PRIVACY POLICY

1. Scope and Roles

Bravara processes personal information in different roles depending on the context.

Organization-controlled data. When an Organization uploads, imports, enters, or otherwise controls player, participant, parent or guardian, roster, evaluation, scheduling, communications, or similar league-operational data in the Services, the Organization decides why and how that information is used. In that context, the Organization is the controller or business, and Bravara processes that information on the Organization's behalf to provide the Services.

Bravara-controlled data. When we collect information about website visitors, account holders, Organization representatives, billing contacts, support contacts, and users' interactions with our own website and Services, Bravara acts as the controller or business for that information. Bravara also acts as the controller or business for player accounts, parent or guardian permission records, and the practice information described in Section 2.H, because Bravara collects that information directly from players and their parents or guardians.

If an Organization has entered into a separate written agreement with us that governs privacy, security, or data processing for Organization-controlled data, that agreement will control to the extent of any conflict.

This Privacy Policy does not apply to information collected by third-party services except to the extent that such information is transmitted to Bravara so that we can provide the Services. Those third parties have their own privacy policies and practices.

2. Personal Information We Collect

We collect the following categories of personal information, depending on how the Services are used.

A. Information you provide directly to us

We may collect:

• name
• email address
• phone number
• mailing address
• Organization name
• title or role with an Organization
• account username
• authentication-related information
• customer support messages and correspondence
• information you submit through forms, demos, waitlists, surveys, or similar interactions

B. Organization-controlled participant and league data

Organizations may upload, import, or enter information into the Services, including:

• parent or guardian names
• player or participant names
• birthdates
• contact details
• team assignments
• division assignments
• jersey numbers
• coaching assignments
• roster information
• scheduling and availability information
• evaluation scores
• skill ratings
• draft-related information
• communications and operational notes
• season history and other league-operational information provided to or generated within the Services at the Organization's direction

We process this information on behalf of the Organization to provide and support the Services.

C. Billing and transaction information

Payments are processed by third-party payment processors. Bravara does not store full payment card numbers or card security codes on our servers. We may receive limited billing and transaction information such as:

• billing name and contact information
• payment status
• card brand
• last four digits of a payment card
• invoice and subscription details
• transaction identifiers
• fraud-prevention or chargeback information

D. Third-party sign-in or integration data

If you choose to sign in through or connect a third-party provider or integration, we may receive information such as:

• name
• email address
• profile image
• unique account identifier
• other information you authorize that provider to share with us

E. Information collected automatically

When you visit or use the Services, we and our service providers may automatically collect information such as:

• IP address
• approximate location derived from IP address or network information
• browser type and version
• operating system
• device type and identifiers
• referring URLs
• pages viewed
• features used
• clicks and navigation paths
• timestamps
• crash data, error logs, and diagnostics
• cookie identifiers
• session and authentication data

We do not intentionally collect precise geolocation data.

F. Prohibited or unnecessary high-risk data

Our Services are not designed for the storage of unnecessary high-risk data. Organizations and users must not upload or store, unless we expressly support it in writing:

• Social Security numbers
• driver's license, passport, or other government-issued identification numbers
• full payment card numbers or card security codes
• medical records or detailed health histories
• biometric identifiers
• precise geolocation data
• any other high-risk personal information that is not reasonably necessary for league operations

Uploading prohibited data may violate our Terms of Service. We may remove, quarantine, or restrict access to such data.

G. Google Gmail connection

If you connect a Google account to use Bravara's Announcements feature, we request only OpenID identity, email identity, and Gmail send access. We use the connected email address to identify the sender and use the Gmail send permission to deliver announcements that you create or authorize through Bravara.

Bravara stores the OAuth access and refresh tokens required to maintain the connection in encrypted form. We do not request or use permission to read or search your mailbox, and we do not access other Gmail mailbox content such as messages, contacts, drafts, labels, or settings. Recipient addresses and the announcement content are sent to Google through Gmail only to deliver the message. Google handles that information under its own privacy policies.

Google data received through this connection is used only to provide the send-from-mailbox feature. We do not sell it, use it for advertising, or transfer it for unrelated purposes. The use of information received from Google Gmail scopes adheres to the Google API Services User Data Policy, including its Limited Use requirements. Gmail specific requirements are described in Google's Workspace API User Data and Developer Policy.

You can disconnect the Google connection in Bravara's Announcements settings; disconnecting removes the stored OAuth credentials. You can also revoke Bravara's access from your Google Account security settings.

H. Player accounts, Softball IQ, and Reps

Our mobile app includes practice features for youth players. Softball IQ teaches game situations through quizzes, lessons, and on-field practice. Reps lets coaches assign drills, videos, and reading that players complete and check off. A player can use these features through their own player account, or a parent or guardian can use them with the player.

When a parent or guardian gives permission, we collect and save:

• quiz and lesson answers, practice dates and times, completed activities, reps, and review schedules
• progress information such as stars, experience points (XP), levels, titles, streaks, and badges
• responses to team events, such as marking Going or Not Going
• photos, videos, notes, and questions a player shares with their coach about their practice, and the coach's replies
• for a player account, account identifiers and the sign-in email address the player uses
• device and network information needed to operate and secure the app, such as a push notification token, device model, operating system and app version, time zone, and diagnostic information

This information is linked to the player's roster record with their Organization. We use it to grade answers and give feedback, schedule review, show progress to the player, their parent or guardian, and their coaches, and send practice reminders and other notifications.

Player accounts do not have chat. Once a parent or guardian has given permission, a player can add a photo, video, or note to a completed rep, or ask their coach a question about an activity. A parent or guardian can do the same for the player. These go to the player's coaches, and the player's parents or guardians can always see everything the player shares and every coach reply. They are not shown to other players or families.

Parent verification. When verification of a parent or guardian is required, we send the parent or guardian's email address, country, language, and a request reference to Kids Web Services (KWS), a service of Epic Games. The parent or guardian completes verification with KWS and its verification providers. Bravara receives the result of the verification. We do not receive the identification document, payment card, or other proof provided to KWS. We keep a record of each permission, including who gave it, when, the version of the notice it covered, and how it was verified.

Information stored on the device. So that practice works without an internet connection, the app saves practice content, progress, and answers on the device and sends answers to our servers when the device is back online. This information stays on the device, including after sign-out, so the account's practice is ready the next time it signs in, and the app shows it only to the account that saved it. It is removed when the app is deleted from the device. Answers still waiting to sync when a parent or guardian deletes saved practice or withdraws permission are removed from the device and not saved.

Coach videos. Some Reps activities include YouTube videos that a coach chose. These play through YouTube's privacy-enhanced embed, and YouTube receives information such as the device's IP address when a video loads.

3. How We Use Personal Information

We may use personal information to:

• provide, operate, maintain, and support the Services
• create and manage accounts
• authenticate users and secure accounts
• import, organize, display, and manage Organization-controlled data
• facilitate evaluations, drafts, rosters, scheduling, communications, and other league workflows
• preserve season history, league records, and operational continuity across seasons for Organizations that choose to maintain those records in the Services
• process subscriptions, billing, payments, collections, and account administration
• respond to inquiries and provide customer support
• send administrative, transactional, security, and service-related communications
• send promotional communications, subject to applicable opt-out rights
• operate, measure, and improve our public-facing website and marketing activities
• monitor usage, troubleshoot issues, debug errors, and improve performance
• detect, prevent, and investigate fraud, abuse, and security incidents
• enforce our Terms of Service and other agreements
• comply with legal obligations and respond to lawful requests
• create and use deidentified or aggregated information for analytics, product improvement, benchmarking, and other lawful purposes

Bravara does not use Organization-controlled participant data or authenticated application data for cross-context behavioral advertising.

When we process personal information on behalf of an Organization, we process that information only to provide and support the Services, maintain and improve the Services in a manner permitted by law and our agreements, maintain security, prevent fraud, troubleshoot and debug, comply with law, and perform other processing permitted for service providers or processors under applicable law.

Bravara does not use personal information to make automated decisions that produce legal or similarly significant effects.

4. How We Disclose Personal Information

We may disclose personal information in the following circumstances.

A. Within an Organization

Organizations control user roles and permissions in the Services. Depending on the Organization's configuration, the following information may be visible to authorized users within that Organization:

• rosters
• schedules
• parent or guardian contact details
• team and division assignments
• coaching assignments
• communications relevant to league operations

For practice features, a player's coaches and authorized team staff can see the player's practice results and progress. Team leaderboards and player levels show a player's name, profile photo, and practice progress to other members of their team. A parent or guardian can turn team sharing off at any time without losing saved practice, and coaches can limit a leaderboard to staff.

Evaluation scores, draft information, internal comments, and similar league-management data are intended for authorized administrators, coaches, and staff designated by the Organization, unless the Organization affirmatively chooses to make them available more broadly.

