Account Registration. If you are a user, you must provide us certain Personal Information to create an account, such as your payment information, full name, and contact information such as phone number and email address.

SMS Communications. As part of our verification and security processes, we will send you SMS messages including one-time passcodes (OTP) used for two-factor authentication. By providing your phone number, you consent to receive these messages. Standard message and data rates may apply. You can opt out of SMS communications at any time by replying "STOP" to any message you receive.

Order & Payment Data. When you make a payment, we use a PCI-compliant payment processor, Stripe, to help us facilitate payment. We do not receive your credit card, debit card or other financial information when you make a payment, and such information is provided directly to our payment processor. However, we may receive information about your transaction and your contact information (e.g., name, email address, mailing address, phone number). You can review Stripe's privacy policy here.

Platform Information. In addition to your account information, we may collect Personal Information used in connection with your use of the Platform, such as your contact information when you schedule appointments via the Platform, and any other information you provide.

Communications with Us. If you communicate with us, we will collect any Personal Information that you elect to provide to us during or as a result of those communications, such as your phone number, email address, and message content.

Newsletter. You may sign up for our newsletter on our Website by providing your email address. We use this data to send you our newsletter, as well as other promotional and electronic communications.

Feedback. When you provide comments or feedback about our Website, Platform, or the functions and services made available through them ("Feedback"), we will not treat that Feedback as confidential, and we may use that Feedback for any purpose in our sole discretion so long as it does not personally identify you. Feedback may be used without attribution or compensation to you.

Testimonials. You may submit a testimonial about our services via the Website that may be publicly available via the Website. Any such testimonial will include your first name and last initial, along with any other information you include in such testimonial.

Therapist Applications. If you are a therapist that is applying to work with us, you will be redirected from our Website to a website operated by a third-party vendor (e.g., Indeed). You may be required to create an account with that vendor. We encourage you to review the terms and privacy policy posted on that vendor's website since this Policy does not govern your use of that website. If you send us your job application materials directly, we will only use and share those job application materials to evaluate your qualifications to work with us. We may receive Personal Information from you or our vendor that includes your name, bank account information, gender, date of birth, governmental identification numbers (SSN/FEIN), e-mail address, phone number, home address, NPI number (if applicable), license information, CAQH number (if applicable), education, and job history.

Account Activity. We may collect Personal Information from the Website and Platform when you are logged into your account. We may combine this Personal Information with other Personal Information from other sources.

Cookies & Other Tracking Technologies. We may use cookies, web beacons, pixel tags, and other tracking technologies (collectively "Tracking Technologies") on our Website and Platform. Most browsers automatically accept Tracking Technologies. You can disable this function by changing your browser settings, but disabling Tracking Technologies may impact your use of the Website and Platform. Not all features or functions of the Website or Platform may work properly if you disable Tracking Technologies. You cannot disable all Tracking Technologies, such as those that are essential to the functioning of the Website or Platform.

The Tracking Technologies on our Website and Platform may collect information such as:

• IP addresses assigned to the computers and other devices you use;
• your internet service provider;
• device ID number;
• approximate geographic location;
• browser type;
• Website pages visited;
• websites you access before and after visiting the Website; and
• data related to how and when you use the Website.

California's "Do-Not-Track" Requirement: We currently do not honor "do not track" requests.

As Stated or Agreed to at the Point of Collection. We may use Personal Information for the purposes stated or agreed-to (or as is obvious) at the point of collection. For example, we use Personal Information to connect users and therapists, facilitate the services provided by therapists, respond to your communications, or send our newsletters. We may also use Personal Information as requested or consented to by you.

Administration. We use Personal Information for administrative purposes, such as managing accounts, facilitating transactions, to inform our business strategies, and to understand demographics and user preferences.

Marketing Communications. We use Personal Information to send you promotional and other electronic communications. We may use third parties or service providers to deliver communications to you. You may opt out of such marketing emails by using the unsubscribe link in the email or contacting us at contact@brightchoice.com with "Unsubscribe" in the subject line. Opting out of marketing communications does not opt you out of non-marketing communications, such as emails about your account or appointments.

Management. We use Personal Information for Website and Platform management, such as troubleshooting problems, improving content and functionality, conducting statistical and other analyses, and to customize the Website and Platform to users.

Business Analytics. We use Personal Information for business analytics purposes, including operations research, to assess the effectiveness of our transactions, online services, marketing, and advertising, and to analyze trends and demand.

Advertising and Communications. We may use Personal Information to send you promotions, to notify you of new services or programs, to notify you of new features, to notify you of changes to this Policy, and for other similar communications.

Create Aggregated and De-Identified Data. We may process Personal Information to create deidentified and aggregated data. Any such deidentified and aggregated data is no longer subject to this Policy.

To Protect Our Rights. We may use Personal Information to protect our legal rights or interests, or those of other parties, including to bring a legal action against you or anyone who may be causing harm to us, our Website or Platform, or to users of the same. We may also use Personal Information to seek business, financial, or legal advice, and to respond to other legal requests.

Employees and Affiliates. We may disclose Personal Information with our employees and affiliates who have a need to know the information for our business purposes. This includes sharing user data with therapists so the therapist can provide the appropriate services.

Third Parties and Service Providers. We may disclose Personal Information with third parties and service providers that provide services for us. For example, we may disclose Personal Information with third parties that: host and manage the Website and Platform, provide appointment scheduling services, provide marketing services, improve the content and functionality of the Website and Platform, perform data and statistical analyses, troubleshoot problems, provide payment processing services, and support or provide the security of the Website and Platform.

Therapist Information. If you are a therapist on our Platform, we may also share certain data such as information you volunteer including, but not limited to, your name, photograph, and information about your credentials, experience, specialties, and qualifications on our Website or when connecting you to users of our services.

Government Official and Law Enforcement. We will cooperate with law enforcement and other governmental agencies, and may disclose Personal Information: (i) if we believe in good faith we are legally required to disclose that Personal Information, (ii) if we are advised to disclose Personal Information by our legal counsel, or (iii) when necessary to identify, contact or bring a legal action against someone who may cause or be causing harm to, or interfering with the legal rights of, BrightChoice or any other party.

Professional Advisors. We may disclose Personal Information with our professional advisors, such as our attorneys, accountants, financial advisors, and business advisors, in their capacity as advisors to BrightChoice.

Change in Ownership. In the event BrightChoice is the subject of a change of control or in the event the Website or Platform change ownership, in whole or in part, or in the event of a bankruptcy, receivership or a similar transaction, we may provide Personal Information to the subsequent owner(s).

Other. We may disclose Personal Information with third parties when explicitly requested by or consented to by you, or for the purposes for which you disclosed the Personal Information to us as indicated at the time and point of the disclosure (or as was obvious at the time and point of disclosure).