Genista Biosciences Privacy Policy

Last Updated: 10/2/2025

This privacy policy (“Privacy Policy”) applies to your access and use of our website located at http://www.genistabio.com/ (the “Site”) made available by Genista Biosciences Inc., a Delaware corporation (“Genista,” “us” or “our” throughout this Privacy Policy), as well as any of its subdomains and any services, tools or features offered through the Site, including our customer portal (collectively, the “Services”). This Privacy Policy describes how Genista collects, uses and discloses information that we obtain about you.

By using the Services and/or by clicking a box indicating your acceptance of this Privacy Policy, you agree to the terms of this Privacy Policy, and that your personal information will be handled as described in this Privacy Policy, and consent to the privacy practices described in this Privacy Policy. If you do not agree with our policies and practices as described in this Privacy Policy, do not use the Services.

If the individual accepting this Privacy Policy is accepting on his or her own behalf, such individual shall be referred to throughout this Privacy Policy as “you” or “Customer.” If the individual accepting this Agreement is accepting on behalf of a company or other legal entity, such individual hereby represents and warrants that they have the authority to bind such entity to this Privacy Policy, in which case the terms “you” or “Customer” as used throughout this Privacy Policy shall refer to such entity. If the individual accepting this Privacy Policy does not have such authority or does not agree with the terms of this Privacy Policy, such individual must not accept this Privacy Policy and may not use the Services.

Please read this Privacy Policy carefully to understand our policies and practices regarding your information and how we will treat it. This Privacy Policy only applies to information collected on or through the Services and is not intended to fully describe the privacy policies of Genista. This Privacy Policy does not apply to information collected offline. It also does not apply to information collected by or provided to any third party, including any web form, application or other content (including advertising) that may link to or be accessible from or through the Services, or any information (including Personal Information as defined below) that a Customer inputs into the Services relating to persons other than Customer and that were collected by Customer. In such a case, Customer’s privacy policy applies to the use of such information and any inquiries regarding such information should be directed to the Customer.

You may have additional rights if you are a resident of California. Please see the California Privacy Notice section below for more information.

Types of Personal Information; Methods of Collection

We collect several types of information from and about users of the Services directly from you when you provide it to us or third parties authorized to share such information with us, as well as automatically through your use of the Services.

When you use the Services, we may collect or you may provide us with information, including Personal Information. “Personal Information” means information by which you may be personally identified or that is protected as personal information or personal data or similar term under applicable law, including your name, e-mail address, mailing address, mobile phone number, company name, and social media profile information. You may directly provide us with your Personal Information in the following ways:

• Website Forms. You may provide us with your Personal Information by filling out forms on the Site or a third-party website. Such information you provide may include your name, email address, mailing address, telephone number, company name and title. Such information may be used to contact you about the Services.‍
• Job Applications. We may provide a feature that allows you to submit a job application at our Site. In such a case, we will collect your name, address, email address, telephone number, and information about your employment history and educational background, and other information you may include in a resume that you submit to us.
• ‍Account Registration. You may provide us with your Personal Information in connection with the account registration process. Such information you provide may include your name, company, title, email address, mailing address, telephone number, username and password. Such information may be used to establish your account to use the Services.‍
• Email Communications or Newsletters. You may provide us with your name and email address in order to receive newsletters or other communications. We may collect information from you through records and copies of correspondence with you, including email address. You may opt-out of these marketing communications at any time as described below.
• ‍Feedback. You may provide us with your Personal Information (including contact information) when you provide feedback about our Services, including during live feedback sessions via video or audio-conferencing platforms, which may be recorded by Genista and you hereby consent to such recording.

Automatically Collected Information

When you visit the Site, we may automatically receive and record certain information from your computer, web browser and/or mobile device, including without limitation log data, your domain, IP address, or other device address or ID, web browser and/or device type, operating system, hardware and software settings and configurations, the pages you view on the Site, your actions on the Site, and the dates and times that you visit, access, or use the Site (“Automatically Collected Information”).

Third parties such as advertising networks, analytics providers and widget providers may collect information about your online activities over time and across different websites when you access or use our Site. Your browser settings may also allow you to transmit a “Do Not Track” signal when you visit various websites. Like many websites, our website is not designed to respond to

“Do Not Track” signals received from browsers. You may, however, disable certain cookies as discussed in the Cookies Information section (e.g., by declining cookies), but such disabling may impair use of the Site. To learn more about “Do Not Track” signals, you can visit http://www.allaboutdnt.com/.

Cookies Information

When you use the Site, we may send one or more cookies (which are small text files containing a string of alphanumeric characters) to your computer or mobile device, to track information about your use of the Site, help analyze our web page flow, customize our content, measure promotional effectiveness, and promote trust and safety. We do not currently use targeting or tracking cookies on the Site but may use certain cookies to personalize your experience or obtain analytics from your use of the Site. By using the Site, you consent to the use of such cookies and the collection of your Personal Information by us and our third-party service providers for this purpose. You can opt-out of non-essential cookies using the manage preferences settings on the cookie banner.

Uses of Personal Information

We use your information, including Personal Information, for the following purposes:

• We use your Personal Information to establish your account to use the Services as well as to establish and maintain the accounts of your authorized users in connection with the Services and to provide, maintain and improve the Site and Services.
• We use information about your use of the Services to understand and analyze the usage trends and preferences of our users, to improve the Services and to improve fraud detection and information security.
• We may use your Personal Information to process any application for a job with us and if you are hired in connection with your employment with us.
• We may use your e-mail address or other Personal Information to contact you for administrative purposes such as customer service and/or to send you our newsletters or other promotional materials. Generally, you can opt-out of receiving promotional communications by following unsubscribe links provided in the messages, or by contacting us directly at privacy@genistabio.com. Although your changes are reflected promptly in active user databases, we may retain all information you submit for a variety of purposes, including backups and archiving, prevention of fraud and abuse and analytics.
• We may use information collected from cookies or Automatically Collected Information through the Site to: (a) personalize our Services; (b) better understand how users access and use our Services; (c) monitor and analyze the effectiveness of the Services; (d) monitor aggregate usage metrics such as total number of visitors and pages viewed; and (e) perform research and analytics, including to analyze and report on usage and performance of the Services.
• We may use your Personal Information to: (a) detect, investigate, and prevent activities on our Services that conflict with applicable terms of service, including any terms or conditions applicable to the use of the Services, could be fraudulent or violate copyright or other rules, or that may be otherwise illegal, (b) comply with legal requirements, (c) defend or exercise legal claims, (d) respond to legal process or law enforcement or governmental investigations or requests, and (e) protect our rights and the rights and safety of our users and others.‍

When We Disclose Information

We may disclose your information, including Personal Information, as follows:

• We may share your information, including Personal Information, where you have provided consent as described at the time of consent.
• We may disclose the Personal Information we collect from you to fulfill the purpose for which you provide it or for any other purpose disclosed by us when you provide the information.
• We may disclose the information we collect from you to our affiliates or subsidiaries solely for the purpose of providing the Site and Services to you; however, if we do so, their use and disclosure of your Personal Information will be maintained by such affiliates and subsidiaries in accordance with this Privacy Policy.
• We may disclose your Personal Information if required to do so by law or in the good-faith belief that such action is necessary to take precautions against liability; to protect Genista from fraudulent, abusive, or unlawful uses or activity; to protect the security or integrity of the Services; to investigate and defend ourselves against any third party claims or allegations; to assist government enforcement agencies or respond to law enforcement requests; to comply with state and federal laws,; or to respond to legal process or to a court order, judicial or other government subpoena or warrant.
• We may disclose the Personal Information we collect from you where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of this Privacy Policy or any applicable terms of service, including any terms or conditions applicable to the use of the Site or Services, or as evidence in litigation in which we are involved.
• We may disclose the Personal Information we collect from you to third party vendors, service providers, contractors, or agents who perform functions on our behalf, including the provision of the Site or Services.
• We may disclose the Personal Information we collect from you to an actual or potential buyer or other successor (and their advisors) in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Genista’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Information held by Genista is among the assets transferred.

We will not sell or share (as such terms are commonly defined by applicable US privacy and data protection laws) Personal Information with third parties without your consent.

You may decline to share certain information with us, in which case we may not be able to provide to you some of the features and functionalities of the Services.

Third-Party Links

The Services may contain links to third party websites and applications. Any access to and use of such linked websites or applications is not governed by this Privacy Policy, but instead is governed by the privacy policies of those third-party websites or applications. We are not responsible for the information practices of such third parties. Please read such third parties’ privacy policies to understand their privacy practices.

Data Security

We have implemented measures designed to protect your Personal Information from loss, misuse, and unauthorized access, disclosure, alteration and destruction; however, no security measures are perfect or impenetrable, so we cannot ensure or warrant the security of any information you transmit to us through the Services, and you do so at your own risk. We also cannot guarantee that such information may not be accessed, disclosed, altered or destroyed by breach of any of our safeguards. We are not responsible for circumvention of any privacy settings or security measures contained in the Services.

Retention

We retain Personal Information as long as it is reasonably necessary and relevant for the purposes for which it was collected or our operations, and/or to comply with the law, prevent fraud, collect any fees owed, resolve disputes, troubleshoot problems, assist with any investigation, or enforce any applicable terms of service or other agreements.

Visitors from Outside the United States

The Services are controlled and operated by Genista in the United States, which may have fewer protections than your jurisdiction of residence. If you choose to access the Services from outside the United States, you acknowledge that you will be transferring your information, including Personal Information, outside of those regions to the United States for storage and processing, as necessary to allow you to use the Services.

Children’s Privacy

The Services are not intended for children under 16 years of age. We do not knowingly collect information from persons under 16 years of age, and no part of the Services are directed to persons under 16 years of age. If you are under 16 years of age, do not use or access the Services at any time or in any manner. If we learn that information has been collected through the Services from persons under 16 years of age and without verifiable parental consent, we will take the appropriate steps to delete this information. If you are a parent or guardian and discover that your child under

16 years of age has provided us with information, please alert us at privacy@genistabio.com to request that we delete the information from our systems.

California Privacy Notice

We provide this California Privacy Notice under the California Consumer Privacy Act (“CCPA”). This notice applies only to Personal Information that we collect from California residents in our capacity as a business and not Personal Information that we process as a service provider to our Customers.

Notice at Collection

We collect (and have collected in the past 12 months) the following categories of Personal Information for the follow purposes:

• Identifiers such as name, address, email address, phone number, general contact information, company name, payment information, internet protocol (IP) address, and device identifiers. We collect this information to provide and improve the Services, communicate with you, for marketing and promotion, processing job applications and other purposes described in the section entitled Uses of Personal Information.
• Personal information described in California Civil Code Section 1798.80(e) such as the identifiers listed above. We collect this information to provide and improve the Services, communicate with you, for marketing and promotion, processing job applications and other purposes described in the section entitled Uses of Personal Information.
• Commercial information such as the products and services you have purchased, and credit card and other payment information. We collect this information to provide and improve the Services, processing transactions and other purposes described in the section entitled Uses of Personal Information.
• Education and employment information you have provided in submitting a job application. We use this information in connection with processing your job application and your employment if you are hired, and other purposes described in the section entitled Uses of Personal Information.
• Internet or other electronic network activity information such as browsing history, search history, and information regarding a consumer’s interaction with an internet website application or advertisement. We collect this information to provide and improve the Services, for marketing and promotion and other purposes described in the section entitled Uses of Personal Information.

We do not sell Personal Information or share Personal Information for cross-context behavioral advertising or sell or share Personal Information of children under 16. We also do not collect, use or disclose sensitive Personal Information for purposes of inferring characteristics about you.

During the past 12 months, we have disclosed Personal Information to third parties such as service providers for the business purposes of providing services to us and to analytics providers for purposes of analyzing the use of our Site and Services and to other categories of third parties as described in When We Disclose Information.

Your California Privacy Rights

If you are a resident of California, you may have the following rights with respect to your Personal Information:

1. Right to Know
   
   You may have the right to request that we disclose Personal Information that we have collected, sold, or shared about you, including:
   
   1. The categories of Personal Information;
   2. The categories of sources from which the Personal Information is collected;
   3. The business or commercial purpose for collecting, selling, or sharing Personal Information;
   4. The categories of third parties to whom we disclose Personal Information; and
   5. The specific pieces of information we have collected about you.
2. Right to Correction
   
   You may have the right to request that we correct inaccurate Personal Information that we maintain about you, taking into account the nature of the Personal Information and the purposes of the processing of the Personal Information.
3. Right to Deletion
   
   You may have a right to request that we delete any Personal Information about you that we have collected directly from you, subject to certain exceptions.
4. Right to Opt-Out of Sale/Sharing
   
   We do not offer a right to opt-out of the sale or sharing of your Personal Information because, within the meaning of the CCPA, we do not sell or share and have not sold or share Personal Information identified in the above categories to any third party.
5. Right to Limit Use and Disclosure of Sensitive Personal Information
   
   We do not offer a right to limit the use or disclosure of sensitive Personal Information because, within the meaning of the CCPA, we do not use sensitive Personal Information for inferring characteristics.
6. Right to Non-Discrimination for Exercise of a California Privacy Right
   
   You may have a right to not receive discriminatory treatment by us for the exercise of privacy rights conferred by the CCPA, including an employee’s, applicant’s, or independent contractor’s right not to be retaliated against for the exercise of their CCPA rights

Please see the section entitled How to Exercise Rights for information on making a request under the CCPA.

California Shine the Light Privacy Rights: We do not disclose your Personal Information to unaffiliated third parties for those third parties’ direct marketing purposes unless you affirmatively agree to such disclosure. If you have agreed to such disclosures, you may may make a request for information regarding such disclosures, if any, once a year by emailing us at privacy@genistabio.com.

How to Exercise Your Rights

You can make a request to exercise any rights you may have with respect to your Personal Information be emailing us at privacy@genistabio.com. As required and to the extent permitted under applicable law, we take steps to verify your identity before granting you access to information or acting on your request to exercise your rights. We may require you to provide information sufficient to allow us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative and to describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. We may limit our response to your exercise of the above rights as permitted under applicable law.

You may also designate an authorized agent to make a request on your behalf. You may make such a designation by providing the agent with written permission to act on your behalf. As permitted by law, we may require additional verification in response to a request even if you choose to use an agent. We may refuse a request if the agent does not provide adequate proof of their authorization.

Changes to Our Privacy Policy:

This Privacy Policy is current as of the “Last Updated” date set forth above. We may change this Privacy Policy from time to time, so please be sure to check back periodically. If we make any changes to this Privacy Policy that materially affect our practices with regard to the Personal Information we have previously collected from you, we may post a banner notification on the Site’s main webpage and will update the “Last Updated” date to reflect these changes. If you continue to use the Services after we have made changes to the Privacy Policy, you are deemed to have accepted such changes. If you do not agree to such changes, you should discontinue use of our Services.

Our Contact Information:

Please contact us with any questions or comments about this Privacy Policy, your Personal Information, our use and disclosure practices, your communication preferences or your consent choices by e-mail at privacy@genistabio.com.