Notice At Collection
California Consumer Privacy Act of 2018 and California Privacy Rights Act of 2020 (collectively, “CCPA)
WOWNOW (“Company”) collects your personal information and sensitive personal information to support its business operations, including for the business purposes listed in the chart below.
To view our full Company Privacy Policy, visit Privacy Policy.
We will not sell the personal information, including any sensitive personal information we collect. We do not share personal information we collect with third parties for cross-context behavioral advertising, as indicated in the chart below.
We may collect the personal information and sensitive personal information categories listed in the table below and retain them for the indicated period for the stated business purposes and share the information with third parties for cross-context behavioral advertising as indicated.
Category | Retention Period | Business Purpose | Sold or Shared |
Identifiers Examples: A real name, alias, online identifier, Internet Protocol address, email address, account name, and account picture, images you upload | Order-related data (name, email, address) is retained for 7 years for tax and legal compliance. Account-level identifiers are retained as long as the account remains active.
| We collect your name, email address and profile information when you sign in using third-party authentication providers such as Google, Apple, or Facebook. We do not receive or store your password from any third-party provider. | We do not sell personal information. We may share personal information for the business purposes as described |
California Customer Records personal information Examples: real name, email address, profile information, (e.g., photograph). Some personal information included in this category may overlap with other categories | Name/Address/Phone/Financial Information is retained for up to 7 years to comply with tax and commercial legal requirements.
Photographs are retained until the user deletes their account or the specific content, or as needed to fulfill the customization order.
| We collect your name, physical characteristics or description, [photograph], address, telephone number., bank account number, credit card number/debit card number, or any other financial information.
| We do not sell customer records personal information. We may share personal information for business purposes as described |
C. Protected classification characteristics under California or federal law ("Protected Classes") | N/A | No/ | N/A |
Commercial information, such as records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies | 7 Years | We collect records of products and services purchased (e.g., NFC smart tags, customization services), transaction amounts, and order dates. We also maintain records of items users considered or added to their carts to improve our service offerings.
| We do not sell Commercial information. We may share personal information for the business purposes as described |
E. Biometric information. | N/A | NO | N/A |
Internet or other similar network activity Examples: Device type, operating system, browser system, and basic usage logs, basic behavioral data including, pages visited, features accessed, and creation activity | 7 Years | We collect information related to the activity on your websites, mobile apps, and other digital systems, such as internet browsing history, search history, system usage, electronic communications with you, postings on our social media sites.
| We do not sell internet or other network activity information. We may share personal information for the business purposes as described |
Geolocation data, such as physical location or movements. | 7 Years
| We collect precise geolocation data via the user's mobile device or browser, but only when the user explicitly requests to search for nearby printing kiosks. This data is used solely to provide a list of the closest physical machines for order fulfillment. We do not track the user’s movements in the background or use this information for any other purposes
| We do not sell Geolocation data. We may share personal information for the business purposes as described |
Sensory data.
Examples: Audio, Electronic, Visual, or similar information, Customer Service call monitoring and store video surveillance
| User-uploaded images: Retained until the order is fulfilled or the user deletes their account/content. Customer service audio is retained for 3 years.
| We collect visual information, specifically photographs and images uploaded by users for the purpose of AI-assisted product customization. We also collect electronic information in the form of digital communications. We do not collect thermal, olfactory, or store video surveillance data. If customer service calls are recorded for quality assurance, audio data may be collected with prior notice.
| We do not sell sensory data information. We may share personal information for the business purposes as described |
Inferences drawn from other personal information | Retained for as long as the underlying personal information (such as purchase history) is maintained, or until the user requests deletion of their profile
| We may draw inferences from a consumer's purchase history and website interactions to create a profile reflecting their preferences and predispositions (e.g., interest in specific product categories or AI art styles). This is used solely to provide personalized product recommendations and relevant marketing communications via Square
| We do not sell inferences from other personal information. We may share personal information for the business purposes as described |
Sensitive Personal Information | See chart below | Yes | We do not sell sensitive personal information. We may share personal information for the business purposes as described |
Sensitive Personal Information Categories Chart
Sensitive personal information is a subtype of personal information consisting of the specific information categories listed in the chart below. Importantly, the CCPA only treats this information as sensitive personal information when we collect or use it to infer characteristics about a consumer.
The chart below identifies which sensitive personal information categories, if any, we have collected from consumers to infer characteristics about them in the last 12 months.
Sensitive Personal Information Category | Collected to Infer Characteristics? | Retention Period |
Government identifiers, such as your Social Security number (SSN), driver's license, state identification card, or passport number | NO |
|
Complete account access credentials, such as usernames, account logins, account numbers, or card numbers combined with required access/security code or pass press | Yes | 7 Years |
Precise geolocation, such as GPS data from a consumer's mobile device that can provide its location in a geographic area, with an approximate radius of 1,850 feet | Yes | Deleted immediately after the search results are provided, or retained for a short session duration to facilitate the transaction
|
Racial or ethnic origin | NO |
|
Citizenship or immigration status | NO |
|
Religious or philosophical beliefs | NO |
|
Union membership | NO |
|
Mail, email, or text messages not directed to the Company | NO |
|
Genetic data. | NO |
|
Neural Data, such as information generated by measuring a consumer's central or peripheral nervous system's activity that is not inferred from nonneural information | NO |
|
Unique identifying biometric information | NO |
|
Health information | NO |
|
Sex life or sexual orientation information | NO |
|
Children's personal information (under age 16) | NO |
|
We retain personal information for as long as necessary to carry out the purposes for which we originally collected it and for other purposes described in this Notice and our Privacy Policy.
