1. California Consumer Privacy Act (CCPA)

The California Consumer Privacy Act (CCPA)provides California residents with specific rights. 

You have the right to know what personal information we collect, how we use it, and how long we keep it. In the last 12 months, we collected the following categories of personal information: identifiers (such as name, contact information and device identifiers); commercial information (such as items purchased); internet or other network activity information (such as browsing behavior and other usage data); approximate location data; inferences (such as purchasing preferences and approximate location); demographic data (such as gender); audio, electronic, visual or similar information (such as customer support call information); and other personal information (such as product feedback or payment method information). For more details about the personal information we collect, including the categories of sources, please see the Personal Data We Collect section in our Privacy Policy. We collect this information for the business and commercial purposes described in the How We Use Information section in our Privacy Policy. We share this information with the categories of recipients described in the How Do We Share Information section in our Privacy Policy. Service providers we use to do work on our behalf may use information for the same purposes.

Our policies require that we retain records containing personal information for as long as they are needed for legal, tax, audit, investigative, and/or security purposes and then securely delete or destroy them.

You have the right to access, delete and correct information. You can request access to specific pieces and categories of personal information we collect by emailing us at [email protected] and following the instructions there, or by calling (415) 375-0082. We will provide this information to you in a portable and readily usable format. You can use this same contact information to request that we delete personal information we have about you unless we need it for specific reasons, and to correct inaccurate personal information we have about you. 

You have a right to inform us that you do not want your personal information sold or shared. California law defines “sale or sharing” broadly to include sharing personal information for monetary or other valuable consideration and the sharing of your information for cross contextual advertising purposes. This definition does not cover all sharing of personal information. We do not knowingly sell or share personal information related to children under 16 years of age. 

To opt out of these “sales” or “shares,” use the following link: Do Not Sell or Share My Personal Information. We do not knowingly sell personal information about consumers under the age of 16.

We do use third-party cookies and related technologies to send targeted ads, and this may be deemed a “sale” under the CCPA. Based on that interpretation, in the preceding 12 months, we have “sold” the categories listed in the Cookies and Other Technology of our Privacy Policy.

You have the right to limit the use of sensitive personal Information. This right lets you ask us to limit the use and disclosure of sensitive personal information if we use that information for purposes beyond what is needed to provide the products and services you request or for other reasons specified in the law. We do not use or disclose sensitive personal information for other purposes without your consent so we do not offer you an option to limit the use of sensitive personal information.

You have the right to not be discriminated against. We do not discriminate against you if you exercise any rights described in this section.

Where to exercise your rights. You or your authorized agent can exercise your right to know, access, delete, and correct data by:

We require you to verify your identity before we fulfill your request. Depending on the type of request you make, you may be required to prove access to your mobile phone, to your email address on file with us, or to a government-issued ID.

California residents, and authorized agents on their behalf, may request access to or deletion of their personal information by submitting their requests by emailing us at [email protected]. We will verify your request by asking you to provide information that matches information we have on file about you, such as your name, email address, order history, etc. You can also designate an authorized agent to exercise these rights on their behalf, but we will require proof that the person is authorized to act on your behalf and may also still ask you to verify your identity with us directly.

Questions. If you have questions about your rights under California Law or about our privacy policies and practices, please feel free to contact us at [email protected] or at the mailing address below.

Bright Machines, Inc.

ATTN: Legal Dept.

939 Harrison Street

San Francisco, California 94107

Additional California Privacy Rights: California “Shine the Light”

California customers may request, once per year, that we disclose the identity of any third parties with whom we have shared personal information for the third parties’ direct marketing purposes within the previous calendar year, along with the type of personal information disclosed. 

You may submit your “Shine the Light” request by emailing us at [email protected].

2. Colorado Privacy Act

The Colorado Privacy Act gives specific rights to Colorado residents.

You have the right to know whether we collect personal information. what it is and the purposes for which we use it. In the last 12 months, we collected the following categories of personal information: identifiers (such as name, contact information and device identifiers); commercial information (such as items purchased); internet or other network activity information (such as browsing behavior and other usage data); approximate location data; inferences (such as purchasing preferences and approximate location); demographic data (such as gender); audio, electronic, visual or similar information (such as customer support call information); and other personal information (such as product feedback or payment method information). For more details about the personal information we collect, including the categories of sources, please see the Personal Data We Collect section in our Privacy Policy. We collect this information for the business and commercial purposes described in the How We Use Information section in our Privacy Policy. We share this information with the categories of recipients described in the How Do We Share Information section in our Privacy Policy. Service providers we use to do work on our behalf may use information for the same purposes.

Our policies require that we retain records containing personal information for as long as they are needed for legal, tax, audit, investigative, and/or security purposes and then securely delete or destroy them.

