Privacy Policy

1. Overview of Onrise Services

Onrise delivers mental health services to sports organizations and the athletes they serve via telehealth platforms designed to support HIPAA compliance. Onrise provides services through both non-clinical and clinical personnel, depending on each client's circumstances.

Non-clinical support is provided by Onrise Management, LLC, a Tennessee limited liability company ("Onrise," "we," "us," or "our") through one or more Athlete Mental Health Specialists, each of whom is a former collegiate and/or professional athlete who has received training to provide peer support, care navigation, and general wellness guidance and does not provide diagnosis or clinical treatment.

Athlete Mental Health Specialists are not licensed clinicians and do not provide psychotherapy, diagnosis, or emergency services.

Clinical services, when provided by licensed professionals, are provided by our affiliated professional entity QRO Wellness, LLC or other third-party medical providers, as applicable.

The services described in this Section 1, together with the Products, are collectively referred to as the "Services."

2. Scope of This Privacy Policy

This Privacy Policy applies to information Onrise collects through the Services, as well as information we receive from third parties in connection with the Services and link to a customer or user account.

However, this Privacy Policy does not apply to information collected from our employees, contractors, or vendors.

This Privacy Policy also does not apply to information you direct us to share with third parties, or to information collected directly by third-party services integrated into the Services, which is governed by those third parties' privacy policies.

3. What This Privacy Policy Covers

This Privacy Policy describes, among other things:

• The personal and other information we collect about you;
• How we use your information;
• How we may share your information with third parties; and
• Your choices regarding the personal information we collect about you.

4. Consent; International Processing

By accessing or using the Services, you consent to this Privacy Policy. If you do not agree with this Privacy Policy, please do not access or use the Services.

The Services are controlled and operated from the United States, and your information may be processed and stored in the United States and other countries where we or our service providers operate. By using the Services, you understand that your information may be transferred to and processed in jurisdictions that may have different data-protection laws than your jurisdiction.

5. Collection of Personal Information and Other Information

5.1 Personal Information

When you register for or use our Services, we may collect "Personal Information." For purposes of this Privacy Policy, "Personal Information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual.

Personal Information we may collect includes:

• Name;
• Personal or business address;
• Email address;
• Phone number;
• Date of birth; and
• Information contained in any submission made to us through the Services (for example, messages you send through contact forms).

Payment Information. Payment card information is collected and processed by our third-party payment processors. We do not store full payment card numbers, though we may receive billing details and transaction confirmations from our processors.

You may choose not to provide Personal Information, but this may prevent you from receiving certain features of the Services.

5.2 Social Media Integrations

Our Services may integrate with social media platforms, including LinkedIn, Facebook, X, Pinterest, and Instagram. When you connect a social media account to our Services, we may receive information you choose to provide or that the platform shares with us, such as your name, profile picture, and email address, depending on your platform settings and authorizations. You acknowledge and agree that Onrise is not responsible for the data collection or use practices of any connected social media platform. You should read each social media platform's privacy policy before connecting your social media account.

5.3 Other (Not Directly Identifying) Information

We also collect information relating to the Services that, on its own, is not intended to directly identify you, such as device and usage data. Examples include:

• Pages of our website you viewed during a visit;
• What information, content, links, or advertisements you view or interact with using the Services;
• Language preferences;
• The city and state in which you are located (but not your precise geographic location);
• Device and browser information; and
• Unique identifiers that are not connected and cannot reasonably be connected to your identity.

We will not use information that is not directly identifying to try to identify you. If we combine information that is not directly identifying with information that identifies you, we will treat the combined information as Personal Information.

5.4 Information Collected by Third Parties

Information collected through the Services may be collected by us or by third parties we use to provide and operate the Services, as described further below.

6. How We Use Information

We may use the information we collect to:

• Provide, maintain, and protect the Services;
• Set up, maintain, and protect accounts to use the Services;
• Provide customer service;
• Communicate with you, including sending administrative messages and, where permitted, marketing communications;
• Improve our online operations;
• Send or display content that is customized to your interests or preferences;
• Perform research and analysis aimed at improving our services and programs, and developing new services or programs;
• Manage and maintain the systems that provide the Services;
• Comply with legal obligations and enforce our agreements;
• Detect, prevent, and respond to fraud, abuse, and security incidents; and
• Conduct analytics and improve the Services.

7. How We Disclose Information

We may disclose Personal Information as described below.

7.1 Disclosures to Provide the Services or at Your Direction

We may disclose Personal Information to provide the Services, or when you authorize or instruct us to do so, for example, when you submit profile information, submit an inquiry to us, or sign up to receive information from us. If you connect social media accounts to the Services, we may disclose your interactions with the Services to those social media platforms as described in Section 5.2.

7.2 Service Providers

We may disclose Personal Information and other information to Service Providers. "Service Providers" are companies, agents, contractors, or others engaged to perform functions on our behalf (for example, processing payments, providing data storage, hosting our website, marketing our programs and services, and conducting audits). When we use a Service Provider, we require that the Service Provider use and disclose the Personal Information received from us only to provide services to us (and as instructed by us) or as required by law.