Sources of Personal Information
We obtain the categories of personal information listed above from the following categories of sources:
Directly from you, such as content, photos, AI-generated artwork, or other information you upload to our services for creating personalized products. Profile information you add to your account.
Indirectly from you, such as from your interactions with the Company's websites, customer service support, such as your name, email address, and profile information.
From our service providers, such as customer service support providers, data analytics providers, and other service providers for cloud storage or AI image processing.
How We Use Your Information
Personal Information Collection, Use, and Disclosure Purposes
We may use and disclose personal information, including sensitive personal information, we collect to advance the Company's business and commercial purposes, specifically to:
- Develop, offer, and provide you with our products, services, and processing orders, including NFC chip binding, pick up code generation and status notifications;
- Meet our obligations and enforce our rights arising from any contracts with you, including for billing or collections, or to comply with legal requirements;
- AI-Assisted Creation- your conversation content is used solely to generate results of the current session and is NOT used for AI model training;
- Fulfil the purposes for which you provided your personal information or that were described to you at collection, and as the CCPA otherwise permits.
- Improve our products or services, marketing, or customer relationships and experiences;
- Contact you about service-related information. (e.g., order status updates);
- Administer our systems and conduct internal operations, including troubleshooting and data analysis;
- Protect our Company, employees, or operations;
- Manage your consumer relationship with us, including for:
- Customer support- Our third-party customer service provider communicates with you via phone and email to respond to consumer inquiries;
- Displaying nearby available pickup locations using precise geolocation;
- Displaying your coupons, favorites, works, and other account-related information;
- Comply with all applicable laws and regulations.
- Respond to law enforcement requests and as required by applicable law or court order.
Sensitive Personal Information Use and Disclosure Purposes
We do not use or disclose sensitive personal information for purposes other than the Permitted SPI Purposes. For more on your right to limit these additional sensitive personal information use purposes, see Your Rights and Choices.
Additional Categories or Other Purposes
We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice. If required by law, we will also seek your consent before using your personal information for a new or unrelated purpose.
We may collect, process, and disclose aggregated or deidentified consumer information for any purpose, without restriction. When we collect, process, or disclose aggregated or deidentified consumer information, we will maintain and use it in deidentified form and will not to attempt to reidentify the information, except to determine whether our deidentification processes satisfies any applicable legal requirements.
Disclosing, Selling, or Sharing Personal Information
Business Purpose Disclosures
We may disclose the personal information we collect to service providers and contractors for the business purposes described in the Personal Information Collection, Use, and Disclosure Purposes section and in the table below, such as to support our business functions. We may engage trusted service providers to assist in delivering services. For example, your payment information is processed by Square. Their privacy policies apply. For more information, visit: Square Privacy Policy.
We only make these business purpose disclosures under written contracts that describe the purposes, require the recipient to keep the personal information confidential, prohibit using the disclosed information for any purpose except performing the contract, and meet the CCPA's other contract requirements for engaging service providers or contractors.
Selling or Sharing Personal Information
We do not sell your personal information, including sensitive personal information, to third parties and have not sold it in the preceding 12 months.
Our personal information sharing does not include information about consumers we know are under the age of 16.
Data Retention Periods
The Company retains personal information only for the time necessary to fulfill business and operational purposes, or as required by law. Personal Information may be deleted upon user request, or when the information is no longer required for business purposes. Data stored across systems is deleted or anonymized in accordance with respective data retention periods. Specific retention periods are as follows:
Data Type | Retention Period | Notes |
Account/Profile Information | For the duration of the account | Old data is automatically deleted when updated. Only the latest record is retained. Information is deleted or anonymized upon account closure. |
Photos uploaded directly for production | Same as above | Photos are automatically deleted when removed or replaced by the user. Only the latest photo is retained. High-resolution source images uploaded for AI customization are purged from our active processing servers within 30 days of order fulfillment, leaving only low-resolution thumbnails or encrypted logs for order history if necessary.
|
AI conversation records (after order is placed) | Automatically deleted upon successful order placement | Information is used solely for the current session |
AI conversation records (drafts) | Deleted upon exiting the draft interface | Information is visible to the user during the draft interface; navigating away clears the chat and a new session must be started |
Customer service records | For 3 years after completion of services | We retain this information based on industry standards to resolve potential post-sale disputes |
NFC data | For the duration of the account | We link this information to your personal account; the information is deleted or anonymized upon account closure |
Order Data | Up to 7 years after the transact | We retain this information to comply with applicable state and federal laws |
Your Rights and Choices
If you are a California resident, the CCPA grants you the following rights regarding your personal information:
Right to Know and Data Portability Requests
You have the right to request that we disclose certain information to you about our collection and use of your personal information (the "right to know"), including the specific pieces of personal information we have collected about you. You may exercise your right to know twice in any 12-month period. Once we receive your request and confirm your identity (see How to Exercise Your Rights), we will disclose to you:
- The categories of:
personal information we collected about you; and
The business or commercial purpose for collecting your personal information and, if applicable, selling or sharing your personal information.
