Sabba Collective Inc. Privacy Policy

Last Updated: April 10, 2025

Introduction

Sabba Collective Inc. (”Sabba,“ “we,” or “us”) is a Delaware Public Benefit Corporation dedicated to being an ethical steward in psychedelic and mental health education. We operate the website sabba.com and related services (collectively, the “Services”). We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains what information we collect from users of our Services (including professionals, students, and organizations in the mental health ecosystem), how we use and share that information, and the choices you have regarding your data. Our aim is to be transparent and to use plain language so you can understand our practices. This Privacy Policy applies to personal information collected through Sabba’s Services. By using our Services, you agree to the collection, use, and disclosure of your information as described in this Policy. We require all users to be 18 years of age or older, and we do not knowingly collect any sensitive health information or other special categories of personal data. If you do not agree with our practices, please do not use the Services. If you have any questions, you can always contact us using the information provided at the end of this Policy.

Age Restrictions

Our Services are intended for adults. You must be at least 18 years old to use Sabba’s platform. We do not knowingly collect personal data from anyone under 18. If we become aware that a minor under 18 has provided us with personal information, we will take steps to delete such information. If you are a parent or guardian and believe a person under 18 has given us personal information, please contact us so we can remove the data.

Information We Collect and How We Use It

We collect personal information to provide and improve our Services, to communicate with you, and to operate our community. The types of information we collect, and the purposes for which we use it, include:

• Account Information: When you sign up for Sabba, we ask for basic information such as your name and email address. We use this to create and administer your account, identify you on the platform, and communicate with you about account-related issues (e.g., password resets, important updates). Your email may also be used to send you newsletters or announcements about Sabba, but you can opt out of promotional communications at any time.
• Profile Information (Optional): You have the option to provide additional details on your Sabba community profile. This may include a short biography, your professional license type or credentials, your general location (e.g., city and state/province), areas of interest or expertise, and social media or website links. Providing this information is completely optional and is intended to enhance your experience and help you connect with others in the community. We use your profile information to personalize your account and, with your consent, to display in our member directories (see Community Profiles and Directories below). If you choose to fill out your profile, this information will be visible to other logged-in community members, and certain parts of your profile may be publicly visible if you opt into being listed as an expert or supervisor.
• Community Content and Contributions: Sabba provides community spaces (such as forums, groups, or discussion boards) where users can post content, share resources, or communicate with each other. When you post or share content on the Services – for example, comments, questions, or other contributions – we collect that content and associated information (like timestamps). We do this to display your posts to other community members as intended, to moderate the community, and to foster collaboration and knowledge-sharing. Keep in mind that content you share in these community areas will be visible to other members of that space.
• Educational Program Data: If you enroll in a course or program that Sabba offers in partnership with a school or other institution, we may receive information about your participation from that partner (for example, via an LTI integration with a university’s learning management system). This might include data such as your enrollment status or course progress. We use this information only to provide you with the program (for instance, to give you access to course materials, track your progress, and coordinate with the program organizers) and not for any other purposes.
• Usage Data and Device Information: We automatically collect certain data about your device and activity on the site whenever you use Sabba. This may include your IP address, browser type, device information, pages you visit, and actions you take on the site (like clicks or logins). We use this information to maintain the security and proper functioning of the platform (for example, using IP addresses to detect fraud), and to analyze usage patterns so we can improve our Services and enhance your experience. We also use some of this data for analytics purposes, as described in the Cookies, Analytics, and Third-Party Content section below.
• Cookies and Similar Technologies: When you use Sabba, we and certain third parties place small data files called cookies (and similar technologies like web beacons or local storage) on your device. Some cookies are essential for the website to function (for example, to keep you logged in or remember your settings). Others are used for analytics and to improve the service (for instance, Google Analytics cookies help us understand user engagement and site usage). You have control over non-essential cookies as described later in this Policy.
• No Sensitive Personal Data: We do not intentionally collect any sensitive personal information such as health or medical records, information about your mental or physical health conditions, treatment history, social security numbers, financial information, or other highly sensitive data. Sabba’s platform is not meant to collect protected health information. We ask that you do not submit sensitive personal or health information on the platform. Any information you do choose to share in the community is at your discretion and will be visible to others as described above. If we become aware that we have inadvertently received sensitive personal data, we will handle it securely and delete it if not necessary for providing our Services.

We use the information collected for the purposes described above and in accordance with the legal bases described in the next section. In short, we collect only what we need to run our community and educational programs, to communicate with you, and to improve our offerings, while minimizing data that is not necessary.

Community Profiles and Directories

Sabba is a community-focused platform, and we give users control over how much they share about themselves. By default, only your basic account information (like your name) is visible to other members of the community, for identification in discussions or group activities. Any additional profile information you provide is optional and meant to help you showcase your background and interests to others on Sabba.

If you choose to complete your Community Profile with details such as your bio, credentials, location, or social links, this information will be visible to other logged-in members of the Sabba community. Sharing these details can help you connect and network with peers, mentees, or mentors in the mental health and psychedelic education field. However, it’s your choice how much to share, and you can edit or remove any profile field at any time by going to your account settings.

Sabba may also feature certain members in Directories—such as Experts, Supervisors, or Contributors—which are visible only to select groups of signed-in users (e.g., members of a university program or organization). These directories are not public by default and are designed to facilitate discovery and collaboration within trusted cohorts. Inclusion in these directories is voluntary and requires your agreement. You control the information shared in your listing.

In some cases, Sabba may highlight select Experts or Contributors in public-facing materials such as our website, newsletters, or event promotions. This may include your name, title, affiliation, and profile image. This visibility is intended to recognize and celebrate key participants in the Sabba ecosystem as “Participating Experts and Contributors.”

You remain in control of your profile visibility. If at any time you no longer wish to be included in a directory or promotional listing, you can withdraw your consent by contacting us or adjusting your settings (if applicable). We will respect your preferences and remove or limit access to your information accordingly. Once information is public (e.g., featured on the website), we cannot fully control how it may be used by others, but we will stop further publication going forward.

In summary, Sabba allows you to build a professional profile and share it within trusted communities or, with consent, more broadly. You decide how visible your information is, and we’re committed to honoring your choices.

Legal Basis for Using Your Information

When we process personal information, we do so on one or more of the following legal grounds (as applicable under laws like GDPR):

• Consent: We ask for your consent in cases where it’s required. For example, we rely on consent to use optional profile information (since you choose to provide it), to list you in a public directory, or to send you marketing emails. You can withdraw your consent at any time.
• Contract: Processing is necessary to perform the contract between you and Sabba. In other words, when you sign up and agree to our Terms & Conditions, we must process your data to provide the Services. For instance, we use your account info to create and manage your account and deliver the features you expect.
• Legitimate Interests: We process certain data to pursue our legitimate business interests in a way that does not override your rights and freedoms. This includes using data to maintain security, improve our platform and content, communicate with you about updates, and generally to ensure Sabba operates effectively. If we rely on this basis, we do so after considering and minimizing any impact on your privacy, and you have the right to object to such processing in some cases.
• Legal Obligation: Sometimes we must process or retain data to comply with laws or regulations. For example, we might have to keep transaction records for financial reporting, or disclose information if required by a valid legal process (like a subpoena or court order).

These bases may apply in different situations, depending on the activity. If you have any questions about the legal basis for a particular processing of your data, you can contact us for more information.

Cookies, Analytics, and Third-Party Content

Cookies and Analytics: Sabba uses cookies (small text files stored on your device) and similar technologies to make our Services function smoothly and to understand how people use our platform. For example, when you sign in, a cookie helps keep you logged in. We also use cookies for analytics through Google Analytics, which provides us with aggregated information on things like which pages are visited, how often users log in, and other usage patterns. This helps us improve our content and user experience. We do not use cookies for advertising purposes, and we do not track your browsing on other websites.

You have some control over cookies. Most web browsers allow you to delete or block cookies. However, be aware that disabling certain cookies (like the ones that keep you logged in) may affect the functionality of our site. If you want to opt out of Google Analytics specifically, Google offers a browser add-on to disable Analytics, or you can adjust your browser settings to limit tracking.