You have the right to access, delete and correct information. You can access specific pieces and categories of personal information we collect by emailing us at [email protected] and following the instructions there, or by calling (415) 375-0082. To the extent technically feasible, we will provide this information to you in a portable and readily usable format. You can use the same contact information to request that we delete personal information we have unless we need it for reasons specified in the Colorado law and to request that we correct inaccurate personal information we have about you.

Use of sensitive personal information. Colorado law prohibits us from using sensitive personal information without your consent, except as specified in the law. We use sensitive personal information as you authorize with your express consent or as authorized under the law. 

You have the right to tell us not to use personal information to establish profiles to make decisions that produce legal or similarly significant effects. We do not use personal information to profile you to further decisions that have legal or similar significant effects. 

You have the right to tell us not to sell personal information or use it for targeted advertising. Colorado law defines “sale” to mean the exchange of personal data for monetary or other valuable consideration. The law describes “targeted advertising” as using personal information obtained or inferred over time from your activities across non-affiliated websites, applications or online services to predict your preferences or interests and target advertising to you.

We engage in online sale or targeted advertising activities when we share information with advertising technology companies present on our websites who combine that information with information they collect about your visits to other sites or that they otherwise have about you to provide more personalized advertising to you. This occurs through the use of cookies, pixels, tags and similar technologies.

You can opt out of sale and targeted advertising by using the following link: Do Not Sell or Share My Personal Information.

You can appeal a denial of your request to exercise any of the privacy rights provided by the Colorado law. If we deny your request, we will notify you and give you instructions on how you can appeal that decision to the Colorado Attorney General. 

We do not discriminate against you if you exercise any rights described in this section.

Where to exercise your rights

You or your authorized agent can exercise your right to know, access, delete and correct your data by:

You can exercise your right to opt-out of sale of personal information or use of it for targeted advertising by using the following link: Do Not Sell or Share My Personal Information.

We require you to verify your identity before we fulfill your request. Depending on the type of request you make, you may be required to prove access to your mobile phone, to your email address on file with us, or to a government-issued ID.

Colorado residents, and authorized agents on their behalf, may request access to or deletion of their personal information by submitting their requests by emailing us at [email protected]. We will verify your request by asking you to provide information that matches information we have on file about you, such as your name, email address, order history, etc. You can also designate an authorized agent to exercise these rights on their behalf, but we will require proof that the person is authorized to act on your behalf and may also still ask you to verify your identity with us directly.

If you have questions about your rights under the Colorado law, please feel free to contact us at [email protected] or at the mailing address below:

Bright Machines, Inc.

ATTN: Legal Dept.

939 Harrison Street

San Francisco, California 9410

3. Connecticut Data Privacy Act

The Connecticut Data Privacy Act gives specific rights to Connecticut residents.

You have the right to know whether we collect personal information about you. In the last 12 months, we collected the following categories of personal information: identifiers (such as name, contact information and device identifiers); commercial information (such as items purchased); internet or other network activity information (such as browsing behavior and other usage data); approximate location data; inferences (such as purchasing preferences and approximate location); demographic data (such as gender); audio, electronic, visual or similar information (such as customer support call information); and other personal information (such as product feedback or payment method information). For more details about the personal information we collect, including the categories of sources, please see the Personal Data We Collect section in our Privacy Policy. We collect this information for the business and commercial purposes described in the How We Use Information section in our Privacy Policy. We share this information with the categories of recipients described in the How Do We Share Information section in our Privacy Policy. Service providers we use to do work on our behalf may use information for the same purposes.

Our policies require that we retain records containing personal information for as long as they are needed for legal, tax, audit, investigative, and/or security purposes and then securely delete or destroy them.

You have the right to access, correct and delete information. You can access certain personal information we collect by emailing us at [email protected] and following the instructions there, or by calling (415) 375-0082. To the extent technically feasible, we will provide this information to you in a portable and readily usable format. You can use the same contact information to request that we delete personal information we have unless we need it for reasons specified in the Connecticut law and to request that we correct inaccurate personal information we have about you. 

Use of sensitive personal information. Connecticut law prohibits us from using sensitive personal information without your consent except as specified in the law. We use sensitive personal information as authorized by the law or after we obtain your express consent. 

You have the right to tell us not to use automated decision making to create profiles about you that we use for decisions that have legal or similarly significant effect. We do not use personal information to profile you to further decisions that have legal or similar significant effects. 

You have the right to opt-out of the sale of personal information and the use of personal information for targeted advertising. Connecticut law defines “sale” to mean the exchange of personal data for monetary or other valuable consideration. Connecticut law describes “targeted advertising” as using personal data obtained or inferred from your activities over time and across nonaffiliated Internet web sites or online applications to predict your preferences or interests, and display ads to you. 

We engage in online targeted advertising activities when we share information with advertising technology companies present on our websites who combine that information with information they collect about your visits to other sites or that they otherwise have about you to provide more personalized advertising to you. This occurs through the use of cookies, pixels, tags and similar technologies.

You can exercise your right to opt out by using the following link: Do Not Sell or Share My Personal Information.

You can appeal a denial of your request to exercise any of the privacy rights provided by the Connecticut law. If we deny your request, we will notify you and give you instructions on how you can appeal that decision to the Connecticut Attorney General. 

We do not discriminate against you if you exercise any rights described in this section.

Where to exercise your rights. 

You or your authorized agent can exercise your right to know, access, delete and correct your data by:

You can exercise your right to opt-out of the sale of personal information or use of this information for certain targeted advertising by using the following link: Do Not Sell or Share My Personal Information.  

We require you to verify your identity before we fulfill your request. Depending on the type of request you make, you may be required to prove access to your mobile phone, to your email address on file with us, or to a government-issued ID.

Connecticut residents, and authorized agents on their behalf, may request access to or deletion of their personal information by submitting their requests by emailing us at [email protected]. We will verify your request by asking you to provide information that matches information we have on file about you, such as your name, email address, order history, etc. You can also designate an authorized agent to exercise these rights on their behalf, but we will require proof that the person is authorized to act on your behalf and may also still ask you to verify your identity with us directly.

If you have questions about your rights under the Connecticut law, please feel free to contact us at [email protected] or at the mailing address below.

Bright Machines, Inc.

ATTN: Legal Dept.

939 Harrison Street

San Francisco, California 94107

4. Nevada Privacy Rights

Nevada law allows consumers to opt out of the sale of personally identifiable information by online service providers such as website operators.

You can exercise your right to opt out by using the following link: Do Not Sell or Share My Personal Information.

5. Virginia Consumer Data Protection Act

The Virginia Consumer Data Protection Act gives specific rights to Virginia residents.

Personal information we collect and how we use it. In the last 12 months, we collected the following categories of personal information: identifiers (such as name, contact information and device identifiers); commercial information (such as items purchased); internet or other network activity information (such as browsing behavior and other usage data); approximate location data; inferences (such as purchasing preferences and approximate location); demographic data (such as gender); audio, electronic, visual or similar information (such as customer support call information); and other personal information (such as product feedback or payment method information). For more details about the personal information we collect, including the categories of sources, please see the Personal Data We Collect section in our Privacy Policy. We collect this information for the business and commercial purposes described in the How We Use Information section in our Privacy Policy. We share this information with the categories of recipients described in the How Do We Share Information section in our Privacy Policy. Service providers we use to do work on our behalf may use information for the same purposes.

Our policies require that we retain records containing personal information for as long as they are needed for legal, tax, audit, investigative, and/or security purposes and then securely delete or destroy them.

You have the right to access, delete and correct information. You can access specific pieces and categories of personal information we collect by emailing us at [email protected] and following the instructions there, or by calling (415) 375-0082. To the extent technically feasible, we will provide this information to you in a portable and readily usable format. You can use the same contact information to request that we delete personal information we have unless we need it for specific reasons described by Virginia law or request that we correct personal information we have about you that you believe may be inaccurate. We retain personal information only as long as reasonably necessary for business, accounting, tax or legal purposes and then securely delete it. 

Our use of sensitive personal information. Virginia law prohibits us from using sensitive personal information without your consent, except as specified in the law. We do not use sensitive personal information without your express consent or as authorized under the law. 

You have the right to tell us not to sell personal information or use it for profiling in furtherance of decisions that produce legal or similarly significant effect. Virginia law defines “sale” to mean the exchange of personal data for monetary consideration. We do not sell information as it is defined under Virginia law. We also do not use personal information to profile you to further decisions that have legal or similar significant effects. 

You have the right to opt-out of targeted advertising. Virginia law describes “targeted advertising” as using information from your activities across non-affiliated sites and apps to determine your interests and target our advertising to you.

We engage in targeted advertising activities when we share information with advertising technology companies present on our websites who combine that information with information they collect about your visits to other sites or that they otherwise have about you to provide more personalized advertising to you. This occurs through the use of cookies, pixels, tags and similar technologies.

You can opt out of targeted advertising by using the following link: Do Not Sell or Share My Personal Information.

You have the right to appeal. You can appeal a denial of your request to exercise any of the privacy rights provided by the Virginia law. If we deny your request, we will notify you and give you instructions on how you can appeal that decision to the Virginia Attorney General.

We do not discriminate against you if you exercise any rights described in this section.

Where to exercise your rights. 
You can exercise your right to know, access, delete and correct your data by:

You can exercise your right to opt-out of targeted advertising by using the following link: Do Not Sell or Share My Personal Information.

We require you to verify your identity before we fulfill your request. Depending on the type of request you make, you may be required to prove access to your mobile phone, to your email address on file with us, or to a government-issued ID.

If you have questions about your rights under the Virginia law, please feel free to contact us at [email protected] or at the mailing address below.

Bright Machines, Inc.

ATTN: Legal Dept.

939 Harrison Street

San Francisco, California 94107