7.3 Online Tool Providers

We may disclose Personal Information and other information to Online Tool Providers. "Online Tool Providers" are licensors of software that we include in, or use with, our Services, including APIs or SDKs, that provide specialized functions and may require the transmission of information to the Online Tool Provider. For our public-facing website, Online Tool Providers may include analytics, tracking, and data enrichment tools such as Google Analytics and RB2B, which help us understand website usage, improve performance, and support our marketing and outreach efforts. Some Online Tool Providers may process information to provide services to us and for limited purposes described in their respective privacy policies.

7.4 Advertising Partners and Offers

We may partner with advertisers to provide special offers or to advertise products or services. We do not share information that directly identifies you with advertisers for their own marketing purposes unless you choose to interact with an offer, promotion, or other advertiser feature. If you choose to redeem or respond to an offer, we may share Personal Information necessary to facilitate that interaction, which may include your name and email address. The advertiser's privacy policy governs its use of your information.

7.5 Legal, Security, and Safety Disclosures

We may disclose Personal Information when we believe disclosure is necessary to:

• Enforce or apply terms and conditions applicable to the Services and investigate potential violations;
• Comply with legal or regulatory requirements or an enforceable governmental request;
• Protect the rights, property, or safety of Onrise, our users, or others;
• Prevent or investigate suspected wrongdoing, fraud, or security incidents; or
• Detect, prevent, or address technical issues.

7.6 Business Transfers

We reserve the right to transfer information (including Personal Information) to a third party in connection with a sale, merger, reorganization, or transfer of all or substantially all assets related to the Services, or in the event of bankruptcy, liquidation, or receivership. We will use commercially reasonable efforts to provide notice where required or appropriate.

7.7 Aggregated or De-Identified Information

We may disclose non-personal information that is aggregated or de-identified with information about other users to clients, business partners, merchants, advertisers, investors, potential buyers, and other third parties for business purposes.

8. Cookies and Automatic Information-Gathering Technologies

Each time you use the Services, we may collect information about that use, including device and usage data. We may use device identifiers (such as mobile advertising identifiers or other unique identifiers) to assist us in collecting and analyzing this data.

To assist with collecting and storing information, we may use technologies including cookies, local browser storage, and web beacons, pixels, or tags. A "cookie" is a small amount of data a website operator (or a third party whose content is embedded in the website) may store in your web browser and access when you visit the website.

Your operating system and browser may allow you to erase information stored in cookies and local browser storage. If you do so, you may be required to log in again and may lose preferences or settings. You may also set your browser to refuse some or all website storage, but some features may not function properly without it.

If an Online Tool Provider collects information automatically, the information it receives is subject to that Online Tool Provider's privacy policy. Some Online Tool Providers may provide options to opt out of certain collection or uses.

9. Your Choices; Transparency; Do Not Track

9.1 Access, Correction, and Deletion Requests

You may request access, correction, or deletion of your Personal Information by sending an email to legalnotices@onrisecare.com. We may take reasonable steps to verify your identity before responding. We may need to retain certain information as required by law or for legitimate business purposes.

If you request deletion of Personal Information, you may not be able to continue to use certain features of the Services. Even if you request deletion, we may retain certain information for a limited period to satisfy legal, audit, and dispute resolution requirements.

9.2 Marketing Emails

You may opt out of receiving marketing emails from us by clicking the "unsubscribe" link in the emails. Please note it may take up to ten (10) business days for your opt-out request to be processed. Even if you opt out of marketing emails, we may continue to send you administrative or account-related communications.

9.3 Interest-Based Advertising

We may use third-party providers that collect information for interest-based advertising purposes (ads tailored to likely interests based on categories in which you have shown interest). These providers may offer choices to limit certain advertising.

9.4 Do Not Track

Some browsers offer a "Do Not Track" signal. Because there is no widely adopted standard for recognizing or honoring it, we do not respond to such signals at this time.

10. Certain State Residents

Certain state laws may provide residents with privacy rights. Depending on our activities and applicable thresholds, we may be required to honor certain requests. We provide the disclosures in this Privacy Policy and will respond to requests as required by applicable law.

11. Residents of Nevada

We do not sell your Personal Information for monetary consideration. However, you may contact us at legalnotices@onrisecare.com with questions.

12. Children

The Services are not intended for users under 13 years of age. We do not knowingly collect Personal Information from users under 13 years of age, and we do not authorize users under 13 years of age to use the Services. If we learn that we have collected Personal Information from a child under 13, we will take steps to delete it.

13. Information Security

We use reasonable administrative, technical, and physical safeguards designed to protect Personal Information against unauthorized access, modification, or destruction. However, no method of transmission over the Internet and no method of storage can be guaranteed to be 100% secure. Accordingly, while we strive to protect Personal Information, we cannot guarantee its security.

We limit access to Personal Information to employees, contractors, and vendors who need it to operate, maintain, and support the Services.

14. Third-Party Websites and Services

The Services may link to, or integrate with, third-party sites, services, or applications. We are not responsible for the privacy, security, or content of third parties. We encourage you to review the privacy policies and terms of those third parties so you understand how they collect, use, share, and protect information.

15. Changes to This Privacy Policy

We may modify or update this Privacy Policy periodically by posting the updated policy on this page. You can check the "Last Updated" date at the top of this Privacy Policy to see when it was last changed.

If we make material changes, we will provide notice by reasonable means, which may include email and/or posting a notice on our website prior to the changes becoming effective. If you do not agree to the updated Privacy Policy, you must stop using the Services as of the effective date.

16. Questions and Contact Information

To ask questions about this Privacy Policy or to lodge a complaint, contact us at: