BridgeCircle — U.S. State Privacy Rights Supplement

Last updated: October 13, 2026

This Supplement is a companion to, and forms part of, the BridgeCircle Privacy Policy.

This Supplement adds disclosures and rights for residents of U.S. states with comprehensive consumer-privacy laws. It supplements, and is part of, the BridgeCircle Privacy Policy. If there is a conflict between the main Policy and this Supplement for a covered resident, this Supplement controls for that resident.

A. Categories of Personal Information

In the past 12 months, we have collected the following categories of personal information (as defined under the California Consumer Privacy Act, as amended by the CPRA):

We collect these from the sources in Section 2 of the Policy (you, your Community, third-party integrations, and automatically) and use them for the purposes in Section 3. We disclose each category, for business purposes, to the service providers described in Section 5 of the Policy, and as needed for the legal and safety purposes described there. Identifiers, customer-records information, audio/visual information, professional/employment information, education information, and geolocation are also disclosed to other members and your Community as your settings and Community configuration allow. We retain each category for the periods described in Section 7 of the Policy.

B. How We Disclose Personal Information

We disclose personal information to service providers, to other members and your Community as your settings and Community configuration allow, and for legal and safety reasons, as described in Section 5 of the Policy.

We do not sell personal information, and we do not “share” it for cross-context behavioral advertising. We do not use or disclose sensitive personal information for purposes beyond those permitted under the CPRA (such as providing the Service, security, and other business purposes), and therefore do not offer a “Limit the Use of My Sensitive Personal Information” option at this time.

We do not knowingly sell or share the personal information of consumers under 16 years of age. We also do not process the personal information of members we know are under 18 for targeted advertising, for sale, or for profiling in furtherance of decisions that produce legal or similarly significant effects.

C. Your Rights

Depending on your state of residence, you may have the right to:

• Know / access the personal information we have collected about you, including categories, sources, purposes, and recipients;
• Access a portable copy of your personal information;
• Correct inaccurate personal information;
• Delete personal information we have collected from you;
• Opt out of the sale or sharing of personal information and of certain targeted advertising and profiling (to the extent we engage in any such activity);
• Limit the use of sensitive personal information (to the extent applicable);
• Appeal a denial of a request, where your state provides an appeal right; and
• Be free from discrimination for exercising your rights.

D. How to Exercise Your Rights

Submit a request by emailing privacy@bridgecircle.org or using the in-app privacy tool. We will verify your request by confirming information associated with your account. You may use an authorized agent, who must provide proof of authorization. We will respond within the timeframes required by your state’s law (generally within 45 days, extendable as permitted). Where available, you may appeal a decision by replying to our response or contacting privacy@bridgecircle.org. We will respond to your appeal within the time required by your state’s law. If we deny your appeal, you may contact your state’s Attorney General.

Opt-out preference signals. Where required by applicable state law, we treat recognized browser opt-out preference signals (such as Global Privacy Control) as a request to opt out of sale/sharing for that browser or device.

E. State-Specific Notes

• California (CCPA/CPRA). In addition to the rights above, California’s “Shine the Light” law (Cal. Civ. Code § 1798.83) allows California residents to request information about disclosures to third parties for their direct-marketing purposes; we do not disclose personal information to third parties for their own direct marketing. California residents under 18 who are registered users may request removal of content they posted on the Service by contacting privacy@bridgecircle.org. Removal does not ensure complete or comprehensive removal of the content (for example, if another member has copied or reposted it).
• Student data (SOPIPA). Because the Service is used by K–12 schools and may include current students, we do not use covered student information for targeted advertising, do not use it to amass a profile about a K–12 student except in furtherance of K–12 school purposes, and do not sell it; we maintain reasonable security and delete covered student data at the Community’s request, and at a student’s or parent’s request as described in the Policy, consistent with California’s SOPIPA and our Customer agreements.
• Other states. Residents of other states with comprehensive consumer-privacy laws (such as Virginia, Colorado, Connecticut, Texas, and Oregon) have the applicable rights listed in Section C, exercisable as described in Section D.

F. Contact

For any question about this Supplement or to exercise your rights:

BridgeCircle Inc. 3545 Wilshire Boulevard, Apt 905, Los Angeles, CA 90010 privacy@bridgecircle.org