Privacy policy

Last updated: June 2026

Overview

ImmuVia, Inc. (“ImmuVia,” “we,” “us,” or “our”) operates this website (immuvia.com) as an informational resource about our company, science, and pipeline. This is a static informational site: it has no user accounts or logins, does not sell products or services online, and does not include forms that submit your data to us. We are committed to handling any information we receive responsibly and to collecting only what is necessary. This policy explains what information we collect, how we use it, and the choices and rights you may have.

Information we collect

• Server logs and technical data. Like most websites, our hosting provider automatically records standard technical information when you visit, such as your IP address, browser type and version, device and operating system, referring page, and the pages and times of your visit. This information is generated as a routine part of operating an internet-accessible site.
• Aggregate analytics. We use privacy-friendly, cookieless aggregate analytics to understand how the site is used (for example, which pages are most visited). These analytics set no cookies, measure usage only in the aggregate, and are not used to identify or track individual visitors.
• Information you send us. The only interactive contact element on this site is an email link. If you choose to email us, we receive your message together with your email address and any other information you decide to include, and we use it solely to read and respond to your inquiry.

We do not knowingly collect special categories of sensitive personal information through this site, and we ask that you not send us such information by email.

How we use information

We use the limited information described above to operate, maintain, secure, and improve the website; to understand site usage in the aggregate; to respond to inquiries you send us by email; and to comply with our legal obligations and protect our legal rights. We do not use this information to build marketing profiles, and we do not engage in automated decision-making that produces legal or similarly significant effects.

Legal bases and purposes

Where the EU or UK General Data Protection Regulation applies, we rely on our legitimate interests in operating, securing, and improving our website and in responding to communications you initiate, and on compliance with legal obligations to which we are subject. Because our analytics are cookieless and we set no non-essential cookies, we do not rely on consent for those purposes; where we ever do request your consent, you may withdraw it at any time.

Cookies and similar technologies

We do not use cookies for advertising or cross-site tracking, and our analytics are cookieless. Any cookies or similar technologies are limited to those strictly necessary to operate the site. Because we set no non-essential cookies, no cookie-consent banner is required; you can still control cookies through your browser settings, and doing so should not impair your ability to read this informational site.

Service providers and sharing

We share information only with service providers that help us operate the site, such as our website hosting provider and, where used, our analytics provider, and only to the extent needed to provide those services to us. We may also disclose information where required by law, to respond to lawful requests or legal process, or to protect the rights, safety, and property of ImmuVia or others. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

International data transfers

ImmuVia is based in the United States, and our service providers may process the information described above in the United States or in other countries. If you access the site from outside the United States, you understand that your information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction. Where required, we take steps designed to ensure such transfers are subject to appropriate safeguards.

Data retention

We retain server logs and analytics data only for as long as reasonably necessary for the purposes described above or as required by law, after which they are deleted or aggregated. Emails you send us are retained for as long as needed to address your inquiry and to maintain appropriate business records.

Security

We maintain reasonable administrative, technical, and organizational measures intended to protect the limited information we handle against unauthorized access, use, or disclosure. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. Email in particular is not a secure means of communication, and you should not send confidential or sensitive information to us by email.

Your privacy rights

Depending on where you live, you may have rights regarding your personal information. We honor these rights as applicable to the limited information we hold.

• EU and UK residents (GDPR). Subject to applicable law, you may have the right to access, correct, delete, or restrict the processing of your personal data, to object to certain processing, to data portability, and to withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your local data protection authority.
• California residents (CCPA/CPRA). Subject to applicable law, you may have the right to know what personal information we collect and how we use and disclose it, to request access to or deletion of your personal information, to correct inaccurate personal information, and to be free from discrimination for exercising these rights. We do not sell or share personal information as those terms are defined under California law.

To exercise any of these rights, contact us using the details below. We will respond consistent with applicable law and may need to verify your identity before acting on a request. Because we collect very little information, in some cases we may not hold information that allows us to identify you.

Children’s privacy

This website is intended for a professional audience and is not directed to children. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

Third-party links

This site may link to third-party websites or resources that we do not operate or control. This policy does not apply to those sites, and we encourage you to review their privacy policies.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the “Last updated” date above. Your continued use of the site after an update indicates your acceptance of the revised policy.

Contact

Questions about this policy, or requests to exercise your rights, can be directed to privacy@immuvia.com, or ImmuVia, Inc., 245 First Street, Suite 1800, Cambridge, MA 02142.