Privacy Policy

2. Information We Collect

Information You Provide Directly

• Contact form submissions: first name, last name, email address, organization, inquiry type (Assay Development, Technology Partnership, Investor Inquiry, Media/Press, Other), and optional message content. The contact form is delivered through HubSpot's V2 form embed; submissions route to our HubSpot CRM.
• Email correspondence: content and metadata of messages you send to us
• Business inquiries: information provided during sales conversations or service requests

Information Collected Automatically

• Device and browser data: device type, operating system, browser type and version, screen resolution
• Network data: IP address, approximate geographic location (city/region level)
• Usage data: pages visited, time spent on pages, referring URL (collected via Vercel Analytics — see Section 5 for details on the privacy-respecting nature of this collection)
• Cookies and similar technologies: as described in Section 4 below

Information From Third-Party Platforms

When you submit our contact form, HubSpot may collect data through its own tracking technologies (see Section 5). When our Site is loaded, Cloudflare may collect limited technical data to deliver bot protection and security services.

4. Cookies & Tracking Technologies

We use cookies and similar technologies to operate, analyze, and improve our Site. We use a cookie consent banner (powered by vanilla-cookieconsent) to give you granular control over which categories load. The table below describes the categories of cookies we use.

Managing Your Cookie Preferences

• On our Site: click the "Cookie Preferences" link in the footer to revisit the consent banner and change your selection at any time. You may also clear your cookie preference cookie via your browser to trigger a fresh consent prompt.
• Browser settings: Most browsers allow you to block or delete cookies through their settings menu
• HubSpot: HubSpot's tracking is documented at HubSpot Privacy Policy. You can opt out of HubSpot's marketing cookies via their preference center.

6. How We Share Your Information

We may share personal information with:

• Service providers: hosting (Vercel), DNS & security (Cloudflare), CRM & form delivery (HubSpot), analytics (Vercel), and other vendors who help us operate the Site
• Legal requirements: when required by law, court order, subpoena, or government request
• Business transfers: in connection with a merger, acquisition, or sale of assets, in which case you will be notified
• With your consent: when you explicitly authorize disclosure

8. Your Privacy Rights

All Visitors

Regardless of your location, you may:

• Request access to the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Opt out of marketing communications (every email we send includes an unsubscribe link)

European Economic Area, UK & Switzerland (GDPR)

If you are in the EEA, UK, or Switzerland, you have additional rights under the General Data Protection Regulation:

• Lawful basis: We process your data based on legitimate interest (site analytics, security), consent (analytics cookies, marketing communications), and contractual necessity (responding to inquiries you submit via the contact form)
• Right to restrict processing of your personal data
• Right to data portability in a structured, machine-readable format
• Right to object to processing based on legitimate interest
• Right to withdraw consent at any time without affecting prior processing
• International transfers: Data may be transferred to the United States (where Signal Bioscience operates and where our service providers are headquartered). We rely on Standard Contractual Clauses and platform-specific safeguards to protect data in transit
• Supervisory authority: You have the right to lodge a complaint with your local data protection authority

We will respond to GDPR requests within 30 days.

California (CCPA/CPRA)

If you are a California resident, you have rights under the California Consumer Privacy Act and California Privacy Rights Act:

• Right to know what personal information we collect, use, and disclose
• Right to delete personal information we hold about you
• Right to correct inaccurate personal information
• Right to opt out of sale or sharing of personal information
• Right to non-discrimination for exercising your privacy rights

Categories of data collected in the past 12 months: Identifiers (name, email, IP address), internet activity (browsing, page-view, interaction data), professional information (organization, inquiry type), and approximate geolocation data (derived from IP).

We will respond to CCPA requests within 45 days.

Other U.S. State Laws

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and other states with comprehensive privacy laws may exercise similar rights to access, correct, delete, and opt out. Contact us using the information below.

How to Exercise Your Rights

To submit a privacy request, email info@signalbioscience.com with "Privacy Request" in the subject line. Include your name, the right you wish to exercise, and enough information for us to verify your identity. We may request additional verification before processing your request.

10. Children's Privacy

Our Site is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us at info@signalbioscience.com and we will promptly delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. The "Last updated" date at the top of this page indicates when the most recent changes were made. Material changes will be communicated through a notice on our Site.