Embedded Third-Party Content: Sabba’s platform may include content from third-party services to enhance your experience. For instance, we might embed a YouTube video or include a Google Doc or other external media in a shared content item. When you interact with embedded content like a YouTube video, the third-party provider (in this case, YouTube/Google) may collect data about your interaction (such as your IP address and viewing activity) and set their own cookies, just as if you visited their site directly. Sabba does not share your personal data with these providers, but they may collect information through the embed. We don’t control third-party sites and their privacy practices, so we recommend reviewing their privacy policies if you have concerns.

“Do Not Track” Signals: Web browsers can send a Do Not Track (DNT) signal to indicate you don’t want to be tracked across sites. Currently, Sabba’s website does not respond to DNT signals because there is not a consistent industry standard for how to handle them. We only use your data as described in this Policy (and we do not serve targeted ads), so even if your browser sends a DNT signal, our practices remain as outlined above.

How We Share and Disclose Information

We do not sell your personal information. We only share your data in a few circumstances:

• Service Providers: We use trusted third-party companies to perform services for us, such as website hosting, data storage, analytics, email communications, and customer support. These providers may have access to personal information as needed to do their work on our behalf, but they are contractually obligated to protect it and use it only for our specified purposes.
• Program Partners: If you participate in a program or course that Sabba offers in collaboration with a partner organization (for example, a university or training program), we may share relevant information with that partner as needed to operate the program. For instance, we might confirm your course completion or share your progress with program administrators. Such sharing is done only for the intended educational purposes and under agreements that safeguard your data.
• Your Choices (Community Visibility): When you voluntarily share information on Sabba, such as posting in a forum or filling out your profile, that information will be visible to others based on the settings and context. For example, content you post in a community group is visible to other members of that group, and if you opt into a public directory, your chosen profile details become public. In this way, you are choosing to share your information, and we facilitate that sharing as part of the Service.
• Legal Compliance and Protection: We may disclose information if we are legally required to do so or if we need to protect our rights or the rights and safety of others. This could include responding to lawful requests by authorities (like a subpoena or court order), or disclosing information in a good-faith belief that it is necessary to prevent fraud, security issues, or imminent harm.
• Business Transfers: If Sabba undergoes a business transaction like a merger, acquisition, restructuring, or sale of assets, your personal information may be transferred to the successor or new owner as part of that transaction. In such a case, we will ensure that the new entity continues to protect your data in line with this Privacy Policy, and we will notify you of any changes.
• Aggregated Data: We may share information that has been aggregated or anonymized (so that it doesn’t identify you personally) for research, reporting, or promotional purposes. For example, we might publish community statistics or learning outcomes in aggregate form. This information will not include any personal details and is not linked to you.

Aside from the situations above, Sabba will not share your personal information with third parties unless you direct us to or give us your consent. If we ever need to share your data for any new purpose, we will seek your permission or update this Policy to let you know.

International Data Transfers

Sabba is based in the United States, and the majority of our data storage and processing occurs in the U.S. If you are located in Canada, Europe, or any other region outside the U.S., your personal information will be transferred to and stored in the United States (or potentially other countries where our service providers operate). These countries might have different data protection laws than your home jurisdiction.

By using our Services or providing information to us, you acknowledge that your data will be transferred to the U.S. We will take appropriate measures to ensure your personal data remains protected according to the standards described in this Privacy Policy, wherever it is processed. For example, if you are in the European Economic Area (EEA) or another region with data transfer restrictions, we will rely on approved legal mechanisms (such as standard contractual clauses) or other safeguards to lawfully transfer data across borders.

No matter where your information is handled, Sabba will treat it securely and in accordance with this Policy.

Data Retention and Deletion

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer period is required or permitted by law. In general, we keep your account information for as long as you maintain an account with Sabba. If you decide to close your account or request deletion of your data, we will delete or anonymize your personal information so that you can no longer be identified, except where we are required or permitted to retain it for legal or legitimate business reasons.

Please note that content you have posted or shared with others (for example, contributions in a forum or group) may remain visible to those users even after your account is deleted. However, such content will no longer be associated with your profile, and we will remove or pseudonymize any identifying information. Also, copies of your information might remain temporarily in our backup archives; if so, they will be securely erased according to our regular backup retention schedule.

