Your Rights Under the California Consumer Privacy Act of 2018 (CCPA)

This page contains a description of your rights and specific disclosures required by CCPA.  For additional information regarding our privacy practices, see our Privacy Policy.  Terms used and not otherwise defined herein shall have the meanings set forth in our Privacy Policy and the Uconnect and SiriusXM Guardian Terms of Service or the Alfa Connect and SiriusXM Guardian Terms of Service, as applicable.

Not Covered: This page applies specifically to information collected by Sirius XM Connected Vehicle Services Inc. (Sirius XM CV) with regard to the SiriusXM Guardian connected vehicle service programs with Uconnect or Alfa Connect devices, as applicable.  This page does not apply to information collected by Sirius XM CV through other services offered or performed by Sirius XM CV.  It also does not apply to data collected by Sirius XM Radio Inc. or any of its other subsidiaries or affiliates, including Pandora Media, LLC and Automatic Labs.  Please see the applicable privacy policies of such companies for more information about their data collection and use practices.  For specific CCPA disclosures related to connected vehicle services programs provided by Sirius XM CV to Mercedes-Benz vehicles, please go here.

Right to Opt Out

You have the right to direct us, or to authorize someone acting on your behalf to direct us, not to sell your personal information to third parties for their own purposes. To inform us of your preference to opt out, visit Do Not Sell My Info or call us at 866-443-9981. We will act upon opt-out requests within 15 days of receipt, and will notify you and/or your authorized agent when the request has been processed.

Right to Know

Right to Disclosure of Categories of Information: You have the right to request the following disclosures covering the 12-month period preceding our receipt of your request.

  • The categories of personal information we have collected about you.
  • The categories of sources from which your personal information is collected.
  • Our business or commercial purposes for collecting or selling personal information.
  • The categories of third parties with whom we share personal information.
  • The categories of personal information we have sold and the categories of third parties to whom the personal information was sold.
  • The categories of personal information we have disclosed for a business purpose.

Right to Access the Specific Pieces of Information: You also have the right to request access to the specific pieces of personal information we have collected about you in the preceding 12 months, which we will deliver to you electronically, in a portable format where feasible.

Right to Deletion

You have the right to request deletion of the personal information about you that we have collected from you.  Please note that we are unable to delete information needed to:

  • Continue to provide Service(s) if you have an active trial, paid or other subscription with us, fulfill the terms of a written warranty, provide goods or services you’ve requested, or complete a transaction;
  • Detect, prevent or prosecute security incidents, fraud, or other misuse;
  • Identify, repair, and debug errors that impair our products, services, systems, or other functionality;
  • Comply with legal or reporting obligations, including to pursue or defend legal claims, exercise or enable others to exercise any rights provided by law, enforce or comply with contractual obligations, respond to valid requests for information, and comply with or enforce applicable laws and regulations; or
  • Enable other internal uses consistent with your expectations based on your relationship with us or the context in which you provided the information.

Nondiscrimination

If you exercise any of your rights under CCPA, you have the additional right not to be discriminated against, including by our (a) denying you service, (b) charging you different prices or rates, such as applying a discount or penalty, (c) providing you a different level or quality of services, or (d) suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services. We may, however, offer you a different price, rate, level, or quality of services if the difference in price, rate, level or quality is reasonably related to value provided to us by your information.

How to Submit Requests

Submitting Requests

Requests to opt-out, know, or delete must each be submitted separately. You may submit to us up to two requests to know or up to four (4) requests to delete within a 12-month period. To submit a request, visit this page. To place a request by phone, you may call us at 844-796-4827 between the hours of 8:00 am and 5:00 pm Central Time, Monday through Friday, excluding holidays.

To protect your information from inadvertent deletion or disclosure, and to ensure the integrity of our systems and the proper fulfillment of your request, we cannot simultaneously process requests for access and deletion. Please wait until your pending request for access or deletion has been completed before submitting a subsequent request.

Please note that if you have an active subscription when you request deletion, we will not cancel your subscription, and we will retain such information as reasonably necessary to provide the Service(s), manage contact preferences, and otherwise in accordance with the exceptions noted above. To cancel your subscription, you must contact SiriusXM Guardian Customer Care at 844-796-4827 or through any other method mandated by law.

Verification and Authorized Agents

For your protection, you must provide sufficient information to verify your identity in order for us to act upon a request. If you are or have been a SiriusXM Guardian subscriber, you must provide and have access to the email address on file for your account, and will be asked to match certain specific other data associated with your account. If we cannot verify your identity with regard to a request for access to specific pieces of personal information, we may provide only the information that we determine is safe to provide or we may deny your request. In that event, if you have provided us with viable contact information, we will let you know why we are unable to honor your request as submitted.

If you submit a request to opt-out of sale and we are unable to locate a current or former account using the information provided in your request, we will record your preference and comply with your request to the extent we are able to identify you.

You may authorize someone to make a request on your behalf. You must supply the person with written permission to act on your behalf, and your agent must provide proof of such authorization before we will act upon the request. If you are submitting a request to access or delete through an authorized agent, your agent must be an attorney acting on your behalf, and you must verify your identity directly with us through the process outlined above, unless your authorized agent is acting pursuant to a power of attorney under the California Probate Code.

Collection and Sharing of Personal Information

Categories of Personal Information We Collect

We collect the following categories of personal information. The information we collect is described further in our Privacy Policy, which you should review in addition to this list. Sirius XM CV does not knowingly collect any personal information from persons under 16 years of age.

  1. Identifiers and contact information, such as your name, email address, postal address, phone number, zip code, vehicle identification number (VIN), account number, password, device and other technological identifiers, and IP address.  
  2. Payment information, if you purchase a SiriusXM Guardian subscription, such as credit or payment card number, card expiration date, and billing zip code.
  3. Commercial information, such as the sale or lease date of your vehicle, the services you have used or purchased, service duration and price, renewal dates, or other purchasing or consuming histories or tendencies.
  4. Internet or other activity information, including browsing history on our Sites, responses to electronic marketing campaigns, interactions with our Sites and the Services such as points of interest search history, journey planning information, and drive alerts.
  5. Geolocation data, transmitted by your vehicle when your vehicle or you initiate a device health check or service command. Note: Other geolocation and vehicle data may be transmitted on a continuous basis from your vehicle, further described in the SiriusXM Guardian Privacy Policy as Transmitted Vehicle Data. Sirius XM CV does not have access to, use or store the Transmitted Vehicle Data.
  6. Audio information, including voice interactions with customer care, marketing agents, or interactive in-vehicle services
  7. Inferences drawn from any of the information we collect.
  8. Vehicle data including Vehicle make, model, year and trim level, service capability of device, and odometer reading, as further defined and described in our Privacy Policy.
  9. Other personal information, including any personal information you choose to share with us via your account management center, customer care communications, or otherwise.
  10. Satellite Service Data including, if you are an active satellite radio subscriber, usage and performance of the satellite radio in your Vehicle. Sirius XM CV collects Satellite Service Data and provides it directly to Sirius XM Radio Inc. Use of Satellite Service Data by Sirius XM Radio Inc. is governed by the Sirius XM Radio Privacy Policy, which may be found at www.siriusxm.com.  Sirius XM CV does not have access to, use or store the Satellite Service Data.

Business or Commercial Purposes for Collection, Use, and Sharing of Personal Information

We collect, use, and share personal information for the following business and commercial purposes:

  1. Auditing, including subscriber and financial reporting for internal and external purposes and auditing compliance with contractual commitments, laws and other standards.  We also measure and analyze the Sites and Service usage for things like determining the frequency of service usage and how well the Sites and the Services are performing.
  2. Security, including detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, prosecuting those responsible for that activity, conducting risk management, and to otherwise protect the safety and security of Sirius XM CV’s customers, users, systems and networks.
  3. Debugging to identify, prevent, and repair errors that impair or may impair the Services performed by Sirius XM CV.
  4. Short-term, transient use, including to enhance the performance of our Sites and the Services.
  5. Performing services including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing marketing services, providing analytic services, or providing similar services on our behalf, or on behalf of FCA or Alfa Romeo or Service Providers in support of the Services. Sirius XM CV collects, uses, and shares personal information for a number of purposes related to performing or obtaining services on Sirius XM CV’s behalf, including:
    1. To facilitate the creation of and secure your SiriusXM Guardian account
    2. To provide all aspects and features of the SiriusXM Guardian Services, as described in our Privacy Policy.
    3. To send you important Service(s)-related or subscription-related notifications and communications.
    4. To determine eligibility for Service(s).
    5. To fulfill your requests for certain products and services, such as emergency services, roadside assistance, concierge services, and point of interest searches, and enabling you to participate in and renew paid Service(s) and surveys.
    6. To send you information that you requested or agreed to receive.
    7. To alert you to developments and features of the Services and to notify you of administrative information, such as security or support and maintenance advisories.
  6. Undertaking internal research for technological development for the improvement and advancement of Sirius XM’s products and services.
  7. Improving and maintaining quality of service, including undertaking activities to verify maintain, or improve the quality and security of SiriusXM Guardian Services, upgrading our infrastructure, and developing new products and services.
  8. Commercial purposes, such as marketing and promoting the use of and subscriptions to SiriusXM Guardian, or services of our affiliates, in accordance with your contact preferences.
  9. Legal purposes, such as protecting or defending the legal rights or property of Sirius XM CV (including enforcing the Uconnect and Sirius XM Guardian Terms of Service and the Alfa Connect and SiriusXM Guardian Terms of Service and any related SiriusXM Guardian Application Terms of Use), its parent company Sirius XM Radio Inc. and any affiliate thereof, or the legal rights of our business partners, employees, agents, and contractors (including enforcement of our agreements), and complying with the law, legal process, or law enforcement, governmental agency or other government requests.
  10. Exceptional Circumstances.If Sirius XM CV or any of its affiliates is sold or disposed of as a going concern, whether by merger, sale of assets or otherwise, the relevant databases of Sirius XM CV could, in whole or in part, be transferred as part of that transaction.  Therefore, information about our subscribers, users of the Sites and our Service(s), including personal information, may be disclosed as part of any merger or acquisition, creation of a separate business to provide the Sites or our Service(s), or sale of our company assets, as well as in the event of an insolvency, bankruptcy or receivership in which personal information may be transferred as one of the business assets of the company.

Categories of Sources of Personal Information

We collect the personal information listed above from the following categories of sources.

  1. Trial and paid subscribers and other users of SiriusXM Guardian Services
  2. Vehicle-related entities, including vehicle manufacturers, distributors, dealerships, and providers of vehicle financing.
  3. Vehicle devices, such as the Uconnect or Alfa Connect embedded device and the SiriusXM Radio.
  4. Entities providing support for our business with you, such as emergency service providers and first responders, customer care support agencies, concierge services, and other service providers.
  5. Service providers of other connected vehicle services to your vehicle, such as the WiFi provider to your vehicle.
  6. Marketing companies and data providers that create, maintain, and distribute professional marketing lists or segments, or create, maintain, analyze or distribute other marketing, contact, demographic or similar data.
  7. Related companies, including our parent company Sirius XM Radio Inc. and its subsidiaries.

