California privacy rights

Date: June 2026

If you are a California resident, the California Consumer Privacy Act,  as amended by the California Privacy Rights Act of 2020 (“CCPA”) requires us to provide you with the following additional information about: (i) the purpose for which we use each category of “personal information” (as defined in the CCPA) we collect; and (ii) the categories of third parties to which we (a) disclose such personal information for a business purpose, (b) “share” personal information for “cross-contextual behavioral advertising”, and/or (c) “sell” such personal information. 

Under the CCPA, “sharing” is defined as the disclosure of personal information to a third party for the targeting of advertising to a consumer based on that consumer’s personal information obtained from the consumer’s activity across websites (“cross-context behavioral advertising”), and “selling” is defined as the disclosure of personal information to third parties in exchange for monetary or other valuable consideration. We “share” information to provide more relevant and tailored advertising to you regarding our Services. While we do not disclose our customer’s personal information to third parties in exchange for money, our use of third-party analytics services and online advertising services may result in the disclosure of online identifiers (e.g., cookie data, IP addresses, device identifiers, and usage information) in a way that may be considered a “sale” under the CCPA. 

Category of personal information	Purpose of use	Categories of third parties to which we disclose this personal information	Categories of third parties to which we “share” or “sell” this personal information
Contact information & personal identifiers	Communicate with you; marketing and advertising; provide and improve the services; business operations; with your consent	Riskified Group; service providers; advertising partners; connected third party services; entities for legal purposes; entities for business transactions	Advertising partners.
Customer service interaction information	Communicate with you; provide and improve the services; business operations; with your consent	Riskified Group; service providers; connected third party services; entities for legal purposes; entities for business transactions	We do not share/sell.
Internet activity and content submitted online forms	Communicate with you; marketing and advertising; provide and improve the services; business operations; with your consent	Riskified Group; service providers; connected third party services; entities for legal purposes; entities for business transactions	We do not share/sell.
Information collected through automated technologies	Marketing and advertising; provide and improve the services; business operations	Riskified Group; service providers; connected third party services; entities for legal purposes; entities for business transactions	Advertising partners.

Detailed information about the categories of personal information that we collect from California residents generally, the purposes for which we use the information, and the categories of third parties to whom we disclose the information for business purposes is provided in the Riskified Website Privacy Notice under “Personal Data We Process and For What Purposes.”

Right to opt-out of the sale/sharing of personal information. 

As explained above, we sometimes disclose information to third parties for marketing and advertising purposes. The disclosure of your personal information to these third parties may be considered the sale or sharing of personal information for cross-context behavioral advertising purposes. The personal information we disclose for these purposes includes (i) personal identifiers, such as device ID and IP address; (ii) Internet activity, such as interactions with the Site; and (iii) inferences drawn from the foregoing categories of personal information. Please note that we do not disclose personal information that may be considered sensitive personal information under the CCPA.

California consumers have the right to opt out of such “sales” and “sharing” of personal information. To exercise those rights, please visit Your Privacy Choices in the footer of our Site and follow the instructions there. See the section on “Cookies” in the Riskified Website Privacy Notice for more information about how we use cookies and other choices you may have related to those cookies. 

You must opt out on each device and each browser where you want your choice to apply. Your preference may be lost if you clear, or your browser is set to clear, cookies. Please note that if you have a legally-recognized browser-based opt out preference signal turned on via your device browser, we recognize such preference in accordance with applicable law.

Additionally, we may use non-cookie-based means to disclose or use contact information to enable us and our advertising partners to deliver more relevant (targeted) ads to you (for example to display ads to you on a third-party social media platform) and for other advertising activities. To opt out of such disclosures, please email us at [email protected]. 

You may utilize an agent to make a request on your behalf. We will ask for written, signed permission that the agent has been authorized to act on your behalf. Even if you opt out, you will still see advertising, but it may be less relevant to you, or it may be personalized for you based only on a more limited set of data. 

Right to limit

The CCPA provides California consumers with the right to limit the ways in which we process their sensitive personal information.  Please note that we do not process sensitive personal information for purposes that are subject to the right to limit.  

Request to know

To request access to personal information held by Riskified that is processed through the Site, please email us at [email protected].  

Request to correct

To request a correction to personal information held by Riskified that is processed through the Site, please email us at [email protected]. 

Retention

We store your personal information for different time periods depending on the category of personal information and the nature of relationship that you have with us. We consider the following criteria when we are making decisions on how long we will retain your personal information: (i) the category of personal information; (ii) whether the personal information is deleted based on specific schedules; (iii) whether further retention of the personal information is necessary to achieve the purpose for which personal information was collected; (iv) how long we need to retain the personal information to comply with our legal obligations or sound professional practices; and (v) legitimate interests or legal purposes, such as fraud prevention, record-keeping, security and integrity, or enforcing our legal rights. 

Shine the Light

California’s “Shine the Light” law (Civil Code Section § 1798.83) permits users of the Site that are California residents to request, once a year, certain information regarding our disclosure of “personal information” to third parties for their “direct marketing purposes” (as both terms in quotes are defined in the Shine the Light law).  However, a company is not required to provide this information where it adopts and discloses a policy of not disclosing “personal information” to third parties for their “direct marketing purposes:” (1) unless the resident first affirmatively agrees or (2) if the resident has exercised an option that prevents that information from being disclosed.  We maintain such a policy.  To opt out, please email us at [email protected].  To opt out of activities that are considered “sales” or “sharing” under the California CCPA, please see the “Notice of Right to Opt Out of Sales of Personal Information and Sharing of Personal Information for Cross-Context Behavioral Advertising” section above.