Privacy Policy

1. Introduction

Faeth Therapeutics, Inc. ("Faeth," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit faeththerapeutics.com and the other web pages we operate that link to this Policy (the "Site").

The Site is an informational corporate website. It provides information about our company, our science and pipeline, investor and media materials, and career opportunities. The Site is not intended to provide medical advice, diagnose or treat any condition, or collect health information, and it is not directed to patients for the provision of health care services. Please do not rely on the Site for medical guidance, and please do not submit health, medical, or other sensitive personal information through the Site (see Section 8).

Our investor relations pages (for example, investors.faeththerapeutics.com) are hosted and operated by a third-party provider (Notified) and may be governed by that provider's own privacy terms in addition to, or instead of, this Policy. See Section 7.

2. Information We Collect

Information you provide to us. If you contact us through the Site's contact form, we collect the information you submit, which currently includes your first and last name, email address, phone number, the role you select (for example, Patient/Caregiver, Doctor, Media, or Other), your city and state, and any message you choose to include (the message field is optional). We also receive information you provide if you email us directly or subscribe to investor or press communications through our investor relations pages.

Information collected automatically. When you visit the Site, certain information is collected automatically through our hosting and analytics providers, including your IP address, browser type and device information, the pages you view, and the dates and times of your visit. These server logs are retained for a short period (by default, approximately one day) by our hosting provider and are used to operate, secure, and troubleshoot the Site. We also use a privacy-focused website analytics tool (Vercel Analytics) to understand aggregate Site usage; we understand this tool does not set cookies or track you across other websites.

Future analytics and tools. We may in the future use additional analytics, tag-management, or measurement tools (for example, Google Analytics or Google Tag Manager). If and when we do, we will provide notice and choices as required by applicable law and update this Policy accordingly.

3. Cookies and Similar Technologies

The Site uses cookies and similar technologies that are necessary for the Site to function, and may use optional analytics or similar technologies. Where required by law, we present cookie choices through a consent management tool (Enzuzo) so you can accept or decline non-essential cookies.

Your choices. You can control cookies through your browser settings and, where offered, through our cookie-preference tool. We honor opt-out preference signals such as Global Privacy Control (GPC) and treat a valid signal from your browser or device as a request to opt out of non-essential tracking to the extent required by applicable law.

4. How We Use Information

We use the information described above to:

• respond to your inquiries, fulfill your requests, and communicate with you (including sending acknowledgments or replies);
• operate, maintain, secure, troubleshoot, and improve the Site;
• send investor, press, or company updates you have requested, and allow you to unsubscribe;
• comply with legal obligations and enforce our terms; and
• protect the rights, property, and safety of Faeth, our users, and others.

5. How We Disclose Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising or use it for targeted advertising. We disclose information only as follows:

• Service providers. We share information with vendors that perform services for us and are permitted to use it only for that purpose — currently including our hosting and infrastructure provider (Vercel), our cookie-consent provider (Enzuzo), our contact-form and customer-relationship platform (HubSpot), our recruiting platform (Greenhouse), and our investor-relations platform (Notified).
• Corporate group. We may share information within our corporate family for the purposes described in this Policy.
• Legal, safety, and compliance. We may disclose information to comply with applicable law, regulation, legal process, or governmental request, and to protect the rights, property, or safety of Faeth, our users, or others.
• Business transactions. If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

6. Careers

Job openings displayed on the Site are retrieved from our recruiting platform (Greenhouse) and shown on our pages, but applications are submitted and processed on Greenhouse's own platform, under Greenhouse's terms. Information you submit as part of an application (such as your name, contact details, and resume) is collected on Greenhouse's domain and handled in accordance with Greenhouse's applicable privacy policy and terms.

7. Third-Party Links and Content

The Site links to and may display content from third parties, including ClinicalTrials.gov, SEC/EDGAR, social media platforms, and our investor relations pages operated by Notified (which provide stock information, SEC filings, and press releases, and which may offer their own forms and email sign-ups). These third parties operate under their own privacy policies, and we are not responsible for their content or privacy practices. We encourage you to review the privacy policies of any third-party site or service you use.

8. Health Information

The Site is not designed to collect health or medical information, and we ask that you not submit it. If you nonetheless choose to provide health-related information — for example, by identifying yourself as a patient or caregiver or by including such details in the message field — we use that information solely to respond to and handle your inquiry, and we process it consistent with applicable law, including, where applicable, Washington's My Health My Data Act and Nevada's consumer health data law, based on your submission of it to us. We do not use such information for advertising and do not sell it.

9. Your Privacy Choices and Rights

Marketing communications. You can opt out of investor, press, or marketing emails at any time by using the unsubscribe link in those messages.

Cookies and tracking. See Section 3 for cookie controls and our handling of opt-out preference signals (including GPC).

U.S. state privacy rights. Depending on your state of residence and applicable law — including California and states such as Virginia, Colorado, Connecticut, Texas, Oregon, and others that have enacted comprehensive consumer privacy laws — you may have the right to:

• confirm whether we process your personal information and access it;
• request correction of inaccurate personal information;
• request deletion of your personal information;
• obtain a copy of your personal information (data portability);
• opt out of the sale of personal information, the sharing of personal information for cross-context behavioral advertising, and certain profiling or targeted advertising; and
• not receive discriminatory treatment for exercising these rights.

Because we do not sell or share personal information, do not use it for targeted advertising, and do not use sensitive personal information for purposes that would require an opt-out, some of these rights may not apply to our current practices, and there may be nothing to opt out of at this time.

California. If you are a California resident, the CCPA/CPRA provides the rights described above, including the right to know the categories of personal information we collect (identifiers such as name, email, phone, and approximate location; internet activity such as Site-usage data; and the contents of communications you send us), the purposes for which we use it, and the categories of third parties to whom we disclose it. As noted above, we do not sell or share personal information.

How to exercise your rights. To make a request, contact us at privacy@faeththerapeutics.com. We will verify your request as required by law before responding, and you may use an authorized agent where permitted. We will not discriminate against you for exercising your rights.

10. Children's Privacy

The Site is not directed to children, and we do not knowingly collect personal information from children under 13 (or under 16 where applicable law so provides). If you believe a child has provided us personal information, please contact us at privacy@faeththerapeutics.com and we will take appropriate steps to delete it.

11. Visitors Outside the United States

The Site is intended for users in the United States, and our operations and service providers are located in the United States. If you access the Site from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, where data-protection laws may differ from those in your location.

12. Data Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect the information we collect. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

13. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, to provide the information or responses you request, and to comply with our legal obligations, after which we delete or de-identify it. Server logs are retained only briefly as described in Section 2.

14. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the "Effective Date" above and, where appropriate or required, provide additional notice of material changes. Your continued use of the Site after an update takes effect means you are subject to the updated Policy.

15. Contact Us

If you have questions about this Policy or our privacy practices, contact us at:

Faeth Therapeutics, Inc.

Attn: Privacy

701 Tillery Street #12 #1010, Austin, TX 78702

Email: privacy@faeththerapeutics.com