Eradivir, Inc. Privacy Notice

Last Updated: August 3, 2026

1. Our Commitment

Eradivir, Inc. is committed to protecting the privacy and security of personal information collected through our public website and related digital channels, in the course of our business relationship with vendors and other business contacts, and in connection with our recruitment and employment activities.. This Privacy Policy explains how we collect, use, disclose, retain, and protect that information, and how individuals may exercise privacy rights that apply to them.

Controller and Contact Details

For purposes of applicable data protection laws, Eradivir, Inc. is the controller of the personal information described in this Privacy Policy. If you have questions about this Privacy Policy or wish to exercise your privacy rights, you may contact us our Privacy Contactcontracted Data Protection Officer at privacy@eradivir.com or by mail at Eradivir, Inc., 1281 Win Hentschel Blvd., West Lafayette, IN 47906.

Scope of this Policy

This Privacy Policy applies to (i) visitors to our public website, (ii) individuals we interact with in a business-to-business capacity, such as representatives of our vendors, customers, collaborators, and other business partners, and (iii) our job applicants and employees, in each case to the extent described below. Where our processing of job applicant or employee information is also addressed in a separate employee or candidate privacy notice, that notice supplements, and to the extent of any conflict controls over, this Policy with respect to that information.

2. Information We Collect

We collect information to support our research initiatives, corporate communications, and business development efforts.

  • Voluntarily Provided Data: Information you provide when contacting us via our website, such as your name, professional title, company name, and email address, including when patients or members of the public contact us with questions about our clinical trials.
  • Business Contact Information: Where we interact with you as a representative of a vendor, customer, collaborator, or other business partner, we may collect your name, job title, employer, business contact details, and information relating to our contractual or business relationship with your organization.
  • Employment and Recruitment Information: If you apply for a position with us or are an Eradivir employee, we may collect information such as your contact details, resume and application materials, employment history, education, references, and other information relevant to recruitment and, if applicable, your ongoing employment. This category of information is addressed further in the section below and, where applicable, in a separate employee or candidate privacy notice.
  • Automated Information: When you visit our site, we may automatically collect technical and usage information, such as your IP address, device identifiers, browser type, operating system, referring pages, pages viewed, dates and times of visits, and usage patterns, to operate, secure, analyze, and improve our website.
  • Sensitive Information: We do not knowingly collect, nor do we request, personal health information, genetic information, clinical trial information, protected health information, precise biometric information, or other sensitive personal information through this website. This does not include information you choose to submit in connection with a potential adverse event, product complaint, safety issue, or medical inquiry, which is addressed separately below. Please do not submit sensitive information through our web forms unless we specifically request it under a separate notice, consent, protocol, or agreement.

3. How We Use Your Data

We process information for the following purposes:

  • Communication: To respond to your professional inquiries and provide information about our biotechnology developments.
  • Regulatory Compliance: To meet legal obligations related to corporate disclosures and industry standards.
  • Service Improvement: To analyze website traffic and optimize our digital outreach for professional stakeholders.
  • Vendor and Business Relationship Management: To manage our relationships with vendors, customers, collaborators, and other business partners, including contracting, procurement, and account management.
  • Recruitment and Employment: To evaluate job applications, administer employment, and comply with applicable employment and labor law obligations.

Research, Clinical, and Health Information

This website is not intended to collect clinical trial data, patient information, protected health information, genetic information, biological sample information, or adverse-event reports. If Eradivir collects or processes such information in connection with research, clinical trials, pharmacovigilance, compassionate use, investigator communications, or other regulated activities, that information will be handled under separate notices, consents, protocols, contracts, and applicable legal and regulatory requirements. Our website provides general information for patients and the public about our ongoing and completed clinical trials, including links to third-party clinical trial registries maintained by regulatory authorities, such as ClinicalTrials.gov and EUClinicalTrials.eu. We do not collect clinical trial enrollment or eligibility data through this website. Those registries are operated by third parties and are governed by their own privacy notices, not this Policy. If you contact us with questions about participating in a clinical trial, any personal information you provide will be handled as described in this Policy, including the Sensitive Information and Adverse Events and Product Safety provisions above.

Employment and Recruitment

Where we process job applicant or employee information, we do so in accordance with applicable employment and labor laws, which may afford different rights and require different retention periods than apply to other individuals under this Policy. To the extent Eradivir maintains a separate employee or candidate privacy notice, that notice governs the details of that processing and supplements this Policy.

