This Cookie and Privacy Policy (the "Policy") describes the policies and procedures of Manus Bio Inc. ("Manus," "we," "us," or "our") regarding the collection, use, and disclosure of information when you use our Website (defined below), and tells you about your privacy rights and how the law protects you.

‍IMPORTANT NOTE: 
Our services are hosted and operated in the United States. If you are accessing our Website from a location outside the U.S., your connection will be through and to servers located in the U.S., and the information you provide will be processed and securely maintained in our web servers and internal systems (or those of our processors) located within the U.S. In accessing this Website or otherwise communicating with us from outside the U.S., your information may be transferred to, stored, and processed in the U.S. in accordance with this Policy. The data protection, privacy, and other applicable laws of the U.S. may not be as comprehensive as those laws or regulations in your country or may otherwise differ from the data protection or consumer protection laws in your country. Your information may be available to government authorities under lawful orders and laws applicable in the U.S.

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or plural.
‍
– Account means a unique account created for you to access our Service or parts of our Service.
– Company (referred to as either "the Company," "we," "us," or "our" in this Policy) refers to Manus Bio Inc., 43 Foundry Ave., Ste. 230, Waltham, MA 02453, U.S.
– Cookies are small files that are placed on your Device when you visit a website, containing details of your browsing history.
– Device means any device that can access the Service, such as a computer, a cell phone, or a digital tablet.
– Personal Data means any information that relates to an identified or identifiable individual as defined by applicable law. For California residents, "Personal Information" has the meaning given in the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA").
– Service refers to the Website.
– Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service, or to assist the Company in analyzing how the Service is used.
– Usage Data refers to data collected automatically, either generated by use of the Service or from the Service infrastructure itself (for example, the duration of a page visit) or your IP address.
– Website refers to Manus, accessible from https://www.manusbio.com/
– You means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

While using our Service, we may ask you to provide us with certain personally identifiable information that could be used to contact or identify you. We may currently process the following categories of your Personal Data:
– Email address
– First name and last name
– Phone number
– Address, State, Province, ZIP/Postal code, City
– Company or organization name and professional title
– Usage Data

Usage Data is collected automatically when using the Service. Usage Data may include information such as your Device's Internet Protocol ("IP") address, browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique Device identifiers, and other diagnostic data.
‍
When you access the Service by or through a mobile Device, we may collect certain information automatically, including, but not limited to, the type of mobile Device you use, your mobile Device unique ID, the IP address of your mobile Device, your mobile operating system, the type of mobile internet browser you use, unique Device identifiers, and other diagnostic data.We may also collect information that your browser sends whenever you visit our Service or when you access the Service by or through a mobile Device.

We use Cookies and similar tracking technologies (such as web beacons, tags, scripts, pixels, and SDKs) on our Website to recognize you, remember your preferences, and analyze how the Service is used. The technologies we use may include both first-party (set by us) and third-party (set by our Service Providers) Cookies.
‍
Cookies can be "Persistent" or "Session" Cookies. Persistent Cookies remain on your Device when you go offline. Session Cookies are deleted as soon as you close your web browser.

Consent management. We use OneTrust, a third-party consent management platform, to manage your cookie preferences and to control which Cookies are placed on your Device. Upon your first visit to the Website, our consent banner is displayed, and only Strictly Necessary Cookies are active. All other Cookie categories - Performance, Functional, and Targeting - remain disabled until you affirmatively consent through the banner or the Privacy Preference Center.

Cookies on the Website are organized into the following categories, which correspond to the categories displayed in the OneTrust Privacy Preference Center:

Strictly Necessary Cookies
‍These Cookies are essential to provide you with services available through the Website and to enable you to use some of its features. They help to authenticate users, prevent fraudulent use of user accounts, support security, and remember your cookie consent selections. Without these Cookies, the Service cannot function properly. These Cookies are always active and do not require your consent.
‍
Performance Cookies
‍These Cookies allow us to count visits and traffic sources so that we can measure and improve the performance of our Website. They help us understand which pages are the most and least popular and how visitors move around the site. All information these Cookies collect is aggregated. If you do not allow these Cookies, we will not know when you have visited our site. These Cookies are off by default and only activate upon your consent.
‍
Functional Cookies
‍These Cookies enable the Website to provide enhanced functionality and personalization. They may be set by us or by third-party providers whose services we have added to our pages. If you do not allow these Cookies, then some or all of these services may not function properly. These Cookies are off by default and only activate upon your consent.
‍
Targeting Cookies
‍These Cookies may be set through our Website by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant content on other sites. They do not store directly personal information but are based on uniquely identifying your browser and Internet Device. If you do not allow these Cookies, you will experience less targeted content. These Cookies are off by default and only activate upon your consent.

Each third-party service is gated through OneTrust and will not load or transmit data from your browser until you provide consent for the applicable Cookie category, except where listed as Strictly Necessary. We use the following third-party services on the Website:

‍OneTrust (Strictly Necessary)
‍OneTrust provides our consent management platform. It records your cookie preferences and ensures that other tracking technologies are blocked until you provide consent. OneTrust also performs IP-based geolocation to determine the applicable regional consent experience.
‍
Google Analytics (Performance)
‍Google Analytics is a web analytics service provided by Google LLC that tracks and reports Website traffic. Google may use the collected data to contextualize and personalize the ads of its own advertising network. Google Analytics is loaded only after you consent to Performance Cookies. For more information on Google's privacy practices, see https://policies.google.com/privacy.
‍
Hotjar (Performance)
‍Hotjar is a product experience analytics service provided by Hotjar Ltd. that helps us understand how users interact with the Website through heatmaps, session recordings, and similar tools. Hotjar is loaded only after you consent to Performance Cookies. For more information, see https://www.hotjar.com/legal/policies/privacy/.
‍
HubSpot (Functional and Targeting)
‍HubSpot is a customer relationship management and marketing automation platform provided by HubSpot, Inc. We use HubSpot to operate our website contact forms and to support email and marketing operations. HubSpot tracking scripts are loaded only after you consent to the applicable Cookie category. Information you voluntarily submit through a contact form is transmitted to HubSpot to support our response. For more information, see https://legal.hubspot.com/privacy-policy.
‍
LinkedIn Insight Tag (Targeting)
‍The LinkedIn Insight Tag is a tracking pixel provided by LinkedIn Corporation that enables campaign reporting and unlocks insights about Website visitors. The LinkedIn Insight Tag is loaded only after you consent to Targeting Cookies. For more information, see https://www.linkedin.com/legal/privacy-policy.

On your first visit to the Website, a consent banner is displayed. The banner provides three options:
‍
– Accept All Cookies: Activates all Cookie categories, including Performance, Functional, and Targeting.
– Reject All: Keeps non-essential Cookie categories disabled. Only Strictly Necessary Cookies are used.
– Cookies Settings: Opens the Privacy Preference Center, where you can review and toggle individual Cookie categories before confirming your choices.
‍
You may change your Cookie preferences at any time by clicking the cookie preferences icon located in the lower-left of the Website. Your preferences are stored by OneTrust and applied on subsequent visits from the same browser.In addition to the controls we provide, you can also use your browser settings to refuse Cookies or to be notified when a Cookie is being sent. Please refer to your browser's help documentation for instructions:
‍
– Microsoft Edge: https://support.microsoft.com/microsoft-edge
– Mozilla Firefox: https://support.mozilla.org
– Google Chrome: https://support.google.com/chrome
– Apple Safari (Mac): https://support.apple.com/safari
– Apple Safari (iPhone/iPad/iPod touch): https://support.apple.com
‍
Please note that if you choose to disable Cookies through your browser settings, certain Website features may not function correctly.

The Company may process your Personal Data for the following purposes:

– To provide and maintain our Service, including to monitor the usage of our Service.

– To manage Your account: to manage your registration as a user of the Service. The Personal Data you provide can give you access to different functionalities of the Service that are available to you as a registered user.

– For the performance of a contract: the development, compliance, and undertaking of the purchase contract for the products, items, or services you have purchased or of any other contract with us through the Service.

– To contact you: to contact you by email, telephone, SMS, or other equivalent forms of electronic communication regarding updates or informative communications related to the functionalities, products, or contracted services, including security updates, when necessary or reasonable for their implementation.

– To send you marketing communications, where required under applicable data privacy laws, only if you have opted in to receiving these communications or you are an existing customer for similar goods and services, or such laws otherwise allow us to send these materials. You may opt out at any time by contacting us as indicated below or by clicking the "unsubscribe" link in any email communication from us. If you opt out of receiving marketing-related emails from us, we may still send you important administrative messages from which you cannot opt out.