B. Service providers and contractors

We may disclose personal information to vendors and service providers that perform services on our behalf, such as providers of:

• hosting and cloud infrastructure
• data storage and database services
• identity and authentication services
• payment processing
• communications and email delivery
• analytics
• error monitoring
• customer support infrastructure
• document processing
• security and fraud-prevention services

These providers may access personal information only as reasonably necessary to perform services for us and are contractually restricted from using it for unrelated purposes.

C. Third-party integrations or at your direction

If an Organization or user chooses to connect a third-party service or directs us to share information with another party, we may do so consistent with that direction.

D. Legal, safety, and compliance disclosures

We may disclose personal information if reasonably necessary to:

• comply with applicable law, regulation, legal process, or governmental request
• enforce our agreements
• protect the rights, property, or safety of Bravara, Organizations, users, or others
• prevent, investigate, or address fraud, abuse, security incidents, or technical problems

E. Professional advisors

We may disclose personal information to lawyers, accountants, auditors, insurers, lenders, and other professional advisors subject to confidentiality and other appropriate restrictions.

F. Corporate transactions

We may disclose personal information in connection with a merger, acquisition, financing, asset sale, bankruptcy, reorganization, or similar transaction, subject to applicable legal and contractual requirements.

G. Deidentified or aggregated information

We may create deidentified or aggregated information that does not reasonably identify an individual. We may use and disclose that information for lawful business purposes. We will maintain and use deidentified information in deidentified form and will not attempt to reidentify it except as permitted by applicable law. We will require recipients of deidentified information to agree not to attempt reidentification.

5. Sale, Sharing, and Targeted Advertising

Bravara does not sell personal information for monetary consideration.

On our public-facing website, we may use or permit third-party analytics, advertising, and conversion-measurement technologies that disclose limited identifiers, internet or other electronic network activity, and approximate geolocation derived from IP address or network information to advertising, social media, analytics, and measurement partners. Depending on the law that applies, this may be considered a "sale," "sharing," or use of personal information for targeted advertising.

Bravara does not sell or share Organization-controlled participant data or authenticated application data for cross-context behavioral advertising.

Bravara does not have actual knowledge that it sells or shares the personal information of consumers under 16 years of age.

6. Cookies and Similar Technologies

We use cookies and similar technologies on our website and Services.

A. Authenticated application

Inside the logged-in application, we use cookies and similar technologies that are reasonably necessary for:

• authentication
• session management
• security
• load balancing
• fraud prevention
• performance monitoring
• internal product analytics

We do not deploy advertising or remarketing pixels in authenticated areas of the Services or on pages that display Organization-controlled participant data.

For player accounts and on practice screens, we turn off identified error reporting and product analytics and do not use advertising attribution. We still process the device and diagnostic information needed to operate and secure the app.

B. Public-facing website

For cookie and consent settings, our public-facing website includes bravara.com and blog.bravara.com, and does not include authenticated application areas.

On our public-facing website, we may use:

• essential cookies
• preference cookies
• analytics cookies
• advertising and conversion-measurement technologies

These technologies help us operate the website, understand usage, improve performance, and measure or optimize marketing campaigns.

Current cookie and tracking technologies may change over time. Where available, additional details are provided through our cookie or consent settings interface.

C. Your choices

You can manage cookies through your browser settings and, where available, through privacy choices tools we provide on the site. Blocking essential cookies may impair the functionality of the Services.

Where applicable law gives you the right to opt out of sale, sharing, or targeted advertising, you may do so by using any privacy choices tool or link we make available on the site, by enabling a supported Global Privacy Control signal, or by contacting us using the methods listed below.

7. International Data Transfers

Bravara and its service providers primarily process personal information in the United States. If you access the Services from outside the United States, you understand that your information may be transferred to, stored in, and processed in the United States and other jurisdictions where our service providers operate, and that those jurisdictions may have data protection laws that differ from those in your location.

8. Data Retention

We retain personal information for as long as reasonably necessary to carry out the purposes described in this Privacy Policy, including providing and supporting the Services, preserving historical league records and season history, supporting recurring seasonal operations, maintaining service continuity, protecting security, preventing fraud and abuse, maintaining backups and disaster recovery capabilities, resolving disputes, enforcing agreements, complying with law, and maintaining appropriate business records.

Because many Organizations use Bravara as a long-term system of record for seasons, rosters, evaluations, scheduling, and related league history, some information may be retained for extended periods.

Rather than applying a single fixed retention period to all data, we determine retention by category of information and criteria such as:

• whether the relevant account or Organization remains active
• whether the information remains needed for current or future seasons
• whether the information remains part of historical league records the Organization expects Bravara to preserve
• the need to support reactivation, migration, export, or transition requests
• the need to maintain support history, audit trails, and operational records
• legal, tax, accounting, audit, insurance, and regulatory obligations
• security monitoring, fraud prevention, abuse prevention, and incident investigation needs
• dispute resolution, legal hold, and enforcement needs
• backup, archival, and disaster recovery requirements
• whether the information has been deidentified

Our general retention practices are as follows:

• Account and Organization administrator data: retained while the account remains active and afterward for as long as reasonably necessary to maintain the account relationship, support service continuity, preserve relevant business and audit records, enforce agreements, protect security, comply with law, and resolve disputes.
• Organization-controlled participant and league data:retained for as long as the Organization continues to use the Services, keeps the data in the Services, or may reasonably need the data for league administration, recurring seasons, historical recordkeeping, support, reactivation, migration, backup, disaster recovery, security, fraud prevention, dispute resolution, enforcement, or legal compliance.
• Player practice information: retained while the player remains on a roster that uses practice features and the parent or guardian's permission is in place, or until a parent or guardian deletes it. Withdrawing permission stops new practice from being saved but does not delete existing records by itself. Permission records are kept as long as needed to show that permission was given or withdrawn.
• Billing, tax, contract, and transaction records:retained for as long as reasonably necessary for billing, collections, accounting, tax, audit, chargeback, legal, and compliance purposes.
• Customer support and business communications:retained for as long as reasonably necessary to respond to requests, maintain support history, improve support operations, comply with law, protect security, and resolve disputes.
• Security logs, audit logs, diagnostics, and fraud-prevention records:retained for as long as reasonably necessary to maintain security, investigate incidents, prevent abuse, monitor performance, enforce our agreements, and comply with legal obligations.
• Cookie-based and similar identifiers on the public-facing website:retained based on the type of technology used, the purpose for which it is used, browser or device settings, user choices, and our configuration of the relevant tool or service.
• Backup and archival copies: may persist after information is deleted or removed from active systems and may remain until overwritten, rotated out, or otherwise removed in the ordinary course of our backup, archival, and disaster recovery processes.
• Deidentified or aggregated information: may be retained indefinitely.

If an Organization asks us to delete or return Organization-controlled data, we will handle that request in accordance with our agreement with that Organization, applicable law, our legitimate retention needs, and the technical and operational limits of our systems, including backup and disaster recovery systems.

9. How We Protect Personal Information

We implement and maintain reasonable administrative, technical, and physical safeguards designed to protect personal information, including measures such as:

• encryption in transit
• role-based access controls
• authentication controls
• logging and monitoring
• vendor due diligence and contractual controls
• backups and recovery processes
• patching and maintenance practices

No method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

If we become aware of a security incident involving Organization-controlled data, we will notify the relevant Organization consistent with applicable law and our contractual obligations. If we become aware of a security incident involving Bravara-controlled data, we will provide any notices required by applicable law.

10. Children's Information

Most of the Services are for Organizations and adult users. Our mobile practice features, Softball IQ and Reps, are also designed for youth players, including children under 13. This section explains how those features handle children's information and the choices parents and guardians have.

A. Parent or guardian permission comes first

A child cannot create a Bravara player account on their own. A parent or guardian linked to the player in Bravara reviews our notice and gives permission, and then sends the player a code to set up their player account. Until permission is in place, we do not save the player's own practice results.

We verify the parent or guardian through Kids Web Services (KWS) when the player is under 13, when we don't have the player's birthdate, or when the family is outside the United States. For players aged 13 to 17 in the United States, we still require a linked parent or guardian's permission. Players 18 and older can use practice features without it. If a birthdate is corrected so that verification becomes required, earlier permission that did not include verification stops applying.

B. What we collect from children and why

We collect only what the practice features need, as described in Section 2.H: answers, practice dates, completed activities, reps, progress and levels, event responses, practice photos, videos, and notes the child chooses to share with their coach, a sign-in email and account identifiers for the player account, and the device information needed to run and secure the app. We use it to provide practice, feedback, review, progress, and notifications. We do not ask a child to disclose more information than the activity reasonably requires.

Player accounts do not include chat. The only way a child can send something to an adult in Bravara is by sharing a practice photo, video, note, or question with their own coach, and their parent or guardian can always see it. We do not use children's information for targeted advertising, we do not sell or share it, and we do not use advertising attribution or identified analytics for player accounts.

