Website Privacy Policy

This policy supersedes all prior versions of the Sensory Bridges, Inc. Website Privacy Policy.

1. Introduction

Sensory Bridges, Inc. (“Sensory Bridges,” “we,” “our,” or “us”) is a corporation organized under the laws of the State of Tennessee, headquartered in Chattanooga, Tennessee. We develop the Brooks Band™, an assistive technology wearable platform designed for neurodivergent individuals as defined under the Individuals with Disabilities Education Act (IDEA), 20 U.S.C. § 1401(1).

This Website Privacy Policy (“Policy”) explains how we collect, use, disclose, retain, and protect information obtained through the Site.

2. Information We Collect

2.1 Information You Provide Voluntarily

When you interact with our Site, you may voluntarily provide information including:

• Contact information: name, email address, phone number, submitted through interest forms, pilot application forms, investor inquiry forms, or partnership inquiry forms.
• Professional information: organization name, job title, role, geographic location, student or client population served, submitted through intake or interest forms.
• Communications: any information you include in emails, contact form submissions, or messages sent to us through the Site.
• Scheduling information: name, email address, and appointment selections submitted through our embedded scheduling service (Calendly).

2.2 Information Collected Automatically

When you visit the Site, certain information is collected automatically through cookies, pixels, and similar tracking technologies deployed by our hosting platform and any analytics services. This may include:

• Internet Protocol (IP) address, which may indicate approximate geographic location and constitutes personal information under applicable state and federal law.
• Device and browser information: browser type, browser version, operating system, device type, and screen resolution.
• Usage data: pages visited, time spent on each page, navigation paths, click behavior, and referring URL.
• Cookies and similar identifiers: unique cookie identifiers, session tokens, and persistent identifiers placed by our hosting platform (Webflow) and any analytics services.

This automatically collected data, when linked or reasonably linkable to an individual, constitutes personal information under applicable state privacy laws including, without limitation, the California Consumer Privacy Act (Cal. Civ. Code § 1798.140(v)), the Tennessee Information Protection Act (T.C.A. § 47-18-3202), and the Kentucky Consumer Data Protection Act (K.R.S. § 367.3672).

2.3 Sensitive Personal Information

The Site content relates to products and services for neurodivergent individuals. Browsing activity on content related to disability or neurodivergence may constitute sensitive personal information under certain state laws, including the California Consumer Privacy Act (Cal. Civ. Code § 1798.140(ae)) and the Tennessee Information Protection Act (T.C.A. § 47-18-3201(28)). To the extent that automatically collected browsing data (such as page URLs and navigation paths) reveals that a visitor has viewed disability-related content, Sensory Bridges treats such data as sensitive personal information and applies the following heightened protections:

• This data is not used for targeted advertising, profiling, or marketing purposes.
• This data is not sold, shared, or disclosed to third parties for any commercial purpose.
• This data is retained only for the periods described in Section 6 and is subject to the same deletion rights described in Section 8.
• Where applicable state law requires opt-in consent before processing sensitive personal information, Sensory Bridges will obtain such consent or will refrain from processing the data for any purpose other than providing the Site.

We do not collect, through the Site, any of the following: Social Security numbers; financial account numbers; government-issued identification numbers; precise geolocation data; genetic data; biometric data; racial or ethnic origin; religious beliefs; sexual orientation or gender identity; or the contents of private communications.

2.4 Information We Do Not Collect Through This Site

The Site does not collect:

• Student education records or personally identifiable information (PII) as defined by FERPA, 34 C.F.R. § 99.3.
• Voice data, audio recordings, voiceprints, or biometric identifiers of any kind.
• Health records, disability status, IEP data, Medicaid billing information, or protected health information (PHI) as defined under HIPAA.
• Information knowingly collected from children under 13, except as described in Section 7.

3. How We Use Your Information

3.1 Purposes of Use

We use information collected through the Site for the following purposes and no others:

• To respond to your inquiries and communications.
• To process and evaluate pilot program applications, partnership interest forms, and investor inquiry submissions.
• To send you information about Sensory Bridges products, services, pilot program opportunities, and company news, but only where: (a) you have affirmatively opted in to receive such communications; or (b) the communication is directly responsive to an inquiry you initiated.
• To improve the Site’s functionality and user experience through aggregated, anonymized usage analytics.
• To comply with applicable legal obligations, including responding to lawful requests and legal process.
• To protect the rights, property, or safety of Sensory Bridges, our users, or the public.

3.2 Prohibited Uses

We do not use personal information collected through the Site for:

• Targeted advertising or behavioral advertising of any kind.
• Building marketing profiles or behavioral models.
• Sale, rental, lease, or monetization of personal information to any third party.
• Training machine learning models, artificial intelligence systems, or generative AI on personal information collected through the Site.
• Profiling that produces legal or similarly significant effects on any individual.

4. Third-Party Services and Data Sharing

4.1 Service Providers

The Site uses the following third-party service providers that may receive, process, or have access to personal information collected through the Site. Sensory Bridges requires each provider to be bound by contractual terms, data processing agreements, or enforceable terms of service that restrict the use of personal information to the sole purpose of providing services to Sensory Bridges. Where a provider’s standard terms of service govern data handling, Sensory Bridges has reviewed those terms to confirm they include restrictions on the use, disclosure, and retention of personal information consistent with this Policy.

4.2 Social Media Platforms

The Site may contain links to our profiles on the following social media platforms: Instagram, Facebook, TikTok, X (formerly Twitter), LinkedIn, and YouTube. If you click a link to a third-party social media platform, that platform may collect data about your activity in accordance with its own privacy policy. Sensory Bridges does not control third-party data collection on those platforms.

Sensory Bridges does not install social media tracking pixels on the Site, including but not limited to the Meta/Facebook Pixel, TikTok Pixel, LinkedIn Insight Tag, and X/Twitter Pixel.

4.3 Other Disclosures

We may disclose personal information in the following limited circumstances:

• Legal Compliance: If required by law, subpoena, court order, or other compulsory legal process.
• Protection of Rights: If we believe in good faith that disclosure is reasonably necessary to protect the rights, property, or physical safety of Sensory Bridges, our users, or the public, and only to the extent necessary to address the specific threat identified.
• Business Transfer: In connection with a merger, acquisition, or sale of assets, provided that the acquiring entity agrees to honor this Policy’s commitments.

4.4 We Do Not Sell Personal Data

Sensory Bridges does not sell, rent, lease, or monetize personal data as defined by the California Consumer Privacy Act (Cal. Civ. Code § 1798.140(ad)). We have not sold personal data within the preceding twelve (12) months. We do not intend to sell personal data in the future. We do not enable third-party targeted advertising on any of our platforms. “Sell” as used in this Policy means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating personal information to a third party for monetary or other valuable consideration.

5. Cookies and Tracking Technologies

5.1 Categories of Cookies

The Site uses or may use the following categories of cookies:

Sensory Bridges does not use advertising cookies, cross-site tracking cookies, or behaviorally targeted advertising cookies on the Site.

5.2 Cookie Consent and Global Privacy Control

Non-essential cookies are not loaded until you provide affirmative consent through our cookie consent mechanism. You may withdraw consent at any time by adjusting your preferences through the cookie settings link in the Site footer or through your browser settings.

Sensory Bridges honors Global Privacy Control (GPC) signals as required by the California Consumer Privacy Act (Cal. Civ. Code § 1798.135(e)), the Colorado Privacy Act (C.R.S. § 6-1-1306), and the Connecticut Data Privacy Act (Conn. Gen. Stat. § 42-520), and as a voluntary best practice in all other jurisdictions. If your browser transmits a GPC signal, we will treat it as a valid opt-out of the sale or sharing of personal information and of non-essential cookies. Our cookie consent mechanism is configured to detect and honor GPC signals automatically.

We also honor Do Not Track (DNT) signals transmitted by your browser. When a DNT signal is detected, non-essential cookies and analytics tracking will not be activated.

5.3 Managing Cookies

You may manage or block cookies through your browser settings. For more information on managing cookies, visit:

• Chrome: support.google.com/chrome/answer/95647
• Firefox: support.mozilla.org
• Safari: support.apple.com
• Edge: support.microsoft.com

Blocking cookies may affect Site functionality. Strictly necessary cookies cannot be disabled.

6. Data Retention

We retain personal information collected through the Site only as long as necessary to fulfill the purposes described in this Policy. Specific retention periods are:

Upon expiration of the applicable retention period, personal information is deleted or de-identified. You may request deletion at any time as described in Section 8.

7. Children’s Privacy

The Site is directed to adults, including educators, administrators, therapists, caregivers, investors, and partners. The Site is not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13 through the Site.