Legal Bases for Processing

Where GDPR or similar laws apply, we process personal information only when we have a legal basis to do so. Depending on the context, those legal bases may include our legitimate interests in operating and improving our website, responding to business inquiries, communicating with professional stakeholders, and protecting our services; compliance with legal obligations, including employment and labor law obligations; performance of a contract or steps taken at your request before entering into a contract, including an employment contract or steps taken at a candidate's request before entering into one; and consent where required by law, such as for certain cookies or marketing communications.

Cookies and Similar Technologies

Our website may use cookies, analytics tools, pixels, and similar technologies to help operate the website, understand site usage, improve performance, and support communications with professional stakeholders. Where required by law, we will obtain consent before using non-essential cookies and will provide a way for you to manage your cookie preferences.

Adverse Events and Product Safety

If you submit information relating to a potential adverse event, product complaint, safety issue, or medical inquiry, we may use and share that information as necessary to investigate, document, report, and comply with pharmacovigilance, product-safety, medical, legal, and regulatory obligations.

4. Data Sharing and Security

  • Sharing: We do not sell your personal information. We may share personal information with trusted service providers who help us operate our website, manage communications, provide analytics, support cybersecurity, maintain business records, or assist with legal, regulatory, and professional services. We require service providers to use personal information only as instructed, maintain appropriate confidentiality and security measures, and comply with applicable data protection obligations.
  • Security: We implement industry-standard physical, electronic, and procedural safeguards to protect the information under our control.

Data Retention

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, enforce our agreements, and maintain appropriate business records. The specific retention period may vary depending on the nature of the information, the purpose for which it was collected, and applicable legal or regulatory requirements. Job applicant and employee records are retained in accordance with applicable employment, tax, and labor law requirements, which may call for longer retention periods than apply to other categories of information under this Policy.

Categories of Recipients

We may share personal information with service providers and professional advisers, including website hosting providers, analytics providers, customer relationship management providers, IT and cybersecurity vendors, legal and regulatory advisers, auditors, background check, payroll, and benefits providers (in connection with job applicants and employees), and other parties where required to comply with law, protect our rights, or support a business transaction. We require service providers to process personal information only as instructed and to use appropriate confidentiality and security measures.

California "Shine the Light."

California residents may request, once per calendar year and free of charge, information about any personal information we disclosed to third parties for their own direct marketing purposes during the preceding calendar year. We do not disclose personal information to third parties for their own direct marketing purposes.

5. Your Rights

Depending on your jurisdiction, you may have the right to request access to, correction of, deletion of, or restriction of the personal data we hold about you. You may also have the right to object to certain processing, request data portability, withdraw consent where processing is based on consent, and lodge a complaint with a competent data protection authority. To exercise these rights, please contact us at privacy@eradivir.com. We may need to verify your identity before responding to a request. The rights available to job applicants and employees may differ from those described above depending on applicable employment and labor law, and, where applicable, are further addressed in a separate employee or candidate privacy notice.

U.S. State Privacy Rights and Appeals

To the extent required by applicable U.S. state privacy laws, you may also have the right to opt out of the sale or sharing of your personal information, the use of your personal information for targeted advertising, and profiling in furtherance of decisions that produce legal or similarly significant effects, and to limit the use of sensitive personal information. We do not sell personal information, and, where our use of cookies or similar technologies could constitute "sharing" or "targeted advertising" under applicable law, we will provide an opt-out mechanism and, where required, will treat opt-out preference signals such as the Global Privacy Control as a valid opt-out request. You will not be discriminated against for exercising any privacy right. You may designate an authorized agent to submit a request on your behalf, subject to our ability to verify the agent's authority and your identity. If we decline to act on a request, you may appeal by replying to our response or contacting us at privacy@eradivir.com; if your appeal is denied, you may have the right to contact your state attorney general. California residents who are our employees, job applicants, or business contacts may also exercise the rights described in this section, subject to any applicable exemptions.

Children’s Privacy

Our website is intended for professional and business audiences and is not directed to children. We do not knowingly collect personal information from children under the age required by applicable law. If we learn that we have collected such information, we will take appropriate steps to delete it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the Last Updated date above and, where required by law, provide additional notice or obtain consent for material changes.