (posted July 4, 2026)
This page is the central place to understand and exercise your privacy rights with Oystercatcher, LLC, a Connecticut limited liability company ("Oystercatcher," "we," "our," or "us"). It summarizes the rights available to you depending on where you live and explains how to exercise them. For a full description of how we collect and use personal information, please see our Privacy Policy.
1. Who This Page Covers
This page applies to visitors to our website at oystercatcher.ai and to individuals who use our platform as customer users (for example, sales and marketing professionals at our customer organizations).
If you are a healthcare professional whose information appears in our platform — for example, because your professional details are included in public records such as the NPI Registry — please see our Provider Data Notice, which describes the sources of that information, how it is used, and the specific choices available to you, including how to request review, correction, or suppression of your professional profile.
2. Your Rights by Location
2.1 California (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, "CCPA"), gives you the following rights:
- Right to know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the purposes for collection, and the categories of third parties to whom it has been disclosed.
- Right to delete: Request deletion of personal information we have collected from you, subject to exceptions permitted by law.
- Right to correct: Request correction of inaccurate personal information we maintain about you.
- Right to opt out of sale or sharing: Direct us not to sell your personal information or share it for cross-context behavioral advertising.
- Right to limit use of sensitive personal information: Direct us to limit the use of sensitive personal information to purposes permitted by law.
- Right to non-discrimination: We will not discriminate against you for exercising any of these rights — for example, by denying service, charging different prices, or providing a different level of quality.
2.2 Other US States
If you reside in Colorado, Connecticut, Virginia, Utah, or another US state with a comprehensive privacy law (including successor and newly enacted state laws), you may have the following rights, subject to the terms of the applicable statute:
- Access: Confirm whether we process your personal information and obtain a copy of it.
- Correction: Request correction of inaccurate personal information.
- Deletion: Request deletion of personal information about you.
- Portability: Obtain a copy of the personal information you provided to us in a portable and, where feasible, readily usable format.
- Opt out: Opt out of the processing of your personal information for purposes of targeted advertising, the sale of personal information, or profiling in furtherance of decisions that produce legal or similarly significant effects.
3. Global Privacy Control
We honor the Global Privacy Control (GPC). If your browser or browser extension transmits a GPC signal, we treat that signal as a valid request to opt out of the sale or sharing of personal information for that browser. Because GPC operates at the browser level, you will need to enable it on each browser and device you use. Learn more about GPC at globalprivacycontrol.org.
4. How to Exercise Your Rights
- Email: Send your request to [email protected]. Please tell us which right you want to exercise and the state or country whose law you are invoking, if known.
- In-account settings: If you have an Oystercatcher account, you can view and update much of your account data — such as your name, email address, and preferences — directly in your account settings.
- Identity verification: To protect your information, we must verify your identity before fulfilling requests to know, access, correct, or delete. We will match the information you provide against information we already hold (for example, the email address associated with your account) and may request additional information if needed. We use verification information only for that purpose.
- Authorized agents: Where permitted by law, you may designate an authorized agent to submit a request on your behalf. We will require proof of the agent's authorization (such as a signed permission or power of attorney) and may still require you to verify your own identity directly with us.
- Response timing: We respond within the windows required by the applicable statute — for example, within 45 days for CCPA requests, extendable by an additional 45 days where reasonably necessary, in which case we will notify you of the extension and the reason for it. We confirm receipt of know, delete, and correct requests within 10 business days. Requests to opt out of sale or sharing are not subject to identity verification and are completed within 15 business days.
5. Notice at Collection — Summary
The table below summarizes the categories of personal information we collect from site visitors and customer users, the purposes for collection, and whether the information is sold or shared. Retention periods for each category are described in Section 8 of our Privacy Policy.
| Category | Examples | Purposes | Sold or Shared? | Retention | Disclosed To (categories of recipients) |
|---|---|---|---|---|---|
| Identifiers | Name, email address, account credentials, IP address | Account creation and authentication; providing the service; communications; security | No | Life of your account plus up to 30 days after deletion | Cloud hosting, payment, authentication, error-monitoring, and session-replay providers |
| Commercial information | Subscription tier, billing history, transaction records | Billing and payment; account management; service planning | No | 7 years for billing records | Payment processor and cloud hosting provider |
| Internet or other network activity | Pages visited, feature usage, browser and device information, in-application session recordings | Analytics; product improvement; support and troubleshooting; security | No | Usage event logs: 90 days; session recordings: 30 days | Cloud hosting, error-monitoring, and session-replay providers |
| Geolocation (coarse) | Approximate location derived from IP address | Security; regional compliance (such as consent requirements); analytics | No | As part of usage event logs, 90 days | Cloud hosting provider |
| Professional or employment-related information | Job title, employer, team and role within a customer organization | Providing the service; account and team administration; communications | No | Life of your account | Cloud hosting provider |
| Sensitive personal information — account log-in credentials | Password (stored hashed) | Used only to authenticate you (a purpose for which the CCPA right to limit does not apply) | No | Life of account | Cloud hosting provider only (hashed) |
We do not sell or share the personal information of our users or site visitors as those terms are defined under the CCPA and comparable state laws. For information about the professional data of healthcare providers that appears in our platform, which is compiled from public sources, please see the Provider Data Notice.
6. Appeals
Some state laws — including those of Colorado, Connecticut, Virginia, Texas, Oregon, and most other states with comprehensive privacy laws — give you the right to appeal a refusal. To appeal, reply to our decision with the subject line "Privacy Appeal." We will respond within 60 days (or sooner where the applicable law requires) and, if we deny your appeal, provide a way to contact your state Attorney General.
7. Contact Us
If you have questions about this page, your privacy rights, or how to exercise them, please contact us:
Oystercatcher, LLC
2389 Main St., Ste 100, Glastonbury, CT 06033, United States
Privacy inquiries: [email protected]
General support: [email protected]