PRIVACY POLICY

Last Updated: August 5, 2026

This Privacy Policy (“Privacy Policy”) describes how All4Staff, PBC d/b/a WorkBright (“WorkBright”, or “us”, “our”, or “we”) collects and processes information about you and other users of the websites operated by us (the “Websites”) or the software applications and other services made available by us (collectively with the Websites, the “Services”). Data protection laws in certain U.S. states, including the California Consumer Privacy Act, as amended (“CCPA”), may require us to provide consumers with a privacy policy that contains a comprehensive description of our online and offline practices regarding our collection, use, sale, sharing and retention of their personal information, along with a description of the rights they have regarding their personal information. This Privacy Policy provides the information the CCPA and other such data protection laws require, together with other useful information regarding our collection and use of personal information.

Please read this Privacy Policy carefully to understand our policies and practices regarding your information and how we will treat it.

1. Changes to Our Privacy Policy

We reserve the right to make changes to this Privacy Policy at any time and will post the updated Privacy Policy on the Services. You are responsible for periodically reviewing the Services and this Privacy Policy to check for any updates or changes. We may, and if required by applicable law will, also provide notification of material changes in another way that we believe is reasonably likely to reach you, such as via email or another manner through the Services.

2. Scope of Our Privacy Policy

This Privacy Policy applies to “personal information,” “personal data,” and similarly defined terms under applicable privacy laws. For clarity, we refer to all such information as “Personal Information” throughout this Privacy Policy. Personal Information does not include, and this Privacy Policy does not apply to, information/data that has been de-identified, anonymized, cannot reasonably be used alone or in combination with other data to identify an individual person, or otherwise does not constitute Personal Information under applicable privacy laws. When we combine other information (i.e., information that does not, on its own, identify you) with Personal Information, we treat the combined information as Personal Information.

If you are an employee or contractor (“Employee User”) using the Services at the request or direction of your employer who is a WorkBright customer (“Employer”), we may collect information from you on behalf of such Employer (“Employer Records”). We may also collect information directly from Employers and/or other users of our Services for our own account in the course of a commercial relationship (as described more fully below in Categories of Information We Collect).

For the purposes of the European Union General Data Protection Regulation, the United Kingdom General Data Protection Regulation, and U.S. state privacy laws like the CCPA, Employers act as the “controller” or “business” with respect to Employer Records and we act as a “processor” or “service provider.”

If you are an Employee User, you should refer to your Employer’s privacy notice. Employers determine and control the information collected from Employee Users through our Services, and thus act as the business that determines the purposes and means of handling Employer Records and the Personal Information of Employee Users contained therein. In various areas of the Services, we provide you with the opportunity to submit information which the Employer has deemed necessary in order for you to complete the required forms for your personnel file, either as an employee or contractor for such organization. Submission of your information in this regard may include but is not limited to: (i) first and last name; (ii) email address; (iii) mailing address; (iv) social security number; (v) driver’s license number; (vi) financial account numbers; (vii) precise geolocation; and (viii) national origin. With respect to such Personal Information we collect at the direction and on behalf of an Employer, such Employer’s Employee Users are subject to the privacy policies of the Employers with which they interact, and they should read those policies carefully, as they may differ from this Privacy Policy. WorkBright is not responsible for the privacy practices of Employers or the third-party services they integrate with our Services or otherwise utilize to provide services to Employee Users. Please review the relevant Employer’s privacy policy, terms of use, or employment policies to learn more about their information practices, including their use of service providers like WorkBright.

3. Categories of Information We Collect

We collect the Personal Information set forth below to provide the requested Services to you or for the other reasons specified herein. If you do not provide the Personal Information we request, we may not be able to provide you with the requested Services.

Information You Provide to Us.

• Identifying information that you provide by filling in forms on our Websites or otherwise using the Services as an account owner or admin user, such as name, email address, postal address, phone number or other similar identifiers.
• Account information, such as login credentials, contact and business information.
• Records and copies of your correspondence when you contact us online or offline, such as when you contact us through the Websites or contact customer support. This information may include a recording or transcript of the communication/chat.
• Marketing data, such as your preferences for receiving our marketing communications and details about your engagement with them.
• Partner information, such as name, email address, employer and business phone number if you are a partner, reseller or service provider.

If you disclose any Personal Information relating to other people to us or to our service providers in connection with the Services, you represent that you have the authority to do so and to permit us to use the information in accordance with this Privacy Policy.

Information you provide through the Job Applicant Process.

We may also receive information about you if you submit a job application, use our job applicant portal, inquire about opportunities with us, provide us your information at a recruiting event, or if we receive information about you from third parties in connection with our recruiting activities. This information may include:

• Name, postal address, telephone number, e-mail address, and other contact information;
• Username and password for our job applicant portal;
• Job qualifications and work authorization status;
• CV, resume, cover letter, previous work experience, education information, knowledge, skills, and abilities;
• Professional and other work-related licenses, permits, and certifications held;
• Reference information, such as names and contact details of your references;
• Compensation information that you voluntarily provide, and which may depend on your region and applicable laws and regulations;
• Background check information, subject to applicable law;
• Any other information you elect to provide to us (e.g., employment preferences, willingness to relocate, awards or professional memberships); and
• Sensitive Personal Information that you provide voluntarily or which we request on a non-mandatory basis in order to comply with applicable law.

You are responsible for providing any notices and obtaining any consents necessary for us to collect and use Personal Information of your references as described in this Privacy Policy.

CCPA Categories.

This section lists the categories of information that we may collect from you and that we have collected over the last 12 months, as required by the CCPA.

1. Identifiers: such as real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.
2. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) (“California Customer Records”): such as name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some Personal Information included in this category may overlap with other categories.
3. Protected classification characteristics under California or federal law (“Protected Classes”): such as age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, military and veteran status.
4. Commercial information: such as records of products or services purchased, obtained, or considered.
5. Biometric information: identifying information, such as faceprints, and voiceprints.
6. Internet or other similar network activity: such as activity on our Websites, mobile apps, or other digital systems, such as IP address, internet browsing history, search history, system usage, electronic communications with us, and postings on our social media sites.
7. Geolocation data: such as physical location or movements, such as the time and physical location related to use of our Websites and Services.
8. Sensory data: such as audio, electronic, or similar information, including customer service call monitoring.
9. Professional or employment-related information: such as current or past job history or performance evaluations.
10. Inferences drawn from other Personal Information: such as a profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

Sensitive Personal Information.

Sensitive Personal Information is a subtype of Personal Information consisting of the specific information categories listed below (“Sensitive Personal Information”). This section identifies which Sensitive Personal Information categories, if any, we have collected from consumers in the last 12 months. We use Sensitive Personal Information only for purposes permitted by the CCPA and its regulations and do not use Sensitive Personal Information to infer characteristics about consumers.

1. Government identifiers, such as your social security number, driver’s license, state identification card, or passport number.
2. Racial or ethnic origin.
3. Citizenship or immigration status.

Information we Collect Automatically.

We collect the following types of information automatically when you use our Services.

• Log Information. When you use our Services, our servers automatically record information. We collect information that web browsers, mobile devices, and servers typically make available, such as your Internet protocol (IP) address, device identifiers (such as MAC address), device type, browser type and version, Internet service provider, mobile carrier, operating system, software type, version, language, settings, and configuration. We also automatically collect browser information when you use our Services, such as the referring URL (e.g., the site you visited before coming to our Services) and the URL(s) of any third-party websites you visit via a link from our Services, the number of clicks, and how you interact with links on the Services, domain names associated with your internet service provider, pages viewed, and other such information. We may also collect similar information from emails sent to you which then help us track which emails are opened and which links are clicked by recipients.
• Location Information. We may also collect the approximate physical location of your device by, for example, using your Internet protocol (IP) address. If you are an Employee User, we may also, at the direction of your Employer, use your device’s physical location to provide you with personalized location-based services, such as location stamping a signature. In some instances, you may be permitted to allow or deny such uses and/or sharing of your device’s location but if you do, we and/or our partners may not be able to provide you with applicable personalized services and content.
• Cookies and Similar Technologies. Cookies are small text files that are placed on your computer or mobile device by websites and mobile applications that you visit or use. Pixel tags (also called web beacons) are small blocks of code placed on websites and in emails represented as small, clear images. To collect information automatically as described in this section, we may use cookies, and other technologies like pixel tags and web beacons, on our Websites and Services to help us identify visitors and understand usage and access preferences for our Websites and Services. Some examples of the data we collect from cookies include your account preferences, pages accessed, language preferences, and previous visits to our Websites and Services. We may link the anonymous visitor ID from your cookie to a user ID in our database to help us analyze web traffic and statistics.
• First Party Cookies: First party cookies are cookies we set. We use first party cookies to:
• make our Websites and Services work (essential cookies), such as to (i) facilitate the operation and functionality of our Websites and Services; and (ii) facilitate safe and secure payment processing; and
• help us measure and improve the performance of our Websites and Services (analytics cookies), such as to (i) track how our Websites and Services are being used, and how we can improve them; (ii) improve your experience while using our Websites and Services and make navigating around them quicker and easier; and (iii) allow us to make a bespoke user experience for you and for us to understand what is useful or of interest to you.
• Third Party Cookies: Some cookies on our Websites or Services are set by third party service providers or partners. For example, we may use third-party analytics and advertising partners’ automated tools, such as Google Analytics, which collect certain of your Personal Information when visiting our Websites and mobile applications to help us evaluate usage of our Websites and Services for improvement purposes. These third parties also may use Personal Information they collect from you to provide and improve their services and for other purposes. Such uses of your Personal Information by such third parties are governed by the privacy policies of those third parties. Information about how Google Analytics collects and processes data can be found here: www.google.com/policies/privacy/partners/. See below under Opt-Out Options for information on how to prevent your data from being used by Google Analytics. You also may download the Google Analytics Opt-Out Browser Add-on to prevent your data from being used by Google Analytics.
• Cookies Used for Advertising Purposes: We also partner with third-party social media networks and other partners to place third party cookies on your browser. These partners and other advertisers, sponsors, and/or analytics providers we engage with may use cookies on our Websites and Services to measure the effectiveness of their ads and to personalize advertising content to you.

Opt-Out Options

• You may disable cookies on your browser. Please review your browser’s instructions for doing so. Note that certain features of the Services may not be available if you delete or reject cookies.
• You can manage how we use cookies on your browser by clicking the “Manage Cookies” link on the banner at the bottom of our home page. Clicking on the “Manage Cookies” link will take you to a popup where you can manage your cookie preferences.
• Some browsers and browser extensions support the Global Privacy Control (GPC), Universal Opt-Out Mechanism (UOOM), or similar controls that can send a signal to the websites you visit indicating your choice to opt-out from certain types of data processing, including data sales and/or targeted advertising, as specified by applicable law. When we detect such a signal, we will respect your choices indicated by a GPC setting or similar control that is recognized by applicable law as meeting its requirements.
• Some web browsers may allow you to enable a do-not-track feature that alerts the websites you visit that you do not want your online activities to be tracked. Our Websites and Services may not recognize or react in response to do-not-track signals. At present, no generally accepted standards exist on how companies must respond to do-not-track signals. In the event a final standard is established, we will assess and provide an appropriate response to these signals.

4. Sources of Personal Information

We obtain the categories of Personal Information listed above from the following categories of sources:

• Directly from you, such as from the forms or other information you provide to us.
• Indirectly from you, such as from your interactions with our Websites, Services, mobile applications and social media platforms.
• From our service providers, such as customer service support providers, data analytics providers and advertising networks.
• Through cookies and similar technologies (see Information we Collect Automatically).
• From third-party data providers and public databases.
• Inferences generated by our or our service providers’ computer systems.

5. Purpose for Collecting Your Personal Information

Your Personal Information is collected for specified, legitimate purposes and not processed further in ways incompatible with those purposes. Collected Personal Information is relevant to and not excessive for the purposes for which it is collected and used. We and our service providers may use Personal Information for our legitimate business interests, including the following:

• Respond to your inquiries and fulfill your requests, complete your transactions, and provide you with related customer service.
• Manage your consumer relationship with us, including for: online account creation, maintenance, and security; and reaching you, when needed, about your account.
• Send administrative information to you, such as changes to our terms, conditions and policies, and notify you about changes to our products or services.
• Send you marketing communications that we believe may be of interest and personalize your experience by presenting products and offers tailored to you.
• Measure interactions with and the success of our Services and retention methods, and provide enhancements based on interactions through the Services.
• Further our business purposes, such as data analysis, audits, fraud monitoring and prevention, developing new products, enhancing, or improving or modifying our Services, identifying usage trends, determining the effectiveness of our promotional campaigns, and operating and expanding our business activities.
• Meet our obligations and enforce our rights arising from any contracts with you, including for billing or collections, or to comply with legal requirements.
• Fulfill the purposes for which you provided your Personal Information or that were described to you at collection, and as applicable law otherwise permits.
• Protect our company, employees, or operations.
• Engage in corporate transactions requiring review of consumer records, such as for evaluating potential mergers and acquisitions.
• Comply with all applicable laws and regulations.
• Exercise or defend our legal rights or the legal rights of our employees, customers, contractors, and agents.
• Respond to law enforcement requests and as required by applicable law or court order.

Sensitive Personal Information Use and Disclosure Purposes.

We may use or disclose Sensitive Personal Information for the following reasons permitted by the CCPA and its regulations (“Permitted SPI Purposes”):

• Performing actions that are necessary for our consumer relationship and that an average consumer in a relationship with us would reasonably expect.
• Preventing, detecting, and investigating security incidents that compromise the availability, authenticity, integrity, or confidentiality of stored or transmitted Personal Information.
• Defending against and prosecuting those responsible for malicious, deceptive, fraudulent, or illegal actions directed at us.
• Ensuring physical safety.
• Short-term, transient use, such as non-personalized advertising shown as part of your current interactions with us, where we do not disclose the Sensitive Personal Information to another third party, or use it to build a profile about you or otherwise alter your experience outside your current interaction with us.
• Services performed for us, including maintaining or servicing accounts, processing or fulfilling transactions, verifying consumer information, processing payments, or providing financing, analytic services, storage, or similar services.
• Activities required to verify or maintain the quality or safety of a product, service, or device that we own, manufacture, had manufactured, or control, or improve, upgrade, or enhance the service or device that we own, manufacture, had manufactured, or controlled.
• Collecting or processing Sensitive Personal Information that we do not use for the purpose of inferring characteristics about a consumer.

We do not use or disclose Sensitive Personal Information for purposes other than the Permitted SPI Purposes. We may additionally collect, use and disclose Sensitive Personal Information from Employee Users on behalf of and at the direction of our customers.

6. Personal Information Disclosed for Business Purposes

We may disclose the Personal Information we collect to third parties for the business purposes described in the Purpose for Collecting Personal Information section above and in the table below, such as to engage third parties to support our business functions. For example, we may disclose information from your visits to our Websites to a cybersecurity consultant to help secure the Websites. We only make these business purpose disclosures with your consent or under written contracts that describe the purposes, require the recipient to keep the Personal Information confidential, prohibit using the disclosed information for any purpose except performing the contract, and meet the CCPA’s other contract requirements for engaging service providers or contractors.

The chart below identifies the categories of entities to whom we have disclosed our consumers’ Personal Information for a business purpose over the preceding 12 months, along with the Personal Information categories disclosed and the disclosure’s business purposes.

7. Personal Information Sold or Shared

We do not sell Personal Information to third parties for monetary consideration. However, we may share Personal Information with third parties for cross-context behavioral advertising purposes. Our Personal Information sharing does not include Sensitive Personal Information or information about consumers we know are under age 16.

The chart below identifies the categories of third parties to whom the Company has shared consumers’ Personal Information for cross-context behavioral advertising purposes over the preceding 12 months, along with the Personal Information categories shared and the business or commercial purposes for sharing that information.

8. Your Rights and Choices

Right to Know and Data Portability Requests.

You have the right to request that we disclose certain information to you about our collection and use of your Personal Information (the “right to know”), including the specific pieces of Personal Information we have collected about you. Once we receive your request and confirm your identity (see How to Exercise Your Rights), we will disclose to you:

• The categories of:
• Personal Information we collected about you; and
• sources from which we collected your Personal Information.
• The business or commercial purpose for collecting your Personal Information and, if applicable, selling or sharing your Personal Information.
• If applicable, the categories of persons, including third parties, to whom we disclosed your Personal Information, including separate disclosures identifying the categories of your Personal Information that we:
• disclosed for a business purpose to each category of persons; and
• sold or shared to each category of third parties.
• When your right to know submission includes a data portability request (the “right to data portability”), a copy of your Personal Information subject to any permitted redactions.

Right to Delete and Right to Correct.

You have the right to request that we delete any of your Personal Information that we collected from you and retained, subject to certain exceptions and limitations (the “right to delete”). Once we receive your request and confirm your identity, we will delete your Personal Information from our systems unless an exception allows us to retain it. To the extent required by applicable law, we will also notify our service providers, contractors, and other recipients to take appropriate action.

You also have the right to request correction of Personal Information we maintain about you that you believe is inaccurate (the “right to correct”). We may require you to provide documentation, if needed, to confirm your identity and support your claim that the information is inaccurate. Unless an exception applies, we will correct Personal Information that our review determines is inaccurate and, to the extent required by applicable law, will notify our service providers, contractors, and other recipients to take appropriate action.