– To manage Your requests: to attend to and manage your requests to us.

– For analytics and improvement: we may use your Personal Data to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by us about our Service users is among the assets transferred.

We may share your Personal Data in the following situations:

– With Service Providers: we may share your Personal Data with Service Providers – including our analytics, marketing automation, and consent management providers identified in the Third-Party Tracking Technologies section above – to monitor and analyze the use of our Service, to contact you, and to operate the Website.
– For business transfers: we may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
– With affiliates: we may share your information with our affiliates, in which case we will require those affiliates to honor this Policy. Affiliates include our parent company and any other subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.
– With business partners: we may share your information with our business partners to offer you certain products, services, or promotions.
– With your consent: we may disclose your Personal Data for any other purpose with your consent.

The Company will retain your Personal Data only for as long as is necessary for the purposes set out in this Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer time periods.

The Company will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Policy, and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place, including the security of your data and other personal information.

Business Transactions
‍If the Company is involved in a merger, acquisition, or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different privacy policy.
‍
Law Enforcement and Legal Requirements
‍Under certain circumstances, the Company may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (for example, a court or a government agency).
‍
The Company may disclose your Personal Data in the good-faith belief that such action is necessary to:
– Comply with a legal obligation
– Protect and defend the rights or property of the Company
– Prevent or investigate possible wrongdoing in connection with the Service
– Protect the personal safety of users of the Service or the public
– Protect against legal liability

The security of your Personal Data is important to us, but no method of transmission over the internet or method of electronic storage is 100 percent secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from anyone under the age of 13 without verification of parental consent, we take steps to remove that information from our servers.

We are not directly subject to European data processing laws, as we are solely based in the U.S. and are not targeting individuals in the EU, Switzerland, or the U.K. for our goods and services. We voluntarily grant you the following data protection rights related to your Personal Data that we process, provided that you are a data subject in one of these jurisdictions and to the extent that you have these rights according to your applicable laws:We are not directly subject to European data processing laws as we are solely based in the U.S. and are not targeting individuals in in the EU, Switzerland, and/or the U.K. for Our goods and services, but we voluntarily grant You the following data protection rights related to Your Personal Data that We process provided that You are a data subject on one of these jurisdictions and to the extent that You have these rights according to Your applicable law(s):

‍Right to be informed (GDPR Articles 12 to 14): Data subjects have the right to be informed about the collection and use of their personal data.

‍Right to access (GDPR Article 15): Data subjects have the right to view and request copies of their personal data.

‍Right to rectification (GDPR Article 16): Data subjects have the right to request inaccurate or outdated personal information be updated or corrected.

‍Right to be forgotten/Right to erasure (GDPR Article 17): Data subjects have the right to request their personal data be deleted. Note that this is not an absolute right and may be subject to exemptions based on certain laws.

‍Right to data portability (GDPR Article 20): Data subjects have the right to ask for their data to be transferred to another controller or provided to them. The data must be provided in a machine-readable electronic format.

‍Right to restrict processing (GDPR Article 18): Data subjects have the right to request the restriction or suppression of their personal data.

‍Right to withdraw consent (GDPR Article 7): Data subjects have the right to withdraw previously given consent to process their personal data.

‍Right to object (GDPR Article 21): Data subjects have the right to object to the processing of their personal data.

‍Right to object to automated processing (GDPR Article 22): Data subjects have the right to object to decisions being made with their data solely based on automated decision making or profiling. 

How To Exercise Your Rights
‍To exercise the rights described above, please contact us using the information in the "contact us" section of this policy. Where you have any such rights under applicable laws, we will respond to any such rights that you want to exercise within one month of receiving the request, unless the request is complex, in which case it may take longer.

This section supplements the information contained elsewhere in this Policy and applies solely to California residents. It is provided to comply with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (collectively, the "CCPA"). Terms used in this section that are defined in the CCPA have the meanings given to them in the CCPA.