Categories of Third Parties with Whom We Share Personal Information

  1. Individuals you designate or to whom you allow access or use of your subscription and account, such as additional drivers or emergency contacts listed on your account.
  2. Service providers that provide specialized services, or support for the Services.  These companies are authorized to use your personal information only as necessary to provide the Services. They are not authorized to use your personal information for their own, unrelated purposes.
    1. Marketing providers and bulk mail and email processors who send out emails and mail on our behalf
    2. Call center vendors who place or receive phone calls on our behalf, or other vendors who receive or respond to customer inquiries on our behalf
    3. Data cleanseing and other data providers that correct, enhance or update data, such as contact data.
    4. Content providers for services, such as navigation and point of interest services
    5. Payment processors
    6. Customer care support providers
    7. Scheduling facilitators
    8. Concierge service providers
    9. Privacy, security and fraud detection providers
    10. Platform technology providers
    11. Manufacturers of automotive vehicles or components of vehicles and distributors
    12. Auditors, consultants, attorneys and other professional service providers
  3. Marketing companies and data providers that create, maintain, and distribute professional marketing lists or segments, or maintain and distribute other marketing, or similar data.
  4. Vehicle-related entities, including vehicle manufacturers, distributors and dealerships, providers of vehicle repair services and roadside assistance services, and providers of vehicle financing.
  5. Marketing companies and data providers that create, maintain, and distribute professional marketing lists, or maintain and distribute other marketing, contact, demographic and similar data.
  6. Governmental or quasi-governmental agencies or organizations that make valid legal requests for information or to whom Sirius XM CV shares information to protect or defend the legal rights or property of Sirius XM CV, its parent company Sirius XM Radio Inc. and any affiliate thereof, or the legal rights of our business partners, employees, agents, and contractors (including enforcement of our agreements)
  7. Related companies, including our parent corporation Sirius XM Radio Inc. and its subsidiaries, or any successors in interest in the event of a corporate reorganization, merger, or sale of all or substantially all of our assets.
  8. Litigants or other parties to legal proceedings that make valid legal requests for information or to whom Sirius XM CV shares information, or the legal rights of our business partners, employees, agents, and contractors (including enforcement of our agreements).
  9. Other third parties you have authorized, if you have given permission for us to share data about you with them, such as the WiFi provider to your vehicle.

Table 1: Collection and Sharing of PI

For each category of personal information (PI) we collect, this table lists the categories of sources from which that information is collected, the business or commercial purposes for which we collect and use the information, and the categories of third parties with whom we share the information.

Category of PI Sources of PI Business Purposes Third Parties
Identifiers and Contact Information Users; vehicle-related entities; service providers; marketing companies and data providers; governmental or quasi-governmental agencies or organizations; related companies Auditing; security; debugging; short-term, transient use; performing services; undertaking internal research; improving and maintaining quality of service; commercial purposes; legal purposes Users and other individuals; service providers; vehicle-related entities; marketing companies and data providers; governmental or quasi-governmental agencies or organizations; related companies; rights owners; litigants or other parties to legal proceedings; other authorized third parties
Payment information Users; service providers Auditing; security; performing services; improving and maintaining quality of service; legal purposes Service providers; related companies
Commercial information Users; vehicle-related entities; service providers; marketing companies and data providers; related companies Auditing; security; debugging; short-term, transient use; performing services; undertaking internal research; improving and maintaining quality of service; commercial purposes; legal purposes Users and other individuals; service providers; vehicle-related entities; marketing companies and data providers; governmental or quasi-governmental agencies or organizations; related companies; rights owners; litigants or other parties to legal proceedings; other authorized third parties
Internet or other activity information Users; vehicle-related entities; service providers; marketing companies and data providers Auditing; security; debugging; short-term, transient use; performing services; undertaking internal research; improving and maintaining quality of service; commercial purposes; legal purposes Users and other individuals; service providers; vehicle-related entities; marketing companies and data providers; governmental or quasi-governmental agencies or organizations; related companies; rights owners; litigants or other parties to legal proceedings; other authorized third parties
Geolocation data Users; vehicle-related entities; service providers; related companies Auditing; security; debugging; short-term, transient use; performing services; undertaking internal research; improving and maintaining quality of service; legal purposes Service providers; vehicle-related entities; governmental or quasi-governmental agencies or organizations; related companies; litigants and other parties to legal proceedings; other authorized third parties
Audio information Users; service providers Auditing; short-term, transient use; performing services; undertaking internal research; improving and maintaining quality of service; legal purposes Users and other individuals; vehicle-related entities; service providers; litigants or other parties to legal proceedings
Inferences Users; service providers; related companies Auditing; security; debugging; short-term, transient use; performing services; undertaking internal research; improving and maintaining quality of service; commercial purposes; legal purposes Users and other individuals; service providers; marketing companies and data providers; related companies
Vehicle data Users; vehicle-related entities; related companies Auditing; security; debugging; short-term, transient use; performing services; undertaking internal research; improving and maintaining quality of service; commercial purposes; legal purposes Users and other individuals; service providers; vehicle-related entities; marketing companies and data providers; related companies; other authorized third parties
Other personal information Users; vehicle-related entities; service providers; marketing companies and data providers; other third parties; related companies Auditing; security; debugging; short-term, transient use; performing services; undertaking internal research; improving and maintaining quality of service; commercial purposes; legal purposes Users and other individuals; service providers;  vehicle-related entities; marketing companies and data providers; governmental or quasi-governmental agencies or organizations; related companies; rights owners; litigants or other parties to legal proceedings; other authorized third parties
Satellite Service Data Users Short-term, transient use Related companies