C. Who can see a child's practice information

The child, their parent or guardian, and authorized coaches and staff of the child's team or Organization can see relevant practice information. Photos, videos, and notes a child shares go to their coaches and are always visible to their parent or guardian in Player access. Team leaderboards and player levels show the child's name, profile photo, and practice progress to other members of their team. This team sharing is on when permission is given, and a parent or guardian can turn it off at any time. We also disclose information to service providers that host data, authenticate accounts, deliver notifications, and verify parents, only as needed to provide the Services, and as described in Section 4.D when the law requires it.

D. Parent and guardian choices

In the app's Player access settings, a parent or guardian can:

• review the child's saved practice history, including every photo, video, and note the child shared and the coach's replies
• pause or turn off the child's player sign-in
• turn team sharing on or off
• withdraw permission, which stops new practice from being saved and stops the player sign-in
• delete saved practice, which removes practice history, quiz answers, lesson progress, reps and any attached media, and XP across teams, including answers still waiting to sync on the device, and stops the player sign-in until permission is given again

A parent or guardian can also contact us at support@bravara.com to review, correct, or delete their child's information, or to refuse further collection. We will verify that the person making the request is the child's parent or guardian.

E. Information provided by Organizations

We also process information about child participants that an Organization or a parent or guardian provides for league administration, such as a child's name, birthdate, team or division assignment, roster details, evaluation information, and parent or guardian contact information. For that Organization-controlled information, Organizations are responsible for:

• providing legally required notices to parents and participants
• obtaining any legally required permissions or consents
• determining which authorized adults may access child participant information
• responding to requests to access, correct, or delete child participant information that the Organization controls

If your child's information was provided to Bravara through an Organization, you can contact the Organization or us, and we will coordinate with the Organization as appropriate.

If we learn that we collected personal information from a child without the permission required by law, we will delete it or take other steps the law requires, which may include disabling the account.

Bravara, LLC is the operator responsible for children's information collected through player accounts and practice features. You can reach us at support@bravara.com or 1968 S. Coast Hwy #1194, Laguna Beach, CA 92651, United States.

11. Your Privacy Rights

Depending on your location and the law that applies, you may have some or all of the following rights:

• the right to know or access personal information
• the right to correct inaccurate personal information
• the right to delete personal information
• the right to obtain a portable copy of personal information
• the right to opt out of the sale, sharing, or targeted advertising use of personal information
• the right to limit the use or disclosure of sensitive personal information, where applicable
• the right to withdraw consent where processing is based on consent
• the right to appeal a denial of a privacy request, where applicable
• the right not to receive unlawful discriminatory treatment for exercising privacy rights

A. Organization-controlled data

If we process your personal information, or your child's personal information, on behalf of an Organization, that Organization controls the data and is primarily responsible for responding to access, correction, deletion, and similar requests. If you contact Bravara directly about Organization-controlled data, we may refer your request to the relevant Organization, though we may also assist the Organization as required by law or contract.

B. Bravara-controlled data

For personal information Bravara controls directly, such as website visitor data, account-holder data, player account and practice data, billing data, and support-contact data, you may submit requests to Bravara using the contact methods below.

C. How to exercise your rights

You may submit privacy requests by:

• emailing support@bravara.com
• writing to 1968 S. Coast Hwy #1194, Laguna Beach, CA 92651, United States

For sale, sharing, or targeted advertising opt-out requests relating to our public-facing website, you may also use the privacy choices tools or links we make available on the website, a supported Global Privacy Control signal, or the contact methods above.

We may need to verify your identity before processing certain requests. We may request information such as your name, email address, Organization name, or other information reasonably necessary to verify the request. We will not ask you for your password.

Where permitted by law, you may designate an authorized agent to make a request on your behalf. We may require proof of your identity and the agent's authority.

We will respond within the time required by applicable law. If we deny a request, in whole or in part, and an appeal right applies, you may appeal by replying to the denial or by emailing support@bravara.com with the word APPEAL and enough detail to identify the original request.

D. Promotional communications

You may opt out of promotional emails by using the unsubscribe link in the message or by contacting us. You may still receive transactional, service, and security communications.

12. Supplemental U.S. State Privacy Disclosures

This section provides supplemental disclosures for residents of states with applicable privacy laws, including California, to the extent such laws apply.

