About Your Privacy and This Privacy Policy Your privacy is of upmost importance to us. This document is our “Privacy Policy” and it contains details on issues related to your privacy when using our services. This Privacy Policy applies to visitors of the website carebyclay.com and any affiliated mobile applications (collectively, the “Platform”) and describes the types of information (“Clay,” “us,” “we,” or “our”) may collect from you or your authorized representative (“you”). The Policy also describes our practices for collecting, using, maintaining, protecting, and disclosing information about you, and expresses our commitment to protecting your privacy in accordance with law. The Privacy Policy does not apply to the collection and use of certain employment-related information or information received from contracted providers. If you are a current or former Clay job applicant, employee, owner, director, officer, or contractor, please contact us [email protected] for the appropriate notice. Agreement and Updates Please read this policy carefully. If any term is unacceptable to you, please do not use the Platform or provide any personal information. If you do access or use the Platform, it will mean you expressly agree to the terms of this Privacy Policy. This Privacy Policy may change from time to time, and your use of the Platform after we make changes is deemed to be your acceptance of those changes, so please check the Platform periodically for updates. General Description of the Site and Information Clay May Collect and Store The Platform provides the technology that permits you to connect with a coach if you are located in a state where we operate, and to receive coaching, consisting of generalized advice based on publicized best practice guidelines. Clay does not practice medicine. Rather, Clay provides administrative and technological support for the coaches and other participants on the Platform. This includes collecting and securely maintaining health information from users and processing payment for services provided through the Platform. When you use the Platform and communicate with us, we collect health information that individually identifies you, called Protected Health Information (“PHI”) and other private information. The Privacy Policy does not describe how we collect or use your PHI, which is covered by a separate Notice of HIPAA Privacy Practices (“NPP”). Please carefully review the NPP. The information it contains is important and is not repeated in this Privacy Policy. The provisions in this Privacy Policy also apply to PHI but it focuses on the information collected by and through the Platform and on information we collect that is not healthcare information, such as:

• Technical information about how and when you use the Platform;
• Technical information about your mobile device or computer, including the operating system you use;
• Your general location when you use the Platform;
• Your internet protocol address and MAC address.
• Visitor data
• Onboarding data
• Transaction data
• Account registration data
• Counseling session data

Protecting this information is a top priority for us. Other than in the limited ways detailed in this Privacy Policy, we will never use or disclose any information unless you requested or approved us to do so. We also de-identify your data when sharing it internally to provide an extra layer of protection. How We Use Your Personal Information We may be use your personal information for one or more of the following business or marketing purposes:

• Delivery of Services : We may use your information to provide information or perform services that you request including, but not limited to: (a) create your account on our Platform and allow you to log-in to use the Platform; (b) manage your account and provide customer service; (c) bill and process transactions; (d) provide location-specific services; and (e) to provide, support, personalize and develop the Platform and our services.
• Communicating with you : We may use your information to communicate with you, including, but not limited to: (a) to provide you with information, alerts, and suggestions related to the Platform; (b) to verify your identity; (c) to assist you with completing an activity you request; and (d) to reach out to you, either through our coaches or ourselves, if we believe that you may be in danger or may be the cause or victim of a criminal act.
• Administration and Improvement of Services : We may use your information to administer and improve our services including, but not limited to: (a) monitor, supervise, and administer the Platform; (b) inform research and development purposes to offer new content and features using aggregated data.
• Marketing and Customization: We may use your information to market our services and customize your experience when using our services and the Platform including, but not limited to: (a) personalize your Platform experience including promoting service offerings relevant to your interests including targeted advertisements through our websites, third-party sites, and via text messages and email and (b) keep you updated on our products and services through targeted marketing efforts.
• Account and Network Security: We may use your information to enhance your account security and our network security including, but not limited to: (a) using your information to combat malicious activities and combat malware; and (b) to monitor and verify your account access to ensure that unauthorized users are not using your credentials.
• Compliance with Law: We may use your information to ensure that we are complying with all applicable laws, including, but not limited to: (a) responding to law enforcement requests and as required by applicable law, court order, or governmental regulations; and (b) complying with applicable state and federal laws, including those laws related to protecting client and public health and safety.
• Other Purposes : We may also use your information for any other purpose with your consent.

