California Privacy Notice (CCPA/CPRA)

  • CCPA/CPRA NOTICE – UPDATED AUGUST 2026

California Privacy Rights Notice for California Residents

360 Technologies USA LLC

Last Update: August, 2026 | Applies to all 360 Technologies USA LLC platforms and services

This California Privacy Notice supplements the information contained in the 360 Technologies USA LLC Privacy Policy and applies solely to residents of the State of California (“consumers” or “you”). We provide this notice to comply with the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

We do not sell, rent, trade, or share personal information for cross-context behavioral advertising. We use personal information only for operational purposes necessary to provide our services.

  1. CATEGORIES OF PERSONAL INFORMATION WE COLLECT

In the past 12 months, we have collected the following categories of personal information:

  • Identifiers: Name, email address, phone number, account credentials, user ID
  • Customer Records: Business information, documents uploaded, workflow data, transaction history
  • Protected Classification Information: Only if voluntarily provided by the user (e.g., in forms or documents)
  • Commercial Information: Service usage history, interactions, preferences, purchase history
  • Internet or Network Activity: Device information, IP address, logs, usage analytics, access patterns
  • Geolocation Data: General (non-precise) location derived from IP address
  • Professional or Employment Information: Only when voluntarily provided for service operations
  • Sensitive Personal Information: May include identity verification documents or regulated data submitted by users
  • AI-Generated Data: Summaries, analyses, and insights generated by our AI services

We do not collect:

  • Biometric data
  • Precise geolocation
  • Sensory data
  • Social Security numbers (unless for compliance verification)
  1. SOURCES OF PERSONAL INFORMATION

We collect personal information from:

  • Information you provide directly through our platforms (registration, forms, uploads)
  • Automated system logs and analytics
  • Documents or data you upload to our services
  • Communications sent through our services
  • Service providers supporting our operations
  • Interaction with third-party integrations (with your consent)
  1. PURPOSES FOR COLLECTING PERSONAL INFORMATION

We use personal information solely for legitimate business and operational purposes, including:

  • Providing, maintaining, and improving our services
  • Authenticating users and securing accounts
  • Processing workflows, documents, and communications
  • Detecting and preventing fraud or unauthorized access
  • Ensuring platform reliability and performance
  • Complying with legal and regulatory obligations
  • Internal analytics and service optimization
  • Customer support and dispute resolution
  • Service security and integrity

We do not use personal information for:

  • Targeted advertising or unrelated marketing
  • Cross-context behavioral advertising
  • Profiling for discriminatory purposes
  • Purposes disclosed differently than in this notice
  1. 360x AI SERVICES – SPECIAL DATA HANDLING (NEW – August 2026)

Important Distinction

360x AI has different data handling than Hi360x (described in Section 5).

What is 360x AI?

360x AI is an intelligent assistant integrated directly into Live 360, available in two pricing tiers (Free and Pro).

360x AI Data Practices

HIPAA & CMS Compliance

When customers process Protected Health Information (PHI), 360 Technologies USA LLC acts as a Business Associate under HIPAA (45 CFR 160/164) and CMS beneficiary data handling requirements.

A Business Associate Agreement (BAA) with OpenAI governs authorized AI processing.

PHI may only be processed within Live360 and 360x AI.

 

ClickSign 360 and Hi360x are not authorized to process PHI.

 

CRITICAL: 360x AI does NOT use your data for model training:

  • Your data is processed exclusively for real-time query responses
  • Processing occurs in-memory; responses are not retained after interaction
  • Conversation history is stored in your Live 360 account (encrypted) for your reference only
  • Your data is never used to train, improve, or fine-tune any AI models
  • Your data is never shared with external AI model providers
  • Your data is never used for profiling or discriminatory purposes

360x AI Data Rights (CCPA/CPRA)

As a California resident using 360x AI, you have the following rights:

  • Right to Know: Request details about data collected through 360x AI
  • Right to Delete: Request deletion of your 360x AI data
  • Right to Correct: Request correction of inaccurate 360x AI data
  • Right to Access: Access your 360x AI conversation history
  • Right to Non-Discrimination: Exercising your rights will not affect service quality or pricing

Important: Because 360x AI does NOT use data for model training, there is no opt-out mechanism for “data used for training” — your data is never used for that purpose.

  1. HI360X AI SERVICES – SPECIAL DATA HANDLING

Hi360x Data Collection

When you use Hi360x (our sales AI platform), we collect:

  • Call recordings and transcripts
  • Chat and email conversations
  • Lead qualification data and scoring
  • User corrections and feedback
  • AI-generated summaries and analyses

Hi360x Data Practices

Hi360x does not use customer data for model training, fine‑tuning, or model improvement.

All Hi360x data is processed exclusively for service operation, lead qualification, and user‑requested functionality.

Hi360x Data Rights (CCPA/CPRA)

As a California resident using Hi360x, you have the following additional rights:

  • Right to Know: Request details about Hi360x data collected
  • Right to Delete: Request deletion of Hi360x data (including training data)
  • Right to Opt-Out: Opt out of having your Hi360x data used for AI model training
  • Right to Correct: Request correction of inaccurate Hi360x data
  • Right to Non-Discrimination: Opting out will not affect Hi360x service quality or pricing

Hi360x Training Notice

Hi360x does not use customer data for model training. No opt‑out mechanism is required.

  1. SHARING OF PERSONAL INFORMATION

We do not sell personal information as defined under CCPA/CPRA.

We may disclose personal information only to:

6.1 Service Providers

Certification Disclosure

360 Technologies USA LLC operates on Amazon Web Services (AWS), which maintains SOC 2 Type II certification for its infrastructure and physical security controls.

360 Technologies USA itself is not SOC 2 certified, and no statement in this Notice shall be interpreted as representing or implying that 360 Technologies USA holds a SOC 2 certification.

We implement internal controls aligned with SOC 2 Trust Services Criteria; however, these controls do not constitute a formal SOC 2 audit or certification.

Trusted vendors performing essential operational functions:

  • Cloud hosting and data storage
  • SMS and email delivery
  • Security monitoring
  • Infrastructure support

Status: These are “service providers” under CCPA, not “third parties.” Contractual restrictions apply.

6.2 Legal or Regulatory Authorities

We may disclose information when:

  • Required by applicable law
  • Responding to lawful requests
  • Protecting rights, safety, or property of 360 Technologies or users

6.3 Corporate Transactions

In a merger, acquisition, or restructuring, personal information may be transferred under strict confidentiality.

External AI Integrations Prohibited

360 Technologies USA LLC does not permit, enable, or support transmission of personal information or PHI to external AI assistants, external AI models, or third‑party agent platforms.

All AI operations occur exclusively within the 360 Technologies USA AI Gateway or OpenAI under a Business Associate Agreement (BAA).

No customer data may be transmitted to external AI systems for any purpose.

  1. RETENTION OF PERSONAL INFORMATION

We retain personal information only for as long as necessary to:

  • Provide the services you use
  • Fulfill the purposes in this notice
  • Comply with legal obligations
  • Maintain business records

Retention Schedules:

  • Account data: Duration of subscription + 30 days
  • Audit logs: 6 years minimum
  • 360x AI conversations: Retained according to HIPAA/CMS requirements when containing PHI; otherwise retained per user preference.Hi360x data: 12 months (or earlier upon request)
  • Backups: 30 days rolling cycle
  1. YOUR CCPA/CPRA RIGHTS

California residents have the following rights:

8.1 Right to Know

You may request:

  • Categories of personal information collected
  • Specific pieces of personal information collected
  • Categories of sources
  • Purposes for collection
  • Categories of third parties receiving data

8.2 Right to Delete

You may request deletion of personal information collected from you, subject to legal exceptions:

  • Data needed to complete transactions
  • Data required by law
  • Data necessary for security or fraud prevention
  • Data you provide for purposes you requested

8.3 Right to Correct

You may request correction of inaccurate personal information.

8.4 Right to Opt-Out

We do NOT sell personal information, so the “opt-out of sale” right does not apply.

However, you may opt out of:

  • Hi360x data processing: You may request deletion or export of your Hi360x data.

8.5 Right to Limit Use of Sensitive Personal Information

We use sensitive personal information only for operational purposes. We do not use it for:

  • Profiling or discrimination
  • Advertising or marketing
  • Purposes outside this notice

You may request that we limit our use of sensitive information.

8.6 Right to Non-Discrimination

We will not:

  • Deny services based on your exercise of CCPA/CPRA rights
  • Charge different prices for the same services
  • Provide different levels of service
  • Retaliate for exercising your rights

Exception: We may offer financial incentives for data collection or use (e.g., discounts for opting in), provided the incentive is not unjust or coercive.

8.7 Authorized Agent

You may designate an authorized agent to submit requests on your behalf. We will require:

  • Proof of agent authorization (power of attorney)
  • Proof of your identity
  • Signed authorization letter
  1. HOW TO SUBMIT A REQUEST

9.1 Submission Methods

Email: info@360techusa.com
9.2 Request Details to Include

  • Your full name and email address
  • Description of your request (Know / Delete / Correct / Opt-Out)
  • Specific data categories if applicable
  • Proof of California residency (driver’s license, government ID, or utility bill)

9.3 Response Timeline

  • Verification: 10-15 business days to verify your identity
  • Fulfillment: Within 45 days of verification (extendable by 45 days with notice)
  • Correction requests: 30 days to implement corrections

9.4 No Fees

We will not charge fees for processing most requests. However, we may charge a reasonable fee for:

  • Frequent, repetitive requests (e.g., > 2 per year)
  • Requests requiring significant technical effort
  1. HI360X-SPECIFIC CCPA/CPRA RIGHTS

If you use Hi360x, additional rights apply:

Right to Know:

  • Audio recordings (call transcripts)
  • Text conversations
  • AI-generated summaries
  • Lead scoring results
  • User corrections and feedback

Right to Delete:

  • All Hi360x data associated with your account
  • Including data previously used for AI model training

Right to Opt-Out:

  • Right to Opt-Out: You may opt out of Hi360x data processing for analytics or reporting.
  • Opting out does NOT affect your Hi360x service access

Right to Correct:

  • Inaccurate Hi360x data

Categories of Hi360x Data:

  • Audio data (recordings, transcripts)
  • Text data (chats, emails)
  1. CHILDREN’S PRIVACY

We do not knowingly collect personal information from individuals under 18 years of age. Our services are intended for business use by adults. If we become aware of data from a minor, we will delete it promptly.

  1. UPDATES TO THIS NOTICE

We may update this California Privacy Notice periodically to reflect changes in our practices, technology, law, or other factors.

When material changes occur, we will:

  • Revise the “Last Updated” date
  • Notify users via email or website notice (per CCPA/CPRA)
  • Provide 30 days notice for significant changes
  1. CONTACT INFORMATION

For questions or concerns regarding this Notice, contact:

📧 Email: info@360techusa.com (for privacy requests  or general inquiries)

California Attorney General Complaint: oag.ca.gov

  1. RELATED POLICIES
  • Privacy Policy: https://360techusa.com/privacy-policy/
  • Terms & Conditions: https://360techusa.com/terms/
  • Security Policy: https://360techusa.com/security/
  • Data Protection & Security Addendum: Available upon request (info@360techusa.com)

Last Updated: August, 2026