Privacy Policy

This Privacy Policy explains how BRIO (Business Resource & Intelligence Operations) ("BRIO," "we," "us," or "our") collects, uses, discloses, and safeguards the information of advisors, professionals, and visitors ("you") who use our websites, portals, communities, tools, and related services (collectively, the "Services"). We are committed to protecting your privacy and handling your information responsibly.

Contents

- Scope & who this applies to

- Information we collect

- Payments & credit card information

- How we use your information

- How we share information (and consent)

- Your privacy rights (all U.S. states)

- How we protect your information

- Data retention

- Cookies & tracking

- Children's privacy

- Changes to this policy

- Contact us

1. Scope & who this applies to

This policy applies to all users of the Services across every U.S. state and territory. Regardless of where you live, we aim to give you the strongest, clearest privacy protections. Where a specific state law grants you additional rights, those rights are described in Section 6 and are honored for eligible residents.

2. Information we collect

We collect only the information we need to provide and improve the Services:

Information you provide

- Account & profile details — name, business name, email, phone, photo, and professional role.

- Links & content you add — such as your calendar link, community (Skool) link, website URLs, and any information you enter into the portal.

- Communications — messages, support requests, and feedback you send us.

Information collected automatically

- Usage & device data — pages viewed, general activity, browser type, and approximate (non-precise) location derived from IP address, used to keep the Services secure and working.

We do not knowingly collect sensitive personal information (such as Social Security numbers, health, or biometric data) through this portal, and we ask that you not submit it here.

3. Payments & credit card information

We never store your full credit card or payment details. All membership payments and stored payment information are handled securely by Skool (our community and payments platform) and its PCI-compliant payment processors. Your card data is entered directly with Skool's processor — not with BRIO — and we do not have access to your complete card number, CVV, or bank credentials.

When a payment is made, we may receive limited confirmation details (for example, that a subscription is active, the plan, and the last four digits or card brand for reference). Skool's own privacy policy and terms govern the information they collect and process. Please review Skool's policies for details on how they handle payment data.

4. How we use your information

- To provide, personalize, and maintain the Services and your portal.

- To manage your membership, benefits, and access.

- To communicate with you about your account, updates, and support.

- To improve, secure, and troubleshoot the Services.

- To comply with legal obligations and enforce our terms.

We do not use your personal information for automated decisions that produce legal or similarly significant effects without a lawful basis and appropriate safeguards.

5. How we share information (and consent)

We do not share your personal information with our tax team, affiliated professionals, marketing partners, or any other third party for their own purposes without your prior, explicit consent. If you ask us to connect you with a tax professional or partner, we will share only the information needed to fulfill that request — and only after you agree.

We may share information only in these limited situations:

- Service providers. Trusted vendors who operate the Services on our behalf (for example, hosting, community/payments via Skool, and email delivery). They may use your information only to perform services for us and must protect it.

- With your consent or at your direction. When you ask us to share information — such as booking a call, joining a community, or being introduced to a specialist.

- Legal & safety. When required by law, subpoena, or legal process, or to protect the rights, property, or safety of BRIO, our users, or the public.

- Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this policy.

We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising.

6. Your privacy rights (all U.S. states)

We extend the following rights to residents of every U.S. state, regardless of whether your state has a specific privacy law. Depending on where you live, you may have the right to:

- Access / know the personal information we hold about you.

- Correct inaccurate personal information.

- Delete your personal information.

- Obtain a copy / portability of your information.

- Opt out of any sale or targeted advertising (note: we do not sell data or use it for targeted advertising).

- Withdraw consent at any time where processing is based on consent.

- Non-discrimination — we will not deny service or charge you differently for exercising your rights.

Residents of states with comprehensive privacy laws — including California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other states as their laws take effect — are entitled to these rights under their respective statutes. California residents also have the right to know the categories of information collected and to designate an authorized agent.

To exercise any right, contact us using the details in Section 12. We will verify your request and respond within the timeframe required by applicable law. You may appeal a decision by replying to our response.

7. How we protect your information

We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit, access controls, and limiting data access to those who need it. Because payment data is handled by Skool's PCI-compliant processors, sensitive card details never reside on our systems. No method of transmission or storage is 100% secure, but we work continuously to protect your information.

8. Data retention

We keep personal information only as long as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or de-identify it.

9. Cookies & tracking

The Services may use essential cookies and similar technologies to keep you signed in, remember your settings, and understand general usage. We do not use cookies for cross-site targeted advertising. You can control cookies through your browser settings; disabling some cookies may affect functionality.

10. Children's privacy

The Services are intended for professionals and are not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Services after changes take effect constitutes acceptance of the updated policy.

12. Contact us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:

- Email: [email protected]

We will respond to your inquiry as promptly as possible and within any timeframe required by applicable law.