Privacy Policy - Atavistik Bio

Last Updated: September 17, 2026

Atavistik Bio, Inc. and its affiliates (“Atavistik,” “we,” “our,” and/or “us”) values the privacy of individuals who use our website, www.atavistikbio.com (our “Site”). This privacy policy (the “Privacy Policy”) explains how we collect, use, and disclose personal information from users of our Site. By using our Site, you agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy. Beyond this Privacy Policy, your use of our Site is also subject to our Terms of Service.

Information We Collect

We may collect a variety of information from or about you or your devices from various sources, as described below.

A. Information You Provide to Us

Communications. If you contact us directly, we may receive personal information about you. For example, when you email us, we will receive your email address and any additional information you choose to provide.

Careers. If you decide to apply for a job with us, you may submit your contact information and your resume online. We will collect the information you choose to provide us as part of your job application, such as your contact information, current employment information, and other information you choose to submit with your application and on your resume. If you apply for a job with us through a third-party platform (such as Lever), we will collect any information you make available to us through such third-party platform.

B. Information We Collect When You Use Our Site

Location Information. When you use our Site, we may infer your general location information. For example, your IP address may indicate your general geographic region.

Device Information. We receive information about the device and software you use to access our Site, such as your internet protocol (IP) address, web browser type, operating system version, and device identifiers.

Usage Information. To help us understand how you use our Site and to help us improve it, we automatically receive information about your interactions with our Site, such as the pages or other content you view and the times of your visit.

Analytics Partners. We use analytics services such as Google Analytics to collect and process certain analytics data. These services may also collect information about your use of other websites, apps, and online resources. You can learn about Google’s practices by going to https://www.google.com/policies/privacy/partners/ and opt out of them by downloading the Google Analytics Opt-out Browser Add-on, available at https://tools.google.com/dlpage/gaoptout.

Information from Cookies and Similar Technologies. We and our third-party partners may collect information using cookies, pixel tags, or similar technologies. Our third-party partners, such as analytics and advertising partners, may use these technologies to collect information about your online activities over time and across different services. Cookies are small text files containing a string of alphanumeric characters. We may use both session cookies and persistent cookies. A session cookie disappears after you close your browser. A persistent cookie remains after you close your browser and may be used by your browser on subsequent visits to our Site.

Please review your web browser’s “Help” file to learn the proper way to modify your cookie settings. Please note that if you delete or choose not to accept cookies from the Site, you may not be able to utilize the features of the Site to its fullest potential.

Cookies. Upon your acceptance of cookie from our websites, we may collect information about your visits to the Site without you actively re-submitting acceptance of cookies. In some countries, we are not permitted to send cookies to the browser of a user without the prior consent of the affected user. In this case, we will seek such consent. The remainder of this section assumes that either the use of cookies is not restricted by applicable law or if it is restricted the individual has explicitly consented to the use of cookies. A cookie is a small text file that is placed on your hard disk by a web page server and that helps the Site to recall your specific information on subsequent visits. The use of cookies simplifies the process of delivering relevant content, eases Site navigation, and provides other similar benefits to users of the Site. When you return to the Site, the information you previously provided can be retrieved, so you can easily use the Site’s features.

You have the ability to accept or decline the use of cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. If you choose to decline cookies, you may not be able to fully experience the features of the Site.

HOW WE USE THE INFORMATION WE COLLECT

We may use the personal information we collect:

To provide, maintain, debug, improve, and enhance our Site;
To understand and analyze how you use our Site, and develop new products, services, features, and functionalities;
To understand and analyze usage patterns;
To communicate with you, provide you with updates and other information relating to our Site, provide information that you request, respond to comments and questions, and otherwise provide customer support;
To find and prevent fraud, and respond to trust and safety issues that may arise;
For compliance purposes, including enforcing our Terms of Service or other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency; and
For other purposes for which we provide specific notice at the time the information is collected.

HOW WE SHARE THE INFORMATION WE COLLECT

We do not share or otherwise disclose personal information we collect from you except as described below or otherwise disclosed to you at the time of the collection.

Affiliates. We may share any information we receive with our affiliates for any of the purposes described in this Privacy Policy.

Vendors and Service Providers. We may share any information we receive with vendors and service providers retained in connection with the provision of our Site.

Marketing. We do not rent, sell, or share personal information about you with nonaffiliated companies for their direct marketing purposes unless we have your permission.

As Required by Law and Similar Disclosures. We may access, preserve, and disclose your information if we believe doing so is required or appropriate to: (i) comply with law enforcement requests and legal process, such as a court order or subpoena; (ii) respond to your requests; or (iii) protect your, our, or others’ rights, property, or safety.

Merger, Sale, or Other Asset Transfers. We may disclose and transfer your information to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company, or we sell, liquidate, or transfer all or a portion of our business or assets.

Consent. We may also disclose personal information from or about you or your devices with your permission.

Your Choices

Do Not Track. There is no accepted standard on how to respond to Do Not Track signals, and we do not respond to such signals.

The Site provides you with the opportunity to choose to receive updates about Atavistik and any information we may want you to know about. You may be added to Atavistik’s mailing lists and signed up for certain notifications from Atavistik when you submit your contact information through the Site. If you would like to be removed from this list and/or opt out of these notifications, please unsubscribe using the instructions in the email or call or write us at the physical address or email address listed below. Please allow five (5) business days for processing of your opt-out request.

If you need to correct or update your contact information, or you no longer desire our services, you can do so by contacting us using the contact information set forth below.

If you choose not to provide us with the information we collect, some features of our Site may not work as intended.

Third Parties

Our Site may contain links to other websites, products, or services that we do not own or operate (“Third-Party Services”). We are not responsible for the privacy practices of these Third-Party Services. Please be aware that this Privacy Policy does not apply to your activities on these Third-Party Services or any information you disclose to these Third-Party Services. We encourage you to read the privacy policies of these Third-Party Services.

Security

We make reasonable efforts to protect your personal information by using physical and electronic safeguards designed to improve the security of the personal information we maintain. However, as no electronic transmission or storage of information can be entirely secure, we can make no guarantees as to the security or privacy of your personal information.

International Visitors

Our Site is hosted in the United States (“U.S.”) and intended for visitors located within the U.S. If you choose to use our Site from the European Union or other regions of the world with laws governing data collection and use that may differ from U.S. law, then please note that you are transferring your information outside of those regions to the U.S. for storage and processing. Also, we may transfer your information from the U.S. to other countries or regions in connection with storage and processing of data, fulfilling your requests, and operating the Site. By providing any information, including personal information, on or to our Site, you consent to such transfer, storage, and processing.

Your rights

If you reside in the EU, EEA, or Switzerland, you may request that we take the following actions in relation to your personal data according to the GDPR:

Access. Provide you with information about our processing of your personal data and give you access to your personal data
Correct. Update or correct inaccuracies in your personal data
Delete. Delete your personal data
Transfer. Transfer a machine-readable copy of your personal data to you or a third party of your choice
Restrict. Restrict the processing of your personal data
Data portability. You have the right to request for the receipt or the transfer to another organization, in a machine-readable form, of your personal data
Object. Object to our legitimate interests as the basis of our processing of your personal data
Right to withdraw consent. When you have given your explicit consent for the processing of your data, you can withdraw it at any time without justification
You also have the right to lodge a complaint with your local Data Protection Authority or to the Data Protection Authority where the alleged infringement took place.

If you reside in the EU, EEA, or Switzerland and would like to submit a complaint about our use of your personal data or response to your requests regarding your personal data, you may contact our data protection officer privacy team (info@atavistikbio.com).

If you reside in California, you may see our California Consumer Privacy Act Notice, below here.

California

Pursuant to the California Consumer Privacy Act of 2018 (“CCPA”), we may collect the following categories of personal information:

Personal information, as defined in the California safeguards law, such as contact and financial information
Characteristics of protected classifications under California or federal law, such as age, gender, medical conditions, and marital status
Identifiers, such as name and government-issued identifier (eg, Social Security number)
Commercial information, such as transaction information and purchase history
Internet or network activity information, such as browsing history and interactions with our websites
Geolocation data, such as device location
Audio, electronic, visual and similar information, such as call and video recordings
Professional or employment-related information, such as work history and prior employer
Education information subject to the federal Family Educational Rights and Privacy Act, such as student records and directory information

Inferences drawn from any of the personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics.

We collect this personal information directly from California residents themselves, as well as from joint marketing partners, public databases, providers of demographic data, publications, professional organizations, social media platforms, people with whom you are connected on social media platforms, caregivers, companies and other third parties that help us screen and onboard individuals for hiring purposes, and other third parties. For more information on our social media practices, please see here.

We may use this personal information to operate, manage, and maintain our business, to provide our products and services, for our employment purposes, and to otherwise accomplish our business purposes and objectives. Our business purposes and objectives include, for example, developing, improving, repairing, and maintaining our products and services; personalizing, advertising, and marketing our products and services; conducting research, analytics, and data analysis; maintaining our facilities and infrastructure; undertaking quality and safety assurance measures; conducting risk and security controls and monitoring; detecting and preventing fraud; performing identity verification; performing accounting, audit, and other internal functions, such as internal investigations; complying with law, legal process, and internal policies; maintaining records; and exercising and defending legal claims.

We disclosed the following personal information to our affiliates and third parties, such as our service providers, for our operational business purposes:

Identifiers, such as name and government-issued identifier (eg, Social Security number)
Personal information, as defined in the California safeguards law, such as contact and financial information
Characteristics of protected classifications under California or federal law, such as age, gender, medical conditions, and marital status
Commercial information, such as transaction information and purchase history
Internet or network activity information, such as browsing history and interactions with our websites
Geolocation data, such as device location
Audio, electronic, visual and similar information, such as call and video recordings
Professional or employment-related information, such as work history and prior employer
Education information subject to the federal Family Educational Rights and Privacy Act, such as student records and directory information
Inferences drawn from any of the personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics
We have not “sold” personal information for purposes of the CCPA.

For purposes of this CCPA Notice, “sold” or “sale” means the disclosure of personal information for monetary or other valuable consideration but does not include, for example, the transfer of personal information as an asset that is part of a merger, bankruptcy, or other disposition of all or any portion of our business.

If you are a California resident, you may request that we:

Disclose to you the following information covering the 12 months preceding your request:
The categories of personal information we collected about you and the categories of sources from which we collected such personal information
The specific pieces of personal information we collected about you
The business or commercial purpose for collecting personal information about you
The categories of personal information about you that we otherwise shared or disclosed and the categories of third parties with whom we shared or to whom we disclosed such personal information
Delete personal information we collected from you

To make a request for the disclosures or deletion described above, please contact us at info@atavistikbio.com. In some instances, we may decline to honor your request where an exception applies, such as where the disclosure of personal information would adversely affect the rights and freedoms of another California resident.

You have the right to be free from unlawful discrimination for exercising your rights under the CCPA.

Children’s Privacy

We do not knowingly collect, maintain, or use personal information from children under 13 years of age, and no parts of our Site are directed to children. If you learn that a child has provided us with personal information in violation of this Privacy Policy, please alert us info@atavistikbio.com.

Changes to this Privacy Policy

We will post any adjustments to the Privacy Policy on this page, and the revised version will be effective when it is posted. If we materially change the ways in which we use or share personal information previously collected from you through the Site, we will attempt to notify you through the Site, by email, or by other means.

Contact Information

If you have any questions, comments, or concerns about our processing activities, please email us at info@atavistikbio.com or write to us at:

Atavistik Bio, Inc.
101 Cambridgepark Drive, 3rd floor
Cambridge MA 02140