For more on exercising these rights, see Exercising the Rights to Know, Delete, or Correct.
Right to Delete and Right to Correct
You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions and limitations (the "right to delete"). You may also request account cancellation by contacting us. Once we receive your request and confirm your identity, we will delete your personal information from our systems unless an exception allows us to retain it. Upon closing your account, we will process your personal information in accordance with legal requirements. We will also notify our service providers to take appropriate action.
You also have the right to request correction of personal information we maintain about you that you believe is inaccurate (the "right to correct"). We may require you to provide documentation, if needed, to confirm your identity and support your claim that the information is inaccurate. Unless an exception applies, we will correct personal information that our review determines is inaccurate and notify our service providers to take appropriate action.
For more on exercising these rights, see Exercising the Rights to Know, Delete, or Correct.
Right to Limit Sensitive Personal Information Use and Disclosure to Permitted SPI Purposes
As we do not use or disclose sensitive personal information beyond the CCPA's Permitted SPI Purposes, we do not currently provide this consumer right.
Personal Information Sales or Sharing Opt-Out and Opt-In Rights
As we do not sell or share consumers' personal data, we do not currently provide these consumer rights.
ADMT RIGHTS
We do not currently use ADMT to make significant decisions about consumers, so we do not provide ADMT access, opt-out, or appeal rights.
NFC Related Data Notice
- Our services include NFC chip functionality. Please pay special attention to the following:
- Scope of Data Collection: When using the NFC writing feature, we collect and store the chip's physical identifier (chip UID), NFC redirection content, the links you set (custom URLs, AI music links, etc.), and chip activation timestamps.
- Data Association: The above data is associated and stored with your account information and order records.
- Access Controls: NFC content (payload) is accessible only by authorized administrators as needed. Regular operations staff do not have access. Your redirection URLs are not publicly displayed to other users.
- Storage of User-Generated Content: Content you configure for NFC redirection (the "Payload") is stored to facilitate instant redirection. While we implement standard security measures, redirection payloads are not end-to-end encrypted to ensure compatibility with various NFC readers. We strongly advise you not to include highly sensitive personal information (such as passwords, social security numbers, or financial credentials) in the redirection content.
- Data Retention: NFC data is retained during the existence of your account and processed in accordance with legal requirements upon account closure.
Cookies Technologies
We utilize cookies and similar tracking technologies to improve your browsing experience, remember your preferences, and analyze your use of our services. You can set your browser to refuse all or some browser cookies or other tracking technology files, or to alert you when these files are being sent. If you disable or refuse cookies or similar tracking files, some Services or Website features may be inaccessible or may not function properly. Some browsers include a "Do Not Track" (DNT) setting that can send a signal to the online services you visit indicating you do not wish to be tracked. Because there is not a common understanding of how to interpret DNT signals, our Services and Website do not respond to browser DNT signals. Instead, you can use the range of other tools to control data collection and use, including the cookie controls and advertising controls described in this policy.
How We Protect Your Personal Data
We use commercially reasonable administrative, physical, and technical measures designed to protect your personal data from accidental loss or destruction and from unauthorized access, use, alteration, and disclosure. However, no website, mobile application, system, electronic storage, or online service is completely secure, and we cannot guarantee the security of your personal data transmitted to, through, using, or in connection with the Services. Any transmission of personal data is at your own risk.
In the event of a data security incident, including but not limited to unauthorized access, disclosure, loss, or destruction of personal information, we will notify affected users vias email within a reasonable time after discovering the incident, as required by the CCPA. The notice will describe the types of personal information affected, potential consequences, and the measures we have taken or are taking in response.
The safety and security of your information also depends on you. You are responsible for taking steps to protect your personal data against unauthorized use, disclosure, and access.
Privacy Policy Changes
We reserve the right to update this Privacy Policy at any time. If we make any material changes to this Privacy Policy, we will update the policy's effective date and post the updated policy on our website. We encourage you to check our website to review the current Privacy Policy in effect.
Contact Information
If you have any questions or comments about this policy, the ways in which we collect and use your information described here, or your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:
- Phone: (855)971-2221
- Email: support@lorivision.com
- Postal Address: WOWNOW 2078 E Francis St, Building 14 Unit 2, Ontario, CA 91761
If you have any questions about this Notice or need to access it in an alternative format due to having a disability, please contact support@lorivision.com and (855)971-2221.
Effective date: June 1, 2026