A. Categories of personal information collected in the preceding 12 months

Depending on how you interact with the Services, we may have collected the following categories of personal information in the preceding 12 months:

• identifiers, such as name, email address, postal address, IP address, account name, and similar identifiers
• personal information described in California Civil Code section 1798.80(e), such as contact information, billing records, participant registration data, and similar records
• commercial information, such as subscription, purchase, and transaction details
• internet or other electronic network activity information, such as usage logs, pages visited, clicks, and feature interactions
• geolocation data derived from IP address or network information, but not precise geolocation
• education-style practice information, such as quiz answers, lesson progress, and practice activity from Softball IQ and Reps
• professional or employment-related information, such as Organization affiliation, title, and role
• communications content and related records when you contact us or use communications features for which we are the intended recipient or provider
• inferences, such as account preferences, product usage insights, or evaluation-related outputs where applicable
• sensitive personal information, to the limited extent we collect information such as account log-in credentials needed to secure accounts or other categories of sensitive personal information defined by applicable law

B. Sources of personal information

We collect personal information from:

• you
• the Organization you are associated with
• parents or guardians
• third-party registration, identity, or integration systems chosen by an Organization or user
• payment processors
• parent verification services, such as Kids Web Services
• service providers acting on our behalf
• cookies, logs, and similar technologies
• our own interactions with you and your use of the Services

C. Purposes for collection, use, disclosure, sale, or sharing

We collect, use, disclose, and, where applicable, share personal information for the purposes described in Sections 3 through 6 of this Privacy Policy, including providing the Services, account management, preserving historical league records, billing, support, security, fraud prevention, analytics, legal compliance, and public-website marketing and measurement.

D. Categories of third parties to whom personal information is disclosed

We may disclose personal information to the following categories of recipients:

• Organizations and their authorized users
• service providers and contractors
• payment processors
• third-party integrations or identity providers at your direction
• professional advisors
• legal authorities or other parties as required by law
• transaction counterparties in a corporate transaction

E. Categories of personal information disclosed for a business purpose in the preceding 12 months

In the preceding 12 months, we have disclosed personal information to service providers and contractors that perform services on our behalf, such as hosting, infrastructure, authentication, payment processing, communications, analytics, customer support, and security.

The categories of personal information disclosed for these business purposes include: identifiers; contact and registration information; commercial information; internet or other electronic network activity; approximate geolocation derived from IP address or network information; Organization affiliation and user role information; communications content and support records; and inferences, where applicable.

These disclosures are limited to what is reasonably necessary for service providers to perform services for us. Service providers are contractually restricted from using personal information for their own purposes.

We do not disclose personal information to third parties for their own independent marketing purposes.

F. Categories of personal information sold or shared in the preceding 12 months

We do not sell personal information for monetary consideration.

On our public-facing website, we use third-party analytics and marketing measurement tools that may collect limited information such as identifiers, internet or other electronic network activity, and approximate geolocation derived from IP address or network information. We use this information to understand website usage and measure and improve our own marketing performance. Under certain privacy laws, these activities may be considered “sharing.”

In the preceding 12 months, we have only engaged in the activities described above, which may be considered “sharing” under applicable law, involving the following categories of personal information: identifiers; internet or other electronic network activity; and approximate geolocation derived from IP address or network information.

The categories of third parties that may receive such information include analytics and marketing measurement providers that act on our behalf.

We do not sell or share Organization-controlled participant data or authenticated application data for cross-context behavioral advertising.

We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age.

G. Sensitive personal information

To the extent we collect sensitive personal information as defined by applicable law, we do not use or disclose it for purposes other than providing the Services, securing accounts, preventing fraud, complying with law, or other purposes permitted by applicable law, unless we provide any additional notice and rights required by law.

13. Do Not Track and Global Privacy Control

Some browsers offer a "Do Not Track" setting. Because there is no uniform industry standard for responding to Do Not Track signals, we do not respond to those signals.

Where required by applicable law, we process supported opt-out preference signals, including Global Privacy Control signals, as requests to opt out of sale, sharing, or targeted advertising.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, legal requirements, or business practices. The updated version will be indicated by the "Last updated" date above.

If we make a material change to this Privacy Policy, we may provide notice by posting an updated notice in the Services, sending an email, or by other appropriate means.

15. Contact Us

If you have questions about this Privacy Policy or would like to exercise applicable privacy rights, contact us at:

• Email: support@bravara.com
• Mail: 1968 S. Coast Hwy #1194, Laguna Beach, CA 92651, United States

For privacy requests, please include PRIVACY REQUEST in the subject line of your email or at the top of your written correspondence.