Sage Therapeutics, Inc. Privacy & Cookies Policy

Privacy Policy

Last Updated: May 19, 2025

I. Introduction

Sage Therapeutics, Inc. (“Sage,” “we,” or “us”) is committed to protecting and respecting your privacy. This Privacy Policy (“Policy”) explains the type of personally identifiableinformation(“Personal Information”) we collect, how we use that Personal Information, who we share it with, how we protect that information, and your legal rights in relation to your Personal Information. We are committed to abiding by this Policy,as well asthe requirements of applicable laws, in the operations of our business.

For purposes of this Policy, we define Personal Information about you broadly, to include not only information such as your name or phone number, but also any other information that relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household.

Sage may have other privacy policies or notices that apply to certain specific situations. To the extent you were provided with a different privacy policy or notice and that policy or notice applies, those polices or notices will govern our interactions with you, not this one. For example, if you are a participant in a clinical study, clinical trial, or other health-related research, you should receive a separate privacy notice regarding the Personal Information we process for those purposes.

Please review this Policy carefully. To the extent permitted by applicable law, by providing us your Personal Information or otherwise interacting with us, you are agreeing to this Policy.

II. What Personally Identifiable Information Do We Collect About You?

Sage may collect Personal Information from you when you actively provide it to us, whether offline or online, including through our website at https://www.sagerx.com/ or other Sage website or application (the “Site”), such as by completing a form or survey, signing up to receive communications from us, requesting information from us, or applying for a job with us.

We may also obtain Personal Information from other sources, such as our business partners, business plans, the Internet, including social media websites; the press or other print media; and other organizations or individuals as permitted under applicable law.

Listed below are the types of Personal Information that we may have collected about you within the past 12 months or otherwise maintain. Some of these types of information may not be Personal Information, depending on other information we have access to about you. Each type of information listed below is Personal Information only if the information identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household.

• Identifiers such as: your name, postal address, online identifier, Internet Protocol (IP) address, email address, Social Security number, driver's license number, or other similar identifiers.
• “Customer Records” information (some of which may be identifiers or professional/employment-related information as well), such as your name, signature, Social Security number, physical characteristics or description, address, telephone number, driver's license or state identification card number, insurance policy number, education, employment, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.
• Commercial information , such as records of products or services purchased or considered, or other purchasing or consuming histories or tendencies.
• Internet or other similar network activity , such as browsing history, search history, information on your interaction with our Site or an advertisement. This may include hardware and browser information of your computer or other online device.
• Geolocation data , such as the physical location of the device you use to connect with us online.
• Biometric information , such as fingerprints or voiceprints.
• Sensitive personal information , including health information if we connect with you about our clinical trials or patient support, and Social Security numbers in certain cases.
• Sensory data , such as audio, electronic, visual, or similar information.
• Professional or employment-related information , such as your current or past job history.
• Personal characteristics that are related to classifications legally protected from discrimination, such as race, national origin, ethnicity, marital status, age and gender.
• Inferences drawn from other Personal Information , such as a summary we might make based on your health history, apparent preferences, characteristics, predispositions, or behavior.

III. How Do We Use Your Personally Identifiable Information?

We may use the Personal Information we collect from you for a variety of business and commercial purposes permitted by law, including:

• To provide our products and services;
• To provide you with information about our products and services;
• To communicate with you, including for research purposes, in response to your inquiries, and to fulfill your requests;
• To improve the content of the Site, including to customize the Site to your preferences;
• For our data analysis, product development, and marketing and research purposes;
• To diagnose problems with our server or administer our Site;
• To prevent fraud, including by confirming your identity;
• To maintain and upgrade the security of any data or information collected;
• To comply with legal and regulatory obligations and exercise or defend legal claims;
• For risk management and compliance purposes, including to comply with law enforcement and other legal processes;
• For any other purpose you may agree to at or before the time the Personal Information is collected from you.

IV. When We May Disclose Personally Identifiable Information

We may disclose the Personal Information that we collect as follows:

• To a health care provider with respect to a patient who is involved in the care of such patient;
• To our service providers, whom we engage to assist us with technology support, operational support and other forms of assistance, and whom we bind by contract to protect the confidentiality and security of the Personal Information we share with them;
• To any company legally affiliated with Sage, as related to the uses of Personal Information described in Section III above;
• In the event of a proposed or actual reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our company or its assets, to the proposed or actual acquiring party or assignee;
• With respect to Personal Information about your Internet or other similar network activity, to our business partners for purposes of cross-context behavioral advertising, unless you opt out of such sharing. This enables us to deliver digital advertising that is likely to be relevant to you, as described further in the “Online Tracking” section below; and
• As we believe to be appropriate: (i) when required by applicable law, including laws outside your country of residence; (ii) to comply with legal process; (iii) to respond to requests from public and government authorities; (iv) to enforce the terms and conditions for use of the Site, including this Policy; (v) to protect and defend our rights and property; (vi) to protect the interests of Sage or others; and (vii) to permit us to pursue available remedies or limit the damages that we may sustain.

Absent your consent, we will not sell your Personal Information or provide your Personal Information to third parties for their use for their own direct marketing purposes.

V. Online Tracking Information Collection, Use and Sharing

When you use the Site, we may automatically collect some information from the device you use to connect to the Site information such as your Internet protocol (“IP”) address, the URL of the website you just came from, and the browser version your computer is currently using. This Site may also collect information from your computer through cookies, HTTP Logging or other technological means.

Cookies are small bits of information that are stored by your device’s web browser and are classified as identifying files sent to a computer by a web server. Websites read these uniquely identifying files for future access and enable servers to associate devices to user profiles. HTTP Logging consists of transaction files between a web client and server. For detailed information about the specific cookies used on our Site, please see our Cookie Policy (below).

The cookie banner on our Site requires that you decide if and how your device will accept the cookies on our Site, and you may also choose whether to allow cookies on your device by configuring your preferences or options in your browser. Note that if you choose to reject cookies, you may not be able to use certain online products, services or features on the Site. By using the Site, you are deemed to unambiguously agree to its use of any cookies and similar technologies that you do not reject through our Site cookie banner.

The Site also uses third-party analytical tools to help us monitor performance and usage patterns, for example Google Analytics (http://www.google.com/analytics/). Google Analytics uses cookies to collect information about Site visitors in order to provide analytics services based on a user’s visits to sites across the Internet and across other mobile applications. For further information about the collection and use of data through Google Analytics, see http://www.google.com/policies/privacy/partners/. Google offers the ability to opt out from tracking through Google Analytics cookies; to learn about this, visit http://tools.google.com/dlpage/gaoptout.

To opt out of ads on platforms that are targeted to your interests, based on your platform settings, check your mobile device for settings that control ads based on your interactions with the applications on your device. For example, on your iOS device, enable the “Limit Ad Tracking” setting, and on your Android device, enable the “Opt out of Ads Personalization” setting.

Some browsers may transmit “Do-Not-Track” signals to the websites with which the user communicates. Our Site does not respond to Do-Not-Track signals, but we believe that you should have a choice regarding receiving interest-based ads, which is why we outline above the opt-out choices available to you.

Certain web browsers and other programs may transmit “opt-out” signals, also called a Global Privacy Control (or GPC) signal (we refer to these as “GPC Signals”), to websites with which the browser communicates. In most cases you will need to change your web browser’s settings or add an application to your web browser to enable your browser to send a GPC Signal. Sage will recognize and apply the GPC Signal to inactivate targeting cookies that would involve sharing yourPersonal Information for cross-context behavioral advertising. The GPC Signal will not apply with respect to functional, performance or strictly necessary cookies.

VI. Data Retention; Security

We will retain Personal Information about you for the period necessary to fulfill the purposes outlined in this Policy. We endeavor to use reasonable organizational, technical, and administrative measures to protect the Personal Information we maintain within our organization. However, any device or application connected to the Internet is susceptible to a security breach, despite the level of administrative, technical, and physical safeguards employed. By using our Site, you accept this risk.

VII. Updates to your Personal Information

If you would like to update Personal Information that you have provided to us, you may contact us through one of the means listed in the “How to Contact Us” section at the end of this Policy.

VIII. Site Use Limitations and International Data Transfers

Our Site is not directed to users under the age of 16 and we do not knowingly collect Personal Information online from any person we know to be under the age of 16.

Please be aware that Personal Information we collect and process may be transferred and maintained outside your state, province, country, or other jurisdiction where the privacy laws may not be as protective as those in your location, including the United States. Sage has put in place lawful transfer mechanisms and adequate safeguards, in accordance with applicable legal requirements, to protect your Personal Information.

IX. Links to Other Websites

Our Site may provide links to third-party websites. When you click on one of these links, you will be accessing content that is not subject to this Policy. We are not responsible for the information-collection practices of the other websites that you visit, and advise you to review their privacy policies before you provide them with any Personal Information.

X. Rights You May Have Regarding Your Personal Information.

Depending on the laws of the jurisdiction in which you reside, you may have one or more of the following rights with respect to some or all of your Personal Information:

• To request a description of (i) the categories of Personal Information we have collected about you, (ii) the categories of sources for the Personal Information we have collected about you, (iii) our business or commercial purpose for collecting that Personal Information, and (iv) the categories of third parties (excluding service providers) with whom we have shared the Personal Information during the past 12 months);
• To request access to the specific pieces of Personal Information we have collected about you;
• To request that we correct your Personal Information;
• To request that we delete your Personal Information;
• To opt-out of or request that we limit the processing of your Sensitive Personal Information;
• To opt-out of the sharing of your Personal Information for cross-context behavioral advertising.

If you wish to exercise any of these rights with respect to your Personal Information, please submit a request to us by either:

• Emailing us at: privacy@sagerx.com
• Calling us at our Privacy Rights toll-free number: 866-I-OPT-OUT (866-467-8688) ext. 2187
• Submitting the request through our interactive webform, at: Sage Privacy Portal

We will not discriminate against you for exercising any of the rights to which you are entitled.

You may make a request on your own behalf and, if you are the parent or guardian of a minor child, you also may make a request related to your child’s Personal Information. You may also designate an authorized agent to make a request on your behalf, in which case, you must provide us with a signed declaration stating that you permit that individual to act on your behalf and stating such individual’s full name, address, email address, and phone number. We may, after receiving your request, require additional information from you to verify your or your designated agent’s identity in order to protect your Personal Information from unauthorized disclosure or deletion at the request of someone other than you or your legal representative. We cannot grant your request if we cannot verify your identity or authority to make the request.

Please be aware that we are not obligated to grant all requests that you may make, depending on applicable law. For example, we may deny a request for deletion of Personal Information if we have a legal basis for retaining that information. If your request is denied, you may appeal that decision by contacting our privacy support team via our web form. Within 45 days of receiving your appeal request, we will inform you in writing of any action taken or not taken in response, along with a written explanation of the reasons in support of the response. Depending on the state in which you reside, you may have the right to contact your state attorney general if you have concerns about the result of the appeal or would like to submit a complaint. If this right is available to you, we will provide you with instructions on how to do so.

We endeavor to respond to a verifiable request within 45 days of its receipt. If we require more time (up to 45 additional days), we will inform you of the reason and extension period in writing.

XI. Changes to This Privacy Policy

Sage reserves the right to revise this Policy from time to time. We will alert you when material changes have been made by posting a notice on the home page of the Site, and in any event by indicating the date this Policy was last updated or as otherwise may be required by law. It is recommended that you periodically revisit this Policy to learn of any changes.

XII. How to Contact Us

If you have any questions regarding this Policy or wish to make a complaint about how we process your Personal Information, please contact us at the email address below and we will handle your request as soon as possible. Even if you make a complaint to us, you may always lodge a complaint with the relevant authority in your location.

Email: privacy@sagerx.com

Phone: 866-I-OPT-OUT (866-467-8688) ext. 2187

Postal Mail:
Sage Therapeutics, Inc.
55 Cambridge Parkway
Cambridge, MA 02142 USA
Attn: Data Privacy Team

Cookie Policy

Last Updated: May 19, 2025

Our website uses cookies and similar technology. A cookie is a small file of letters and numbers that our website places on your computer, or other equipment which you use to access our website. These cookies allow us to distinguish you from other users of our website.

You can read more about cookies and how to recognize them at www.aboutcookies.org.

Cookies perform many functions, such as allowing you to navigate between pages efficiently, remembering your preferences, and generally improving the user experience. They can also help to ensure that advertising that you see online is more relevant to you and your interests.

Your use of our website and your acknowledgement of our cookie policy indicates your consent to the cookies described in this policy. Please see "How you can control cookies" below for more information on how to withdraw your consent at any time.

Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.