CCPA / CPRA Privacy Notice

1. CCPA Overview

This California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) Notice ("Notice") supplements the information contained in the BrillSign Privacy Policy. It applies solely to visitors, users, and others who reside in the State of California.

We adopt this notice to comply with the CCPA and CPRA, and any terms defined in those statutes have the same meaning when used in this Notice.

2. Your California Privacy Rights

California residents have specific rights regarding their personal information:

• Right to Know: You have the right to request that we disclose what personal information we collect, use, disclose, and sell/share.
• Right to Delete: You have the right to request the deletion of your personal information collected or maintained by us, subject to certain legal exceptions.
• Right to Correct: You have the right to request that we correct inaccurate personal information that we maintain about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt-out of the sale or sharing of your personal information. Please note: BrillSign does not sell or share your personal information.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of sensitive personal information. However, BrillSign only uses sensitive personal information for essential service functions.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

3. Categories of Information We Collect

We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device.

Specifically, we have collected the following categories of personal information within the last twelve (12) months:

• Identifiers: Name, professional email address, and IP address.
• Professional or Employment-Related Information: Job title, organizational affiliation, and department.
• Internet or Other Electronic Network Activity: Interaction with our website, service usage metrics, and platform log data.
• Cryptographic Proofs (Zero-Knowledge Content): Mathematical hashes of files. Document content itself is encrypted client-side and is mathematically unreadable by BrillSign.

4. Sources of Information

We obtain the categories of personal information listed above from the following categories of sources:

• Directly from You: For example, from forms you complete when signing up for a trial, demo, or waitlist.
• Indirectly from You: For example, from observing your actions on our website and platform via automated telemetry.

5. Business Purposes for Using Personal Information

We may use or disclose the personal information we collect for one or more of the following business purposes:

• To fulfill or meet the reason you provided the information (e.g., creating your account).
• To provide, support, personalize, and develop our website, products, and services.
• To maintain the safety, security, and integrity of our platform, systems, databases, and business.
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.

6. No Sale or Sharing of Personal Information

In the preceding twelve (12) months, BrillSign has not sold or shared any personal information to third parties for commercial or cross-context behavioral advertising purposes. We do not sell or share personal information of consumers, including those under 16 years of age.

7. Exercising Your Rights

To exercise your Right to Know, Delete, or Correct, please submit a verifiable consumer request to us by emailing us at privacy@brillsign.com.

Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.

We will respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing.