Chargebee

Six reported changes affect data-use purposes, third-party disclosure, CCPA sale/sharing disclosures, international transfer safeguards, sensitive-information handling, and the change-notification commitment.

• The purposes Chargebee may process personal information for now include delivering targeted or cross-context behavioral advertising, using third-party and in-house AI/ML capabilities (including using personal information to help improve those capabilities), and creating aggregate or deidentified information; the earlier purpose list did not state these uses. (Section: What do We use Your personal information for?)
• The disclosure list now names advertising partners and ad networks, “other third parties You may authorize Us”, and potential buyers or successors, and it no longer conditions partner marketing outreach on consent. The earlier list had a separate Partners entry stating that disclosure for marketing outreach occurred only where You consented. (Section: Do We disclose Your information to third parties?)
• The CCPA sale/sharing disclosure now covers commercial information and inferences in addition to internet or network activity information, and shifts from “have sold/shared” to “may have sold/shared”; it also names advertising partners, social media platforms, and analytics providers as recipients. (Section: Additional information for California residents, “4. Sale and Sharing of Personal Information”)
• International transfer safeguards now include binding corporate rules and other regulator-adequate frameworks in addition to Standard Contractual Clauses, and the text no longer names the UK International Data Transfer Addendum specifically. The transfer location description changes from countries where Chargebee and its vendors are located to “outside the jurisdiction in which You are located.” (Section: Do We transfer any information across borders?)
• The collection section no longer states that Chargebee obtains affirmative express consent before disclosing sensitive personal information to a third party or using it for a materially different purpose; that consent commitment was removed. The California section instead adds a commitment not to process CCPA-defined sensitive personal information inconsistently with Cal. Code Regs. tit. 11, § 7027(m). (Section: What personal information do We collect about You?)
• The commitment on changes to this Privacy Notice moved from “We will notify You” to “We may notify You” for material changes adversely affecting rights. (Section: Changes to Our Privacy Notice)

13 further changes affect the effective date, the added inai.io website, the processor carve-out, the age threshold, third-party data sources, security wording, rights additions, response-timeline commitments, California collection categories, California opt-out controls, the Shine the Light provision, the Virginia-specific section, and contact details.