Effective Date: 8/31/26 Last Updated: 9/1/26
Decoy Therapeutics, Inc. (“Decoy Therapeutics,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at https://decoytx.com and any related subdomains, including our investor relations pages (collectively, the “Site”).
Please read this Privacy Policy carefully. By accessing or using the Site, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Site.
1. Scope
This Privacy Policy applies to information collected through the Site. It does not apply to information collected offline, through any other website operated by a third party, or through any third-party service that may link to or be accessible from the Site.
This Privacy Policy does not create any contractual or other legal rights in or on behalf of any party beyond those otherwise available under applicable law.
2. Information We Collect
We collect information about you in the following ways:
2.1 Information You Provide to Us
We collect personal information that you voluntarily provide when you:
- Complete a contact or inquiry form;
- Subscribe to news, updates, or investor communications;
- Correspond with us by email or other means;
- Apply for a position or otherwise submit information to us.
This information may include your name, email address, telephone number, employer or organization, job title, mailing address, and any other information you choose to provide in your message or submission.
2.2 Information Collected Automatically
When you visit the Site, we and our service providers may automatically collect certain technical information, including:
- Your IP address and approximate geographic location;
- Browser type, device type, and operating system;
- Referring and exit pages, and pages viewed on the Site;
- Date and time of your visit and time spent on pages;
- Clickstream data and other diagnostic information.
We collect this information using cookies and similar technologies (see Section 4).
2.3 Information From Third Parties
We may receive information about you from third-party service providers, such as analytics providers, hosting providers, or social media platforms (for example, when you interact with our LinkedIn page), in accordance with those third parties’ own privacy policies.
3. How We Use Your Information
We use the information we collect for purposes including to:
- Respond to your inquiries and provide requested information;
- Send news, updates, and investor communications where permitted;
- Operate, maintain, secure, and improve the Site;
- Analyze usage trends and measure the effectiveness of our content;
- Comply with legal obligations and enforce our terms and policies;
- Detect, prevent, and address technical issues, fraud, or security incidents;
- Consider and process employment applications, where applicable.
Where required by law, we will obtain your consent before processing your personal information, and you may withdraw that consent at any time.
4. Cookies and Similar Technologies
The Site uses cookies and similar tracking technologies to function properly, remember your preferences, and understand how visitors use the Site. Cookies are small data files stored on your device.
We may use the following categories of cookies:
- Strictly necessary cookies, required for the Site to operate;
- Performance and analytics cookies, which help us understand how the Site is used (for example, through analytics services);
- Functionality cookies, which remember choices you make.
You can control or disable cookies through your browser settings. If you disable cookies, some features of the Site may not function properly. For more information, please see our Cookies Policy.
5. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
- Service Providers. With third parties that perform services on our behalf, such as website hosting, analytics, email delivery, and IT support. These providers are authorized to use your information only as necessary to provide services to us.
- Legal Requirements. When required to comply with applicable law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Decoy Therapeutics, our users, or others.
- Business Transfers. In connection with, or during negotiations of, any merger, acquisition, financing, reorganization, or sale of assets, or in the event of insolvency, in which personal information may be transferred as a business asset.
- With Your Consent. For any other purpose disclosed to you at the time we collect the information or with your consent.
6. Third-Party Websites and Services
The Site may contain links to third-party websites and services, including our investor relations provider, social media platforms, and the websites of partners and collaborators. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party site you visit.
7. Data Security
We maintain reasonable administrative, technical, and physical safeguards designed to protect your personal information. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.
8. Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. When personal information is no longer needed, we take reasonable steps to delete or anonymize it.
9. Your Privacy Rights
9.1 EEA, UK, and Similar Jurisdictions (GDPR)
If you are located in the European Economic Area, the United Kingdom, or a jurisdiction with comparable data protection laws, you may have the right to:
- Access the personal information we hold about you;
- Request correction of inaccurate or incomplete information;
- Request deletion of your personal information;
- Restrict or object to certain processing;
- Request data portability;
- Withdraw consent where processing is based on consent.
We process personal information on the following legal bases: your consent, performance of a contract, compliance with a legal obligation, and our legitimate interests in operating and improving our business and the Site.
9.2 California Residents (CCPA/CPRA)
If you are a California resident, you may have the right to:
- Know what personal information we collect, use, and disclose;
- Request access to or deletion of your personal information;
- Correct inaccurate personal information;
- Opt out of the “sale” or “sharing” of personal information (note: we do not sell personal information);
- Not be discriminated against for exercising your rights.
9.3 Exercising Your Rights
To exercise any of these rights, please contact us using the details in Section 13. We may need to verify your identity before responding. You may also designate an authorized agent to make a request on your behalf where permitted by law.
10. International Data Transfers
Decoy Therapeutics is based in the United States. If you access the Site from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction. Where required, we implement appropriate safeguards for such transfers.
11. Children’s Privacy
The Site is not directed to children under the age of 16, and we do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will take appropriate steps to delete it.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date above. Material changes will be indicated as appropriate. Your continued use of the Site after any changes constitutes your acceptance of the revised Privacy Policy.
13. Contact Us
If you have questions or concerns about this Privacy Policy or our privacy practices, or if you wish to exercise your privacy rights, please contact us at:
Decoy Therapeutics, Inc. Attn: Privacy Cambridge Innovation Center (CIC), One Broadway, 14th Floor, Cambridge, MA 02142 Email: info@decoytx.com Website: https://decoytx.com/contact-us/