Disclosure and Sale of Personal Information

Table 2: Disclosure of Personal Information

Sirius XM CV has disclosed personal information to third parties for a business or commercial purpose in the preceding 12 months, as those terms are defined in CCPA.

For each category of personal information (PI) we collect, this table lists the categories of third parties to whom we disclose PI and the business or commercial purposes for doing so.

Category of PI Business Purposes Third Parties
Identifiers and Contact Information Auditing; security; debugging; short-term, transient use; performing services; undertaking internal research; improving and maintaining quality of service; commercial purposes; legal purposes Designated individuals; service providers; vehicle-related entities; governmental or quasi-governmental agencies or organizations; litigants or other parties to legal proceedings
Payment information Auditing; security; performing services; improving and maintaining quality of service; legal purposes Service providers; related companies
Commercial information Auditing; security; debugging; short-term, transient use; performing services; undertaking internal research; improving and maintaining quality of service; commercial purposes; legal purposes Designated individuals; service providers; vehicle-related entities; product-related entities; marketing companies and data providers; related companies; rights owners; litigants or other parties to legal proceedings; other authorized third parties
Internet or other activity information Auditing; security; debugging; short-term, transient use; performing services; undertaking internal research; improving and maintaining quality of service; commercial purposes; legal purposes Designated individuals; service providers; vehicle-related entities; product-related entities; marketing companies and data providers; governmental or quasi-governmental agencies or organizations; third-party social media websites, applications, or services; related companies; rights owners; litigants or other parties to legal proceedings; other authorized third parties
Geolocation data Auditing; security; debugging; short-term, transient use; performing services; undertaking internal research; improving and maintaining quality of service; legal purposes Designated individuals; service providers; governmental or quasi-governmental agencies or organizations; related companies; litigants and other parties to legal proceedings
Audio information Performing services; undertaking internal research; improving and maintaining quality of service; legal purposes Service providers; vehicle-related entities; governmental or quasi-governmental agencies or organizations; litigants or other parties to legal proceedings; other authorized third parties
Inferences Auditing; security; debugging; short-term, transient use; performing services; undertaking internal research; improving and maintaining quality of service; legal purposes Designated individuals; service providers; vehicle-related entities; product-related entities; marketing companies and data providers; related companies; other authorized third parties
Other personal information Auditing; security; debugging; short-term, transient use; performing services; undertaking internal research; improving and maintaining quality of service; legal purposes Designated individuals; service providers; vehicle-related entities; governmental or quasi-governmental agencies or organizations; related companies; litigants or other parties to legal proceedings; other authorized third parties

Table 3: Sale of Personal Information

Sirius XM CV has not sold personal information to third parties for a business or commercial purpose in the preceding 12 months, as those terms are defined in CCPA.