Privacy Policy

1. Introduction

Avenzo Therapeutics, Inc. ("the Company," "we," "us," or "our") operates avenzotxhq.com (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices available to you. It applies to all information collected through the Service and through direct communications with us.

We are an AI-powered oncology drug discovery analytics platform based in San Diego, California. Our core service provides solid-tumor target identification and evidence-ranking analysis to oncology research teams. This Policy reflects the nature of that work and the professionals who use our platform.

We are based at 10578 Science Center Drive, Suite 200, San Diego, CA 92121 and can be reached at [email protected].

2. Information We Collect

2.1 Information You Provide

Avenzo serves oncology researchers, computational biologists, and discovery team leaders. When you interact with us, we collect:

• Professional contact details (name, work email, phone) when you fill out our early-access request form or contact us directly;
• Organizational context you choose to share (employer type, role, tumor-type focus, research program description);
• Account credentials if you register for the research workspace (email address, password hash);
• Query inputs and workflow parameters you submit through the platform when using the target-ranking service;
• The content of any messages or feedback you send us.

We do not ask for or collect clinical patient data, protected health information, or personally identifiable patient records. Our platform processes research-context data submitted by scientists, not patient-level clinical data.

2.2 Information Collected Automatically

When you visit avenzotxhq.com, we automatically collect limited technical information:

• IP address and approximate location (city/region level);
• Browser type, operating system, device class;
• Pages visited, referring URLs, time on page;
• Cookie and similar identifiers (see Section 5).

2.3 We Do Not Knowingly Collect Children's Data

avenzotxhq.com is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact [email protected] and we will delete it.

3. How We Use Information

Avenzo uses information to operate and improve a specialized oncology research analytics platform. Specifically, we use the information we collect to:

• Evaluate and respond to early-access requests from oncology research programs;
• Provision and operate the target-ranking workspace for active research partners;
• Deliver evidence reports, ranked target assessments, and analysis outputs to research teams;
• Improve the evidence-scoring model and platform capabilities based on aggregate usage patterns;
• Send service updates, analysis completion notifications, and (with your consent where required) information about platform developments;
• Detect, investigate, and prevent unauthorized access or abuse;
• Comply with legal obligations.

We do not use research query inputs or analysis data submitted through the platform to train machine learning models without explicit written agreement from the submitting organization. We do not sell personal information for monetary value. Where applicable state law treats certain advertising arrangements as a "sale" or "share," see Section 9 below.

4. Sharing of Information

We share personal information only with:

• Service providers acting on our behalf (such as hosting infrastructure, email delivery, and analytics) under contractual confidentiality terms that prohibit them from using information for their own purposes;
• Authorities, when required by law or necessary to protect rights, safety, or property;
• A successor entity in the event of a merger, acquisition, or asset sale, subject to this Policy.

We do not sell personal information to third parties. We do not share research query content or platform analysis outputs with any party other than the submitting research team and our operational service providers.

5. Cookies and Tracking

We use cookies and similar technologies to operate the site, maintain session state for the research workspace, and measure usage. For details and choices, see our Cookie Policy.

6. Data Retention

We retain personal information only as long as needed for the purposes described, to comply with legal or accounting obligations, and to resolve disputes. Early-access inquiry submissions that do not result in a platform relationship are retained for 18 months, then deleted. Research workspace account data is retained for the duration of the active research relationship and for 24 months following account closure. Server access logs are retained 90 days, then aggregated. Inactive marketing-list contacts are purged after 24 months.

7. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including TLS encryption in transit, restricted-access databases, and least-privilege access controls. No system is perfectly secure; we cannot guarantee absolute security. If you believe your information has been compromised, contact [email protected] promptly.

8. Your General Rights

Depending on your jurisdiction, you may have rights including access, correction, deletion, and the ability to limit certain processing. To make a request, email [email protected]. We will respond within the timeframe required by applicable law.

9. California Residents (CCPA / CPRA)

Under the California Consumer Privacy Act ("CCPA") and the California Privacy Rights Act ("CPRA"), California residents have specific rights regarding personal information collected about them. This section supplements the rest of the Policy.

9.1 Categories We Collect

In the past 12 months, we have collected the following categories of personal information defined under Cal. Civ. Code §1798.140: identifiers (name, email, IP); professional and employment information (organization, role, research program context); commercial information (service inquiries and access requests); internet activity (browsing on avenzotxhq.com and within the research workspace); and inferences drawn from the above for service-improvement and access-review purposes. We do not collect sensitive personal information within the meaning of Cal. Civ. Code §1798.140(ae) from platform visitors or research partners through normal platform operations.

9.2 Sources, Purposes, Disclosure

We obtain this information from you directly (access request forms, workspace registration, direct communications) and through automatic site instrumentation. We use it to operate and improve the Service, evaluate and fulfill access requests, communicate with research teams, and meet legal obligations. We disclose it only to service providers under written contract and to legal authorities where required.

9.3 Your CCPA / CPRA Rights

• Right to Know: request the categories and specific pieces of personal information we have collected about you in the past 12 months.
• Right to Delete: request deletion of personal information we collected from you, subject to legal exceptions.
• Right to Correct: request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing: we do not sell personal information; we do not "share" it for cross-context behavioral advertising as defined under CPRA.
• Right to Limit Use of Sensitive PI: we do not use sensitive personal information for purposes beyond those permitted without authorization.
• Right to Non-Discrimination: we will not deny services, charge different prices, or provide a different level of service because you exercised a right.

9.4 How to Exercise

Submit a verifiable request by emailing [email protected] with the subject line "California Privacy Request." Include enough detail for us to verify you are the person whose information is the subject of the request. We respond within 45 days, with a possible 45-day extension for which we will notify you.

9.5 Authorized Agents

You may designate an authorized agent to make a request on your behalf. The agent must provide proof of authorization; we may also require you to verify your identity directly.

9.6 "Shine the Light"

California Civil Code §1798.83 entitles California residents to request information regarding our disclosure of personal information to third parties for direct marketing. We do not disclose personal information for third-party direct marketing.

9.7 Do Not Track and Global Privacy Control

Under the California Online Privacy Protection Act (Cal. Bus. & Prof. Code §22575), we disclose how we respond to "Do Not Track" (DNT) browser signals. Because there is no common industry standard for interpreting DNT signals, we do not currently respond differently to them. We do not authorize third parties to collect personally identifiable information about your activity across different websites when you use the Service. We honor an opt-out preference signal sent by a platform or browser that complies with the CPRA, such as the Global Privacy Control (GPC); when we detect a GPC signal, we treat it as a valid request to opt out of the sale or sharing of personal information for that browser or device.

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by a new "Last updated" date and, where appropriate, a notice on the Service.

11. Contact

Questions, requests, or complaints can be sent to:

Avenzo Therapeutics, Inc.
10578 Science Center Drive, Suite 200
San Diego, CA 92121
Email: [email protected]
Phone: +1 (858) 553-1907