Right to Limit Sensitive Personal Information Use and Disclosure to Permitted SPI Purposes

You have a right to ask businesses that use or disclose your Sensitive Personal Information to limit those actions to just the Permitted SPI Purposes (the “right to limit”). As we do not use or disclose Sensitive Personal Information beyond the Permitted SPI Purposes, we do not currently provide this consumer right.

Personal Information Sales or Sharing Opt-Out and Opt-In Rights

You have the right to request that businesses stop selling or sharing your Personal Information at any time (the “right to opt-out”), including through a user-enabled opt-out preference signal. As we do not sell Personal Information, we do not currently provide this consumer right with respect to the sale of Personal Information. With respect to our sharing of Personal Information for cross-context behavioral advertising purposes, we cannot share your Personal Information after we receive your request to opt-out unless you later consent to the sharing of your Personal Information.

Right to Non-Discrimination.

You have the right not to be discriminated or retaliated against for exercising any of your privacy rights.

1. How to Exercise Your Rights

If you are an employee of one of our customers, you should contact your employer to exercise your rights under your employer’s privacy notice.

Exercising the Rights to Know, Delete or Correct.

To exercise the right to know, data portability, delete or correct described above, please submit a verifiable request to us by either:

• Calling us at 844-370-1783;
• Emailing us at support@workbright.com; or
• Visiting www.workbright.com.

Please describe your request with sufficient detail so we can properly understand, evaluate, and respond to it. You or your authorized agent may only submit a request to know, including for data portability, twice within a 12-month period.

We will confirm receipt of your request within ten business days. We endeavor to substantively respond to a verifiable request within 45 days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period in writing. Our substantive response will tell you whether or not we have complied with your request. If we cannot comply with your request in whole or in part, we will explain the reason, subject to any legal or regulatory restrictions. Applicable law may allow or require us to refuse to provide you with access to some or all of the Personal Information that we hold about you, or we may have destroyed, deleted, or made your Personal Information anonymous in compliance with our record retention policies and obligations.

Any disclosures we provide will cover information for the 12-month period preceding the request’s receipt date. We will consider requests to provide a longer disclosure period that do not extend past January 1, 2022, unless providing the longer timeframe would be impossible or involves disproportionate effort. For data portability requests, we will select a format to provide your Personal Information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance. We do not charge a fee to process or respond to your verifiable request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Exercising the Right to Opt-Out.

You can submit your request to opt-out through:

• Emailing support@workbright.com; or
• Calling 844-370-1783.

You can also submit your request to opt-out of Personal Information sales and sharing through an opt-out preference signal.

In response to your request to opt-out, we will process your request, as soon as feasibly possible, but no later than 15 business days from the date we receive the request. You do not need to create an account with us to exercise your opt-out rights. We will only use Personal Information provided from your request to comply with the request.

To the extent required by applicable law, we will also notify our service providers, contractors, and certain other downstream recipients of your request to opt-out and instruct them to comply with your request and forward the request to their own downstream recipients, if applicable.

We may deny opt-out requests if we have a good-faith, reasonable, and documented belief that the request is fraudulent and will clearly explain our denial decision to the requestor.

Once you make a request to opt-out, we will wait at least 12 months before asking you to reauthorize Personal Information sharing. However, you may change your mind and opt back in at any time by clicking the “Manage Cookies” link on the banner at the bottom of our homepage.

10. Additional Information for Non-U.S. Residents

Our Websites and Services are hosted in and provided from the United States, and your use of our Websites and Services is governed by United States law. If you are using the Services from outside the United States, please be aware that the Services and the servers that host it are located in the United States and any information or data you provide, including Personal Information, will be transferred to the United States. By using the Websites and Services, you consent to your information being transferred to our systems and facilities and to the systems and facilities of those third parties to whom we disclose information as described in this Privacy Policy.

If you are located in the European Union, United Kingdom or Switzerland, you may be entitled to exercise the rights set forth above in the section Your Rights and Choices. See the section above titled How to Exercise Your Rights for information on submitting a privacy rights request. You can also lodge a complaint with the data protection authority in your country.

The legal bases for our use of your Personal Information are as follows:

• with your consent, in accordance with applicable law, such as before we send you marketing messages;
• when the processing is necessary to perform our contractual obligations to you under our End User License Agreement and/or other agreements with you, such as to provide requested Services;
• when necessary to pursue our legitimate interests or the legitimate interests of others, such as to secure, update, and improve our Websites and Services; to communicate with you and respond to your requests and inquiries; to monitor and prevent any problems with our Services; to personalize your experience with our Websites or Services; for fraud prevention; and to establish, exercise, or defend legal claims;
• where use of your information is necessary in order to protect your vital interests or those of another person, such as if we learn you require assistance or someone is in danger; or
• when necessary for our compliance with our legal obligations, such as reporting criminal or fraudulent activity or for complying with tax, employment, or other applicable laws.