If you want to delete your account or personal data, you can contact us (see Contact Us below) to make that request. We will respond and take action to delete your data as required by applicable law. Once your account is deleted, you will lose access to the Services, but we will only retain the minimal information necessary for compliance with laws or to protect our legitimate interests (for example, records of a transaction or a note that we deleted your account at your request).

Security Measures

Sabba takes appropriate security measures to protect your personal information from unauthorized access, loss, or misuse. These include:

• Secure Technology: We use encryption (HTTPS/TLS) to protect data in transit between your browser and our site. Sensitive information stored in our databases is protected using security best practices (for example, encryption at rest, firewalls, and regular data backups).
• Access Controls: We limit access to personal data to authorized personnel who need it to operate our Services. Our team members and service providers are bound by confidentiality obligations. We also employ measures like password protection, access logs, and permission restrictions to prevent unauthorized access to user data.
• Monitoring & Response: We keep our software and systems updated and monitor for potential vulnerabilities or attacks. We conduct periodic security reviews and have an incident response plan in place. If we become aware of a data breach affecting your personal information, we will notify you and the appropriate authorities as required by law, and we will take prompt action to mitigate the issue.

Please note that no method of transmitting or storing data is completely secure. While we strive to protect your information, we cannot guarantee absolute security. You can help protect your account by using a strong, unique password and keeping it confidential. If you believe your account or data may have been compromised, please contact us immediately.

Your Rights and Choices

You have a number of rights and choices regarding your personal information. These rights may vary depending on your location and the applicable privacy laws, but Sabba aims to provide all users with a core set of privacy rights. In particular, you have the right to:

• Access Your Information: You can request a copy of the personal information we hold about you.
• Correct Your Information: You can update or correct your personal details (for example, if you need to fix your name or update your email).
• Delete Your Information: You can ask us to delete personal data we have about you. This includes the right to delete your account and associated data.
• Withdraw Consent: If we are processing any information based on your consent (such as an optional profile field or inclusion in a public directory), you can withdraw that consent at any time.
• Object or Restrict Processing: You can object to certain uses of your data or ask us to limit how we use it, particularly if we are relying on legitimate interests for processing and you have a specific reason for objection.

These rights are subject to some exceptions (for example, we might not delete information that we are legally required to keep). If you are a resident of a or Canada, you have similar rights under laws like the California Consumer Privacy Act (CCPA) and Canada’s PIPEDA. Sabba does not sell personal information, and we apply the same privacy principles to all users, so you should expect comparable protection regardless of where you live. If you are in the European Union/EEA or other regions with GDPR-style laws, you also have rights such as data portability (the ability to get your data in a transferable format) and the right to lodge a complaint with a supervisory authority. We will cooperate with you and any official bodies to ensure your privacy rights are respected.

Exercising Your Rights: To exercise any of these rights or make a privacy-related request, please contact us (see Contact Us below for how to reach us). We may need to verify your identity (for example, by confirming information we have on file) before fulfilling certain requests, to ensure we are acting on requests from the correct individual. We will respond to your inquiry or request as promptly as possible, and in any case within the timeframe required by law. We will not discriminate against you for exercising any of these rights.

Additionally, you can manage some of your information and preferences directly:

• You can edit your profile and account details at any time by logging into your Sabba account.
• You can unsubscribe from marketing or newsletter emails by clicking the “unsubscribe” link in those emails or by adjusting your email preferences.
• You may control cookies through your browser settings or tools as described in the Cookies section of this Policy.

Your privacy and control over your information are important to us. Please feel free to reach out if you have any questions or need assistance with any privacy-related matters.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time as our Services or privacy practices evolve. When we make changes, we will post the updated Policy on this page and adjust the “Effective Date” at the top. If the changes are significant, we will notify you through more direct means (for example, by email notification or a prominent notice on our site) to let you know about the updates.

We encourage you to review this Policy periodically to stay informed about how we protect your information. Your continued use of Sabba’s Services after any update to the Privacy Policy will signify your acceptance of the changes.

Contact Us

Sabba welcomes your questions, concerns, and feedback about privacy. If you have any questions about this Privacy Policy, or if you want to exercise your rights or contact us for any reason related to your personal information, please reach out to us at:

Email: support@sabba.ai