Purposes for Which Information is Disclosed to Third Parties Information about you may be disclosed to third parties for one or more of the following purposes:

• Administer and Provide Services to You and Advertising : We may engage third-party service providers to work with us to administer and provide services to you and help us with our advertising efforts. These third-party service providers may have access to your information for the purpose of providing these services on your behalf and may not disclose your information for any other purposes.
• To Your Child’s School: We may share test results of students with the school with which we partner to provide services to students.
• With Your Consent : We may share your information if you request or direct us to do so. This includes your use of widgets on our Platform and sharing information with other applications with your consent and direction.
• With Our Affiliates : We may share your information with our subsidiaries or parent companies within our corporate organization.
• Compliance with Law: We may share your information with law enforcement personnel or pursuant to a government order or subpoena or any obligations thereunder.
• Transaction : We may share your information in the context of a business transaction such as an asset sale, merger, bankruptcy, corporate reorganization, or other business transaction.
• Other Business Reasons : We may share your information to enforce any applicable terms and conditions or terms of use and to ensure the safety and security of the Platform.

If you make any of your information publicly available on the Platform, then anyone can see it and use that information. Opting Out of Marketing Communications You may opt out of receiving our newsletter by unsubscribing using the unsubscribe link in the email communications. You may not opt-out of non-marketing communications including required notices related to your account and the Platform. Data Security It is our priority to protect and safeguard your information. To achieve that goal, we use physical, electronic, and administrative procedures to protect your information including, but not limited to two-factor authentication and a third-party security and compliance vendor. We do not transfer information about you to users that do not have a legal right to access it, and we use industry standard technologies, physical security, and administrative processes to help safeguard against unauthorized users gaining access. While we cannot guarantee that unauthorized access to, or loss, misuse, or alteration of data will not occur, we use various safeguards to avoid such occurrences. Protecting your information is also your responsibility. We encourage you to take all precautions to protect your information when using the Internet including, but not limited to changing your password on a regular basis, using a secure browser, and immediately contacting us if you believe an unauthorized user has accessed the Platform or your account. Privacy of Children We are committed to protecting the privacy of children when providing our services and making sure that we are in compliance with the Children’s Online Privacy Protection Act (“COPPA”). Our services may be used to facilitate health care for a child. A parent or guardian may use our services on behalf of a dependent child. An individual under the age of 18 is not allowed to make or log into an online account. If you allow your child to use your account then we may collect information from that child. If you would not like your child to interact with our services, please do not provide your credentials to a child or use an automatic log-in on your device. Please note that we may be required by law to provide some health-related information directly to an individual under 18 years of age without a parent’s or guardian’s consent. We will not sell or make public a child’s personal information. We may use a child’s personal information for all of the purposes described in this Privacy Policy. To provide our services, we may disclose a child’s personal information to service providers or clinicians if it is necessary for them to perform services. If we disclose a child’s information to a third-party, we will comply with all applicable laws including HIPAA. At any time, you may revoke your consent for collection of your child’s information and may request to review the personal information we have collected about your child by contacting [email protected] Cookies and Web Beacons Like many websites, we use “cookies” and “web beacons” to collect information. A “cookie” is a small data file that is transferred to your computer’s hard disk for record-keeping purposes. A “web beacon” is a tiny and sometimes invisible image or embedded code, placed on a Web page or email that can report your visit or use to a third party. Web beacons are typically used by third parties to monitor the activity of users at a website for the purpose of web analytics, advertising optimization, or page tagging. You can change your browser’s settings so it will stop accepting cookies or to prompt you before accepting a cookie. However, if you do not accept cookies you may not be able to use the Platform. Use of Cookies, Web Beacons, and Similar Technologies for Analytics We may also use third party cookies for the purposes of web analytics, attribution, and error management. Our Platform may use Google Analytics and other vendor services that use cookies, web beacons (including web pixels), and similar technology to collect and store anonymous information about you, including when you pay for services, load a page, indicate that you heard about us on television, sign up for services, enter your payment information (but the payment details are not disclosed), start the intake questionnaire, and your response as to the referral source to the Platform. You can learn more about Google Analytics’ privacy policy and ways to opt out from Google Analytics tracking by visiting Google Analytics’ website. Our Platform may also use analytics vendors to collect information (for example Visitor Data) about user actions on our websites for purposes of analytics and certain software to analyze certain Platform usage using the device identification for each user. The information used for analytics does not include any customer data, or communications data. Link to Third-Party Sites The Platform may contain links to other websites, services or offers which are owned, operated or maintained by third parties. If you click on a third party link, you will be directed to that third website or service. The fact that we link to a website or service is not an endorsement, authorization or representation of our affiliation with that third party, nor is it an endorsement of their privacy or information security policies or practices. We do not have control over third party websites and services and we do not have control over their privacy policies and terms of use. Social Media Platforms We use several publicly-available tools and information exchange resources, such as (but not limited to) an Instagram page, a Linkedin account, a Facebook page, a Twitter account, and others (collectively “Social and General Information Tools”). Any information you provide or share while using Social and General Information Tools may be read, accessed, collected by that site and users of that site according to their Privacy Policy. Phishing Online identity theft and account hacking, including the practice currently known as “phishing”, are of great concern. You should always be diligent when you are being asked for your account information and you must always make sure you do that in our secure system. We will never request your login information or your credit card information in any non-secure or unsolicited communication (email, phone or otherwise). Contacting Us If you have any questions or concerns about this Privacy Policy or our privacy-related practices, please contact us by [email protected] This Privacy Notice for California Residents supplements and is expressly made part of the information contained in the Clay Privacy Policy and applies solely to all visitors, users, and others who reside in the State of California (“consumers” or “you”). We adopt this Notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”). Any terms defined in the CCPA have the same meaning when used in this Notice. Information We Collect Through your use of our Platform, we collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household (“personal information”). In particular, our Platform has collected the following categories of personal information from its consumers within the last twelve (12) months. Additionally, we have disclosed the following categories of information for a business purpose in the past twelve (12) months:

Category	Collected	Disclosed for a business process
Identifiers	Yes	No
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).	Yes	No
Protected classification characteristics under California or federal law.	Yes	No
Commercial Information	No	No
Biometric Information	No	No
Internet or other similar network activity	Yes	No
Geolocation data	No	No
Sensory data.	Yes	No
Professional or employment-related infrormation	No	No
Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).	No	No
Inferences drawn from other personal information.	No	No

Clay obtains the categories of personal information listed above from the following categories of sources:

• Directly from you . For example, from information you submit on the Platform during the process of using and paying for our services.
• Indirectly from you . For example, from observing your actions on our Platform or on an application provided by us.
• From third-party business partners such as social media sites, ad networks, and analytics providers.

Use of Personal Information We may use your personal information for the following purposes:

Category of Personal Information	Purpose of Use
Identifiers	We use your name, address, and contact information to communicate with you, deliver our services to you, customize and market the services to you, and comply with the law.
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).	We use your name, address, and contact information to communicate with you, deliver our services to you, customize and market the services to you, and comply with the law.
Protected classification characteristics under California or federal law.	We use information regarding your age, sex, race, gender, sexual orientation, medical conditions, and disabilities to deliver the services to you and for analytics.
Internet or other similar network activity.	We use information regarding your activity on our websites for analysis purposes.
Sensory data.	We record your chat messages to personalize the services to you and for analytics.
Inferences drawn from other personal information.	We use information regarding your actions on our websites and the information you provide to us to optimize our services.

Disclosure of Personal Information Clay may disclose your personal information for the following purposes:

Category of Personal Information	Purpose of Disclosure
Identifiers	We may disclose your IP address, unique identifier, or email address to our analytics vendors for analytics. We may disclose your contact information to webinar providers and to customer support, and engineering vendors to provide services for the Platform. We may disclose your contact information to our coaches for the provision of services to you.
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).	We may disclose your contact information to customer support and engineering to provide services for the Platform.
Protected classification characteristics under California or federal law.	We may disclose to vendors information regarding your age, sex, race, gender, sexual orientation, medical conditions, and disabilities for analytics pertaining to the usage of our Platform.
Internet or other similar network activity.	We may disclose information regarding your activity on our websites to vendors for product analytics purposes.
Sensory data.	We may disclose your chat messages to our coaches for the provision of services to you.
Inferences drawn from other personal information.	We may disclose information regarding your activity on our websites to vendors for product analytics purposes

Your Rights and Choices The following are the rights provided to California residents under the CCPA. Right to Request and Access Information Clay, upon receipt of a verifiable request, will provide the requestor the following types of information that it holds about the requestor:

• The categories of personal information we collected about you.
• The categories of sources for the personal information we collected about you.
• Our business or commercial purpose for collecting that personal information.
• The categories of third parties with whom we shared that personal information.
• The specific pieces of personal information we collected about you.
• If we disclosed your personal information for a business purpose and identifying the personal information categories that each category of recipient obtained.

Right to Delete Information Clay, upon receipt of a verifiable request, will delete the information it holds about the individual unless an exception under the CCPA applies or the information is otherwise subject to HIPAA, in which case HIPAA will preempt CCPA. Right to Opt Out of Sale You have the option to opt out of the use or disclosure of your information that is considered a “sale” under the CCPA. If you would like to opt out of such use and disclosure of your information, email [email protected]. Right to Non-Discriminatory Treatment We will not discriminate against you for exercising any of your CCPA rights. Exercising Your Rights To exercise these CCPA rights, email [email protected]. Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a request related to your personal information. You may also make a request on behalf of your minor child. We will honor any legal right you may have to access such information, but fees, if permitted by law, may apply