11. How We Protect Your Information

The security of your Personal Information is important to us, and we use commercially reasonable and appropriate administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of your Personal Information, which may, in certain circumstances, include the use of Secure Sockets Layer (SSL) encryption technology supported by most Internet browsers. Additionally, most Internet browsers also offer their own security features that enable end users to control how their transmissions are protected. Please remember, however, that any Personal Information you send to us via the Internet is subject to the risk of unlawful interception by third parties, and that no method of safeguarding information is 100% secure. If you become aware of any breach of security, please notify us immediately.

12. Children Under the Age of 18

Our Websites are not intended for children under 18 years of age. We do not knowingly collect Personal Information from children under 18. If you are under 18, do not use or provide any information on this Website. If we learn we have collected or received Personal Information from a child under 18 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 18, please contact us at support@workbright.com.

In some instances, we may collect Personal Information at the direction of and on behalf of our customers. This Personal Information is subject to the privacy notice of the applicable customer and not subject to this Privacy Policy.

13. Third-Party Sites

Our Websites and Services may contain links to, or other integrations with, third-party SaaS platforms, websites, APIs, and other third-party services, which third parties have privacy policies and other data practices that govern the collection, sharing, processing and use of your Personal Information on their platforms, websites, APIs, and services. Please review the privacy policies and other materials relevant to the use of such platforms, websites, APIs, and other third-party services to understand how your Personal Information may be collected, shared, processed, and used by these third parties and to exercise your applicable rights with respect to such Personal Information. We are not responsible for the privacy practices of such third parties.

14. Retention of Your Personal Information

We will retain Personal Information about you for the period necessary to fulfill the purposes for which the Personal Information has been collected as outlined in this Privacy Policy, and for the purpose of satisfying any legal, accounting, contractual, or reporting requirements that apply to us. To determine the appropriate retention period for Personal Information, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure of your information, the purposes for which we process your information and whether we can achieve those purposes through other means, and the applicable legal requirements.

15. Transfer of Corporate Assets

If we are acquired by or merged with a third-party entity, we reserve the right to transfer or assign the Personal Information you provided to us as part of such merger, acquisition, sale, or other change of control to the new entity. In the event of bankruptcy, insolvency, reorganization, receivership, or assignment for the benefit of creditors, or the application of laws or equitable principles affecting creditor’s rights generally, we may not be able to control how your Personal Information is processed. If such a situation arises, we would request that all applicable privacy laws and protection standards at least as stringent as ours be applied to your Personal Information originally in our possession. In the event of a transfer of corporate assets, the information regarding the transfer will be posted on our Websites.

16. Chatbots and AI-Powered Tools

We make chatbots and other AI-powered tools available on our Websites and within the Services to help respond to questions, facilitate use of the Services, improve our products and services, and otherwise communicate with you. When we use such tools to interact with you, we will provide notice where required by applicable law and will not knowingly represent that an automated tool is a human representative. Responses generated by chatbots and other AI tools may be inaccurate, incomplete, or out of date. You should not rely on such responses as the sole source of information or as a substitute for professional, legal, tax, employment, or other advice.

When you interact with our AI chatbots, your messages, the conversation content, and related technical and usage information are transmitted to, processed by, and accessible to our third-party service providers in order to generate responses, provide customer service and operate and improve the Services. Your conversations are recorded and monitored to provide you with the Services and so that we can improve the chatbot and our Services. By using the chatbot, you consent to this recording, monitoring, and processing by WorkBright and our third-party service providers.

We will treat Personal Information you submit to our AI chatbots as set forth in this Privacy Policy. Please do not submit Sensitive Personal Information in your communications with our AI chatbots. If we learn we have collected or received Sensitive Personal Information through communications with our AI chatbots, we will delete that information. In some instances, we may collect Personal Information through AI tools at the direction of and on behalf of our customers. This Personal Information is subject to the privacy policy of the applicable customer and not subject to this Privacy Policy.

You may choose not to use AI chatbot tools and may contact us through the other methods described in this Privacy Policy.

17. Contact Information

We welcome your comments about this statement of privacy. If you have questions or believe that we have not adhered to this statement, please contact us at the information set forth below.

By Email: support@workbright.com

By Phone: 844-370-1783

By Mail: PO Box 337, Boulder, CO 80306