California Privacy — Your California Privacy Rights

HomeFill LLC d/b/a Plenu · Version v1.4 · Effective Date: October 11, 2026

This page is for California residents and supplements our main Privacy Policy. It describes your rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), Cal. Civ. Code § 1798.100 et seq. Residents of other states: please see our Privacy Policy, which describes the rights we honor in your state.

1. Categories of personal information we collect

• Identifiers — name, email address, delivery address, and (if you provide it) phone number.
• Commercial information — your subscription tier and billing/subscription history.
• Internet or other electronic network activity — site-usage analytics, ad-source attribution, and, when our advertising measurement is active, Meta Pixel visit and signup events.
• Geolocation — your delivery address, and approximate location derived from IP address.
• Sensitive personal information — only if you choose to provide it; see Section 2.
• Inferences — a household preference profile we build to compose your box.

We do not collect biometric or genetic data, and we do not knowingly collect information from anyone under 18.

2. Sensitive personal information

One optional free-text field at signup may collect information that could be "sensitive personal information" under the CPRA: health-related information you volunteer about allergies or sensitivities we should work around (for example, a fragrance sensitivity or an ingredient to avoid). You can skip it. (Other optional signup questions — such as whether easier-to-open or lighter-weight packaging would help — are ordinary product preferences, not sensitive personal information.)

We collect this information only if you provide it, and we use it for a single purpose: to personalize your box and avoid sending products you cannot use. We do not use it to infer characteristics about you, and we do not sell or share it. Because we use it only to provide the service you requested and not to infer characteristics, the CPRA "right to limit the use of sensitive personal information" does not apply — but you may view, update, or delete your answer at any time (Section 6).

3. Sale and sharing

We do not sell your personal information for money, and we do not share it with data brokers. When our Meta Pixel advertising measurement is active, it may send Meta information about your visit and signup, which under the CCPA may count as "sharing" for cross-context behavioral advertising. You can opt out at any time through Your Privacy Choices (Section 5), and we honor the Global Privacy Control signal.

4. Your CCPA/CPRA rights

• Right to know / access the categories and specific pieces of personal information we hold, and how we use them.
• Right to delete personal information we collected from you, subject to legal exceptions (such as tax records).
• Right to correct inaccurate personal information.
• Right to data portability.
• Right to opt out of sale or sharing — see Sections 3 and 5.
• Right to limit use of sensitive personal information — see Section 2 (our use does not trigger this right, but you may delete the information).
• Right to opt out of automated decision-making — we do not use automated decision-making technology that produces legal or similarly significant effects concerning you. Our AI composes household boxes; it does not make significant decisions about you.
• Right to non-discrimination — you receive the same service and pricing whether or not you exercise a privacy right.

5. Your Privacy Choices and Global Privacy Control

Use the "Don't use my visit for ads or analytics" control on our Cookie Policy page to opt out of advertising measurement and site analytics in that browser. We also honor the Global Privacy Control (GPC): if your browser sends it, we treat it as a valid request to opt out of sale and sharing, and we do not load advertising measurement or analytics for that visit.

6. How to exercise your rights

Email privacy@plenu.online with the subject line "Privacy Rights Request," and include your name, that you are a California resident, and the right you wish to exercise. We respond within 45 days; if we need more time (up to 45 additional days), we will tell you and explain why. For access and deletion requests, we may verify your identity first. You may use an authorized agent with written permission signed by you, and we may verify your identity or confirm the agent's authorization directly.

7. Shine the Light (Cal. Civ. Code § 1798.83)

We do not disclose personal information to third parties for their own direct-marketing purposes.

8. Enforcement and contact

The California Privacy Protection Agency (CPPA) and the California Attorney General enforce the CCPA/CPRA; you may direct complaints to the CPPA at cppa.ca.gov.

HomeFill LLC dba Plenu, 2141 Century Farms Parkway, Ste 1013, #113, Nashville, TN 37013 Privacy and rights requests: privacy@plenu.online · Support: hello@plenu.online