Categories of Personal Information We Collect
‍In the 12 months preceding the effective date of this Policy, we have collected the following categories of Personal Information from California residents:
– Identifiers, such as name, email address, phone number, postal address, and IP address.
– Commercial information, such as records of products or services considered or inquired about.
– Internet or other electronic network activity information, such as browsing history, search history, and information regarding interaction with our Website.
– Geolocation data, derived from IP address, at the city or regional level.Professional or employment-related information, such as company or organizational affiliation and title, when voluntarily provided.
– Inferences drawn from the above categories to create a profile reflecting preferences and characteristics.
‍
We do not knowingly collect categories defined as Sensitive Personal Information under the CCPA.

Sources of Personal Information
‍We collect Personal Information from the following sources:
– Directly from you, when you provide it to us through contact forms or other communications.
– Automatically, through Cookies and similar tracking technologies as described in this Policy, subject to your consent.
– From Service Providers and business partners that assist in operating the Website or supporting our marketing activities.
‍
Business and Commercial Purposes
‍We collect, use, and disclose Personal Information for the business and commercial purposes described in the "Purposes of Processing Your Personal Data" and "Sharing Your Personal Data" sections of this Policy.
‍
Disclosure of Personal Information
‍In the 12 months preceding the effective date of this Policy, we have disclosed the following categories of Personal Information to the categories of recipients described below for a business purpose:
– Identifiers and internet or other electronic network activity information, disclosed to Service Providers that support analytics, marketing automation, customer relationship management, and consent management functions on the Website.
‍
Sale or Sharing of Personal Information
‍Under the CCPA, "sale" includes the transfer of Personal Information for monetary or other valuable consideration, and "sharing" includes the transfer of Personal Information for cross-context behavioral advertising.
‍
In addition to the above, and as set forth below, California law requires us to identify, for the 12-month period prior to the date of this Privacy Policy, what information we have “sold” or “shared” about you. Manus does not sell Personal Information in exchange for monetary consideration. The use of certain Targeting Cookies on the Website, including the LinkedIn Insight Tag, may constitute "sharing" under the CCPA. These technologies are disabled by default and load only after you affirmatively consent to Targeting Cookies. If you do not consent, no such sharing occurs.
‍
Opt-out
‍You may opt out of any such sharing at any time by adjusting your preferences in the Privacy Preference Center, by clicking the cookie preferences icon located in the lower-left of the Website, or by enabling the Global Privacy Control signal in a supported browser. We honor Global Privacy Control signals as a valid opt-out of sharing for cross-context behavioral advertising.We do not knowingly sell or share Personal Information of consumers under 16 years of age.
‍
Your California Privacy Rights
‍If you are a California resident, you have the following rights, subject to the conditions and exceptions set forth in the CCPA:
Right to know: you have the right to request that we disclose what Personal Information we have collected, used, disclosed, and sold or shared about you, including the categories of sources, the categories of recipients, and the business or commercial purposes for collection.
‍Right to delete: you have the right to request that we delete Personal Information we have collected from you, subject to certain exceptions.
‍Right to correct: you have the right to request that we correct inaccurate Personal Information we maintain about you.
‍Right to opt out of sale or sharing: you have the right to opt out of the sale or sharing of your Personal Information.
‍Right to limit use of Sensitive Personal Information: to the extent we collect Sensitive Personal Information, you have the right to limit our use and disclosure of that information to certain permitted purposes.
‍Right to non-discrimination: you have the right not to receive discriminatory treatment by us for exercising any of your CCPA rights.
‍
How to Exercise Your Rights
‍To exercise the rights described above, please contact us using the information in the "Contact Us" section of this Policy. We will respond to verifiable consumer requests within the time periods required by the CCPA. We may need to verify your identity before processing your request. You may also designate an authorized agent to make a request on your behalf, subject to verification.

Only you, or a person legally authorized to act on your behalf, may make a request related to your personal information. You may only make a request for access or data portability twice within a 12-month period.

Your request must (1) provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative, and (2) describe your request with sufficient detail that allows us to properly understand, evaluate and respond to it. We cannot respond to your request or provide you with personal information if we cannot verify your identify or authority to make the request and confirm the requested personal information relates to you. Making a request does not require you to create an account with us. We will only use personal information provided in a request to verify the requester’s identity or authority to make the request.

Our Service may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the privacy policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

We may update this Policy from time to time. We will notify you of any changes by posting the new Policy on this page and updating the "Effective Date" at the top of this Policy. Where required by applicable law, we will provide additional notice (such as by email or a prominent notice on our Service) prior to the change becoming effective. You are advised to review this Policy periodically for any changes.