If we discover that we have inadvertently collected personal information from a child under 13 through the Site, we will promptly delete that information in accordance with COPPA, 16 C.F.R. § 312.7.

Sensory Bridges is an “operator” under COPPA because the Brooks Band™ device and platform do collect children’s data in school-based deployments. The COPPA Online Notice required under 16 C.F.R. § 312.4(d) for those data practices is published separately at sensorybridges.com/coppa-notice.

The written data retention policy required under the 2025 amended COPPA Rule (16 C.F.R. § 312.10) for children’s personal information collected through the Brooks Band™ device and platform is published in our Application and Platform Privacy Policy.

8. Your Privacy Rights

Sensory Bridges honors the privacy rights listed below regardless of whether it currently meets the applicability thresholds of each state’s comprehensive consumer data privacy law, as a matter of corporate policy. Once published, these commitments are enforceable representations under FTC Act Section 5 and applicable state unfair and deceptive acts and practices (UDAP) statutes. Sensory Bridges maintains a documented rights request intake and response procedure, a tracking system for request receipt, acknowledgment, and fulfillment, and a designated individual responsible for processing requests to ensure these commitments are operationally fulfilled.

8.1 Rights Available to All Users

• Right to Know/Access: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Deletion: You may request that we delete personal information we have collected from you, subject to legal retention obligations.
• Right to Correction: You may request correction of inaccurate personal information.
• Right to Opt Out of Sale: We do not sell personal information. If this ever changes, you will have the right to opt out.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.

8.2 Tennessee Residents (TIPA, T.C.A. § 47-18-3201 et seq.)

Tennessee residents have the rights described in Section 8.1 above, effective July 1, 2025. The Tennessee Attorney General and Reporter has exclusive enforcement authority. TIPA provides a 60-day cure period before enforcement action. Sensory Bridges maintains a written privacy program designed to reasonably conform to the NIST Privacy Framework as described in T.C.A. § 47-18-3213.

8.3 California Residents (CCPA/CPRA, Cal. Civ. Code § 1798.100 et seq.)

California residents have the rights described in Section 8.1 above, plus the right to limit the use and disclosure of sensitive personal information under Cal. Civ. Code § 1798.121. Sensory Bridges does not sell or share personal information as defined by the CCPA.

CalSOPIPA (Cal. Bus. & Prof. Code § 22584): To the extent that the Site collects information from visitors who are K–12 students or educators acting in a school capacity, Sensory Bridges complies with the California Student Online Personal Information Protection Act, including prohibitions on using student data for non-educational purposes, targeted advertising, and profile building.

8.4 Georgia Residents

Sensory Bridges complies with the Georgia Student Data Privacy, Accessibility, and Transparency Act (O.C.G.A. § 20-2-661 through 20-2-667) for all data collected in connection with K–12 educational activities in Georgia. This includes prohibitions on selling student personally identifiable information, using student data for targeted advertising, and an obligation to maintain appropriate security procedures.

8.5 North Carolina Residents

Sensory Bridges complies with the North Carolina Student Digital Learning Environment Act (N.C.G.S. § 115C-401.1) for all data collected in connection with K–12 educational activities in North Carolina.

8.6 Alabama Residents

Sensory Bridges complies with the Alabama Data Breach Notification Act (Ala. Code § 8-38-1 et seq.), which requires notification within 45 days of a breach determination.

8.7 South Carolina Residents

Sensory Bridges complies with S.C. Code § 39-1-90, which requires breach notification within 30 days.

8.8 Florida Residents

Sensory Bridges complies with the Florida Student Records provisions (F.S. § 1002.222) and the Florida Information Protection Act (F.S. § 501.171), which requires breach notification within 30 days.

8.9 Kentucky Residents (KCDPA, K.R.S. § 367.3671 et seq.)

Kentucky residents have the rights described in Section 8.1 above, effective January 1, 2026. The Kentucky Attorney General has exclusive enforcement authority with a 30-day cure period.

8.10 New York Residents

Sensory Bridges complies with New York Education Law § 2-d for all data collected in connection with K–12 educational activities in New York. Sensory Bridges also complies with the New York SHIELD Act (GBL § 899-aa), including the requirement to implement reasonable safeguards and provide breach notification within 30 days (as amended December 2024). Sensory Bridges complies with the New York Child Data Protection Act (NYCDPA) provisions applicable to operators of online services used by minors.

