California Privacy Rights

Information relevant to this website

Authorized administration and assistant features. Authorized employee profiles may include names, usernames, email addresses, roles, account status, and permission settings. The access-code and recovery workflow processes related verification and recovery status. If the Owner uses the dashboard AI assistant, the prompt and any attached screenshot are sent to OpenAI through its API; the site does not save the conversation transcript in its server-side application store. OpenAI handles API data under its own terms and current data controls. Its API documentation says default abuse-monitoring logs may include prompts and responses and are generally retained for up to 30 days unless an exception applies; account-specific controls or agreements may differ. See OpenAI API data controls. Do not submit passwords, access codes, API keys, subscriber records, or other sensitive information to the assistant.

Scheduled employee notices. When configured, the site sends selected employee names, email addresses, release details, and 60-minute or 30-minute Premiere reminders through the configured email service. It records message delivery status and acknowledgment events, including timestamps, in a restricted store; those records are eligible for cleanup 120 days after the acknowledgment deadline when the store is next updated. Mail providers and recipients may retain copies under their own practices.

Required Echo country and optional region/city. Submitting a public Echo requires selecting a country. State, province, region, and city are optional and can be skipped. The website server requests country, region, and city choices from CountriesNow over HTTPS; the browser does not send your IP address to CountriesNow, though the provider may receive the hosting server’s network address and lookup values. Its lists may be incomplete or inaccurate, so a city may also be typed if it is missing from the suggestions. The selected country and any region or city provided are stored with the message and displayed publicly when the Echo is published. See the main Privacy & Security notice for details.

Depending on how you use the site, information may include identifiers and contact details (such as an IP address, email address, browser identifier, or user-agent); internet or network activity (such as requested pages, language and feature settings, and referrer information); messages you send; security-event information; and information used by optional YouTube account features, such as the connected channel identifier and title. Information may come from your browser or device, forms you submit, server requests, and optional third-party features you choose to use.

Browser-controlled media playback. Browsers decide whether media can start automatically, particularly when it includes sound. This site does not try hidden media or check browser restrictions on every page. If the YouTube player reports that a requested playback attempt was blocked, the site may show a one-time notice with instructions for your browser. The site reads the browser name locally for those instructions; that identification is not separately sent to or stored on the site server. Dismissing the notice is remembered for the current tab session. The site cannot change browser settings.

The site uses information to operate pages and features, respond to requests, maintain security, and provide optional services. Relevant recipients may include website hosting and email providers, Google/YouTube, Google’s translation service, and the IP-intelligence provider described in the main Privacy & Security notice.

Refer to the main Privacy & Security notice for the full category, purpose, provider, and retention descriptions.

Echo moderation identifiers, purpose, and retention. When an Echo is flagged, the moderation ledger records a keyed, one-way hash of a random first-party browser marker and a masked network prefix derived from the IP address received by the server (IPv4 /24 or IPv6 /64), alongside the moderation reason, comment reference, and review decision. The marker and prefix are pseudonymous identifiers that may be personal information under California law, and are matching signals rather than identity-verification tools; the event remains linked to the submitted Echo and visitor-provided fields for authorized review. The workflow does not use canvas or device fingerprinting, reverse-IP identity enrichment, or cross-site advertising. Their purpose is limited to internal moderation, anti-bot and abuse prevention, fraud prevention, and maintaining platform security and availability. Unresolved or unreviewed event records remain in the restricted queue until authorized administrative review. Once resolved, event rows are eligible for automatic deletion when they are at least 365 days old from creation; cleanup runs during comment API activity, so removal occurs on the next cleanup pass. When a held Echo is approved, the public Echo contains no moderation status, review notes, browser-marker hash, or masked network prefix; the separate private moderation event follows the retention schedule above.

Sale, sharing, and advertising

The current website code does not include targeted-advertising technology. Wyatt Kohl Music does not intentionally sell personal information or share it for cross-context behavioral advertising, so there is no current sale or sharing practice to opt out of. If that practice changes and the CCPA/CPRA applies, the site will process qualifying opt-out preference signals, including Global Privacy Control, as required by law. The site may disclose information to service providers and third-party features as described in the main Privacy & Security notice.

Rights that may be available

If California privacy law applies to the operator’s handling of your information, and subject to legal exceptions, you may have the right to:

• Know/access the personal information collected about you and information about its use and disclosure.
• Request deletion of personal information.
• Request correction of inaccurate personal information.
• Opt out of sale or sharing for cross-context behavioral advertising, where applicable.
• Limit certain uses or disclosures of sensitive personal information, where applicable.
• Receive equal service and price when exercising privacy rights.

You may also appeal a denial of a request where applicable law provides an appeal right.

How to submit a request

Use the Contact page or email contact@wyattkohlmusic.com with the subject “California Privacy Request.” Tell us whether you are asking to know/access, delete, or correct information, or to appeal a denial. Please do not include passwords, access tokens, payment-card details, or unnecessary sensitive information.

We may ask for information reasonably necessary to verify your identity and locate relevant records. Do not send more personal information than needed to process the request. Legal exceptions may permit or require us to retain certain information.

Response timing and review

When the CCPA/CPRA applies, we will confirm receipt within the required period and respond within the statutory deadline. The usual deadline for requests to know, delete, or correct is 45 calendar days; the law permits an additional 45 days when reasonably necessary if we notify you. If we deny a request, we will explain the reason where required and describe any available appeal process.

Questions or complaints

For questions about this page or our privacy practices, use the request methods above. You may also visit the California Privacy Protection Agency website.

Return to Privacy & Security