Privacy Policy

Effective date: June 19, 2026 Last updated: June 19, 2026

1. Introduction

Gather Bio, Inc. ("Gather Bio," "we," "us," or "our") is a Delaware corporation building research infrastructure for autoimmune disease. This Privacy Policy describes how we collect, use, and share information through our website at gatherbio.com (the "Site").

This Policy covers our waitlist sign-up and informational website. It does not cover participation in research studies. When we open active research enrollment, we will provide separate informed consent documents that govern the collection and use of research data. Those documents will be reviewed and approved by an independent Institutional Review Board (IRB) before enrollment begins.

By using the Site or submitting information to our waitlist, you agree to this Privacy Policy.

2. Information we collect

We collect the following information when you choose to provide it:

• Contact and identifying information you submit through our waitlist form, which may include your name, email address, and zip code.
• Any information you include when you contact us directly, such as the content of an email.
• Basic technical and usage information collected automatically when you visit the Site, such as your browser type, device type, pages viewed, and general location inferred from your IP address.

We do not ask for medical or diagnosis information through the waitlist form. If you choose to include health-related details in a message to us, we will treat that information as described in this Policy.

3. How we use information

We use the information we collect to:

• Add you to our waitlist and notify you about research enrollment opportunities as they become available.
• Respond to your questions and communicate with you about Gather Bio.
• Operate, maintain, and improve the Site.
• Comply with legal obligations.

4. How we share information

We do not sell your personal information. We share information only in these limited circumstances:

• With service providers who help us operate the Site and manage our waitlist, under contractual confidentiality obligations.
• When required by law, regulation, legal process, or governmental request.
• In connection with a corporate transaction such as a merger, acquisition, or financing, where information may be transferred subject to this Policy.

5. Data security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Data retention and deletion

We retain waitlist information for as long as needed to operate the waitlist and contact you about enrollment, unless you ask us to delete it. You may request deletion of your information at any time by emailing [email protected]. We will respond to verified requests within the timeframes required by applicable law.

7. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or restrict the use of your personal information, and to opt out of the sale or sharing of your personal information. We do not sell personal information. To exercise any of these rights, email [email protected]. We will not discriminate against you for exercising your rights.

Residents of California, Washington, Virginia, Colorado, Connecticut, Texas, Utah, and other states with applicable privacy laws have specific rights under those laws. We honor verified requests in accordance with the law that applies to you.

8. Children's privacy

The Site is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, email [email protected] and we will delete it.

9. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be communicated through the Site.

10. Contact us

Questions about this Policy or your information can be sent to: