Melchior Bio Back to home

Privacy Policy

Last updated November 4, 2026

This Privacy Policy explains how Melchior Bio, Inc. ("Melchior Bio," "we," "us"), collects, uses and shares personal information when you visit melchiorbio.com and any page that links to this policy (the "Site"), request a demo, or otherwise contact us. Melchior Bio, Inc. is a Delaware corporation and is the controller of the personal information described here.

Platform data is outside this policy. This policy does not cover data processed through our platform, including Central Dogma knowledge graphs and our Agent Fleet, on behalf of our customers. The platform is deployed in each customer's own cloud environment, under the customer's own keys, and nothing is shared between customers. Patient, clinical trial, real-world and other study data processed there is controlled by the customer and handled under the customer's agreement with us (such as a master services agreement, data processing agreement or business associate agreement) and the customer's own privacy notices. We act as a processor or service provider for that data, and requests about it should go to the customer. Where the platform is configured to use a third-party AI model provider, that provider is chosen and contracted by the customer or named in the customer's agreement with us.

1. Information we collect

Information you give us. When you submit the demo request form on the Site (which reaches us at hello@melchiorbio.com), we collect your name, work email, phone number, job title and company, and any message you choose to include. When you email us or contact us in another way, we collect what you provide, which typically includes the same details and anything you write about your programs or needs. Submitting the demo request form does not sign you up for marketing emails. Please do not send us protected health information, patient data or other sensitive personal information through the Site or by email unless we have first agreed in writing on how it will be handled.

Information collected automatically. When you visit the Site, our hosting provider automatically records technical data in server logs, such as IP address, browser and device type, operating system, referring page, the pages requested, and approximate location derived from IP address. The visuals on the Site, including sample cohorts, biomarker panels and audit entries, are illustrative and contain no real patient data. Apart from the demo request form, interactive elements on the Site do not ask for personal information.

Information from others. We may receive your business contact details from a colleague who introduces you, from event organizers, or from public professional sources such as your company website or LinkedIn profile.

2. How we use information

We use personal information to:

  • respond to demo requests and other inquiries, and schedule and hold demos and meetings;

  • evaluate, propose and provide our platform and services, and manage our business relationship with you or your organization;

  • send you updates about our products where you have asked for them or where the law otherwise allows, with an opt-out in every message;

  • operate, secure, debug and improve the Site;

  • detect, prevent and respond to fraud, abuse and security incidents; and

  • comply with legal obligations and enforce our agreements.

We do not use information collected through the Site to make decisions about you based solely on automated processing that produce legal or similarly significant effects. We do not use personal information submitted through the Site to train AI models.

3. Legal bases (EEA, UK and Switzerland)

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases: contract, to take steps at your request before entering into an agreement and to perform it; legitimate interests, to run and secure the Site, respond to business inquiries and develop business relationships, where those interests are not overridden by your rights; consent, for certain marketing communications, which you can withdraw at any time; and legal obligation, where the law requires us to keep or disclose information.

4. How we share information

We do not sell personal information for money. We share it only with:

  • Service providers that process it on our behalf under contract, including our website hosting provider, the provider that receives and delivers demo request form submissions to us, our email and productivity provider, and IT, security and communications tools;

  • Contractors and advisors who work with us on our products or our business, bound by confidentiality obligations;

  • Professional advisors such as lawyers, accountants and insurers;

  • Authorities and others where required by law, legal process or to protect the rights, safety and property of Melchior Bio, our customers or others; and

  • A successor in connection with a merger, acquisition, financing, reorganization or sale of all or part of our business, subject to this policy.

We may share aggregated or de-identified information that cannot reasonably identify you.

5. Cookies

The Site uses only strictly necessary technology. Our hosting provider delivers the Site, balances load and protects it against attacks, and sets cookies only as needed to do so. We do not use analytics, advertising or session-recording cookies, and we do not track you across other sites. You can block or delete cookies in your browser; the Site will still work.

6. How long we keep information

We keep personal information only as long as needed for the purposes above. Demo requests and inquiry records that do not lead to an agreement are generally kept for up to 3 years from our last contact. Records relating to a customer relationship are kept for the life of the relationship plus the period required for legal, tax and contractual purposes, generally up to 7 years. Server logs are kept for the periods our hosting provider's service sets. We then delete or de-identify the information.

7. How we protect information

We use administrative, technical and physical safeguards designed to protect personal information, including encryption in transit, access controls based on least privilege, multi-factor authentication on business systems, and written information-security policies aligned to recognized frameworks. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International transfers

Melchior Bio is based in the United States, and our service providers and contractors may process information in the United States and other countries. Where we transfer personal information from the EEA, UK or Switzerland to a country without an adequacy decision, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, or rely on a recipient's certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions. You may request a copy of the relevant safeguards by contacting us.

9. Your rights and choices

Everyone. You can unsubscribe from marketing emails using the link in the message or by emailing us. You can ask us to update or delete the information you have given us.

EEA, UK and Switzerland. You have the right to access, correct, delete, restrict or object to our processing of your personal information, to data portability, and to withdraw consent at any time without affecting earlier processing. You have an absolute right to object to direct marketing. You may lodge a complaint with your local data protection authority, or in the UK with the Information Commissioner's Office; we would welcome the chance to address your concern first.

U.S. states. Depending on where you live (including California, Colorado, Connecticut, Virginia, Texas, Oregon and other states with comprehensive privacy laws), you may have the right to know what personal information we have collected about you and how we use it, to access and receive a copy of it, to correct it, to delete it, and to opt out of its sale, its sharing for cross-context behavioral or targeted advertising, or its use for profiling. We do not sell personal information for money, and we do not share it for cross-context behavioral or targeted advertising. We do not use or disclose sensitive personal information for purposes that require an opt-out right, and we will not discriminate against you for exercising your rights.

How to make a request. Email info@melchiorbio.com (not our sales address) with the subject line "Privacy request" and tell us which right you want to exercise. We will verify your identity using information we already hold, usually by confirming control of the email address we have on file. You may use an authorized agent; we may ask for proof of the agent's authority and verify your identity directly. We respond within the time the applicable law requires, generally 30 days under GDPR and 45 days under U.S. state laws, with extensions where the law allows. If we deny your request, you may appeal by replying with "Appeal" in the subject line; we will respond to appeals within the time required by law, and if you remain dissatisfied you may contact your state attorney general.

10. California notice at collection

In the past 12 months we have collected these categories of personal information under the California Consumer Privacy Act: identifiers (name, email, phone number, IP address); professional or employment information (company, title); any information you include in the optional message field; internet or network activity (pages requested and referring page, in server logs); and geolocation inferred from IP address. Sources, purposes, recipients and retention are described in Sections 1, 2, 4, 5 and 6. We do not sell or share these categories. We do not knowingly collect sensitive personal information through the Site.

11. Children

The Site is intended for business professionals and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

12. Links to other sites

The Site may link to third-party sites and services. Their privacy practices are governed by their own policies, not this one.

13. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page with a new "Last updated" date and, if the changes are material, give additional notice such as a notice on the Site or an email.

14. Contact us

Melchior Bio, Inc., a Delaware corporation.