Notice at Collection
Effective: March 10, 2026
Flatfile, Inc. d.b.a. Obvious | obvious.ai
Required under the California Consumer Privacy Act (CCPA/CPRA)
This Notice at Collection is provided to California residents at or before the point of personal information collection, as required by the CCPA and CPRA.
What We Collect and Why
When you visit obvious.ai or app.obvious.ai, we collect the following categories of personal information:
| Category | Specific Data | Why We Collect It |
|---|---|---|
| Identifiers | Name, email address, IP address, device ID, cookie IDs, account username | Create and manage your account; operate the platform; identify your session for analytics and advertising measurement |
| Internet & electronic activity | Pages visited, features used, clicks, session duration, referring URLs | Understand how our site is used; improve the product; measure the effectiveness of our advertising |
| Commercial information | Subscription plan, transaction records | Process payments; manage your account |
| Geolocation (approximate) | Country and region derived from IP address | Localization; analytics |
| Inferences | Usage patterns and product interest signals drawn from the above | Product improvement; personalization |
| Account credentials | Login tokens and authentication records (sensitive personal information — used for authentication only) | Secure your account |
We use this information for platform operation, customer support, product improvement, security, legal compliance, and advertising measurement. We do not collect Social Security numbers, precise geolocation, health data, or biometric data.
Sharing for Advertising Purposes
We share certain identifiers — including cookie IDs, IP addresses, and conversion event data — with the following advertising and analytics platforms to measure whether our campaigns result in signups or other meaningful actions. Under the CCPA, this sharing may constitute a “sale” or “sharing” of personal information for cross-context behavioral advertising. In our logged-in product, advertising-related tracking is limited to the post-signup onboarding confirmation page; the signup form page itself is not instrumented with advertising tags.
Current and planned ad measurement services:
- Google Analytics / Google Ads
- Meta (Facebook / Instagram)
- LinkedIn Ads
- Reddit Ads
- X (Twitter) Ads
- TikTok Ads
We also share data with the following service providers who process data on our behalf: Appcues (onboarding), Attio (CRM), HubSpot (marketing communications), Fathom Analytics (privacy-first analytics), Amazon Web Services (hosting), and Framer (website hosting).
We do not sell your name, email address, or account content to third parties.
Your Right to Opt Out
You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising at any time.
To opt out:
- Click “Do Not Sell or Share My Personal Information” in the footer of any page on obvious.ai, or
- Email compliance@obvious.ai with “CCPA Opt-Out” in the subject line.
Opting out does not affect your ability to use the platform or any features.
Your Other California Privacy Rights
California residents also have the right to:
- Know what personal information we have collected about you
- Delete your personal information (subject to certain exceptions)
- Correct inaccurate personal information
- Limit use of sensitive personal information to necessary purposes
- Non-discrimination for exercising any of these rights
To submit a rights request, email compliance@obvious.ai. We respond within 45 days.
Full Privacy Policy
This Notice is a summary. Our complete Privacy Policy provides full details on data collection, use, retention, international transfers, your rights, and how to contact us.
Questions: compliance@obvious.ai