If your business meets the CCPA thresholds (annual revenue over 25 million USD, or processes data for over 100,000 California consumers, or derives over half its revenue from selling personal information) then chat conversations from California visitors fall under it. The notice at collection and consumer rights workflow both have to cover the chat.

It means you do not transfer personal information collected via the chat to third parties for monetary or other valuable consideration. SleekAI passes only the question to your model provider under your own contract for service delivery, which is not a sale. Vendor SaaS chat tools that share data with ad networks or analytics partners cross that line.

Firefox, Brave, DuckDuckGo, and several mobile browsers send a Sec-GPC: 1 header on every HTTP request when the user enables the privacy setting. California's regulations treat that header as a valid opt-out signal. SleekAI's server-side hook reads it on each chat request and can adjust the data mapper accordingly.

If you fall under CCPA, yes. SleekAI itself does not provide that link (it is a site-wide UX concern), but the chatbot side respects whatever opt-out state your site records, whether through a cookie, a user-meta value, or a session flag. The link should still be present in the footer per regulator guidance.

CPRA (the 2023 expansion of CCPA) added sensitive personal information categories and the concept of sharing for cross-context behavioral advertising. SleekAI does not share conversation data for behavioral advertising under any condition, which keeps you on the right side of the share definition without further configuration.

Yes. Conversations are keyed by visitor email when collected, by session ID otherwise. A simple WP-CLI command or admin query exports the relevant rows. SleekAI also exposes a hook for tying chat exports into a broader DSR fulfillment tool if you use one (such as Privado, OneTrust, or an in-house implementation).

Major providers (OpenAI, Anthropic, Google) do not sell API content and their terms explicitly say so. Verify the current terms of whichever provider you use. If the provider's terms change in a way you cannot accept, you switch keys in SleekAI without rewriting the chat or migrating data, since data is stored on your side regardless of provider.

Yes. Complianz, Cookiebot, CookieYes, and Iubenda all expose CCPA-mode configurations, and SleekAI integrates with each. Under CCPA you cannot block content behind affirmative consent, but you can offer a clear opt-out and respect it, which is how the integration is structured.