8.11 Vermont Residents

Sensory Bridges complies with Vermont’s breach notification statute (9 V.S.A. § 2435), which requires notification within 45 days. If Sensory Bridges meets the definition of a “data broker” under 9 V.S.A. § 2430, it will register with the Vermont Secretary of State as required.

8.12 Exercising Your Rights

To exercise any right described above, contact us at:

We will acknowledge your request within ten (10) business days and respond substantively within forty-five (45) calendar days. If additional time is needed, we will notify you within the initial 45-day period and may extend the response period by an additional 45 days.

We will verify your identity before fulfilling any request by matching information you provide with information we have on file. We will not require you to create an account to exercise your rights.

If we decline your request, you have the right to appeal. To appeal, email privacy@sensorybridges.com with the subject line “Privacy Rights Appeal.” We will respond to appeals within sixty (60) days.

9. Data Security

Sensory Bridges implements commercially reasonable administrative, technical, and physical safeguards to protect personal information. These measures include:

• Encryption of data in transit using TLS 1.2 or higher.
• Access controls limiting personnel access to personal information on a need-to-know basis.
• Review of data security practices no less than annually, and promptly following any security incident.
• Vendor security assessments for third-party service providers handling personal information, conducted prior to engagement and periodically thereafter.
• Employee and contractor training on data handling and privacy obligations.
• Incident response procedures for identifying, containing, and remediating security incidents.

The designated security coordinator responsible for maintaining the information security program as required by applicable law (including the NY SHIELD Act) is the CEO, Sensory Bridges, Inc. Inquiries regarding security practices may be directed to privacy@sensorybridges.com.

No method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Data Breach Notification

In the event of a breach of security involving personal information, Sensory Bridges will provide notification in compliance with applicable federal and state law. The following table summarizes notification requirements by state:

In all cases, the notification deadline runs from the date Sensory Bridges determines that a breach has occurred. Notification will include the nature of the breach, the categories of data affected, and the steps individuals may take to protect themselves.

11. Links to Third-Party Sites

The Site may contain links to third-party websites, applications, or services not operated by Sensory Bridges, including social media profiles and scheduling tools. We are not responsible for the privacy practices, content, or data security of any third-party site. We encourage you to review the privacy policy of any third-party site before providing personal information.

Embedded video content on the Site may be hosted by YouTube or other video platforms. By playing embedded video content, the hosting platform may collect data about your viewing activity in accordance with its own privacy policy. Sensory Bridges does not control third-party data collection from embedded media. You can manage your cookie preferences at any time through the Site footer.

12. Changes to This Policy

We may update this Website Privacy Policy from time to time. When we make changes, we will:

• Update the “Last Updated” date at the top of this Policy.
• For material changes: provide thirty (30) days’ advance notice via a prominent notice on the Site homepage before the changes take effect.
• Where required by applicable state law: provide direct notice to affected individuals via email or other communication method.

Your continued use of the Site after the effective date of non-material changes constitutes your acceptance of the updated Policy. For material changes — including changes to data collection practices, disclosure practices, data retention periods, or children’s privacy protections — Sensory Bridges will obtain affirmative acknowledgment from affected individuals (where their contact information is on file) before the changes take effect. Where required by COPPA, new parental consent will be obtained before any material change to the collection, use, or disclosure of children’s personal information. If you do not agree with any changes, discontinue use of the Site and contact us to request deletion of your personal information.

13. Accessibility

Sensory Bridges is committed to ensuring that this Privacy Policy and the Site are accessible to individuals with disabilities. We strive to meet WCAG 2.2 Level AA standards. If you experience difficulty accessing any portion of this Policy or the Site, please contact us at privacy@sensorybridges.com and we will work to provide the information in an alternative format.

14. Contact Information

For complaints regarding children’s privacy, you may contact the Federal Trade Commission at www.ftc.gov or 1-877-FTC-HELP.

For complaints regarding student data privacy under FERPA, you may contact the Student Privacy Policy Office (SPPO), U.S. Department of Education, 400 Maryland Avenue SW, Washington, DC 20202-8520.

Tennessee residents may file complaints with the Tennessee Attorney General, Division of Consumer Affairs, P.O. Box 20207, Nashville, TN 37202-0207.

© 2026 Sensory Bridges, Inc. All rights reserved.