1. Who we are and what this policy covers
Solida, a Delaware corporation in formation ("Solida", "we", "us") is a preclinical stage biotechnology company. This policy explains what personal information we handle through solida.bio (the "Site"), why, and what rights you have over it. It covers the Site only, not any separate agreement, diligence process or partnering discussion, which are governed by their own terms.
We are a research company with no patients, no products on the market and no user accounts. The Site holds no visitor database and no login. We do not seek, and do not knowingly collect, health information through the Site.
2. What we collect
2.1 What you send us through the contact form
The contact form is the only place on the Site where we ask you for anything. When you submit it, we receive:
- the track you selected: Science, Work with us, or General Inquiries;
- your name;
- your organization;
- your email address;
- your message, if you write one.
The form posts to an endpoint on this site, hosted on Vercel, which emails the submission to our Google Workspace inbox. Nothing is written to a database along the way: once the message is delivered, it lives in Google Workspace like any other email we receive. The request itself is logged by our host, as described in 2.3.
Please do not send confidential, proprietary or health information through the form. It is not a secure channel. See section 7 of the Terms of Use for how we treat unsolicited submissions.
2.2 Measurement
The Site runs Vercel Web Analytics and Vercel Speed Insights, and nothing else. Web Analytics reports aggregate patterns: which pages are viewed, which site referred you, your approximate region, and the type of device. Speed Insights reports how fast each page loads and responds, along with the page, device type, browser and connection speed. Both are served from this domain, set no cookies, write nothing to your device, and do not build a profile of you or follow you to other sites.
2.3 Technical data from hosting
The Site is hosted on Vercel. Like any web host, Vercel processes the standard request data needed to deliver and secure a page: IP address, timestamp, requested URL, and browser user agent. We use this only to operate the Site and protect it from abuse.
2.4 What we do not do
We do not buy personal information, and we do not enrich or combine what you send us with data from brokers or third party sources. We do not run advertising or retargeting scripts, and we do not sell your personal information or share it for targeted advertising.
3. Cookies and what is stored in your browser
The Site sets no cookies and carries no third party trackers.
One entry is written to your browser's local storage: a record that you acknowledged our Terms of Use and Privacy Policy in the banner, with the version and the date. It stays on your device, is never transmitted to us, and exists so the banner does not reappear on every visit. You can clear it at any time from Privacy Choices.
Because the Site sets no cookies and loads no gated third party script, this record is not an advertising or analytics consent, and clearing it does not change what the Site measures.
4. Why we use this information, and on what legal basis
We use what we collect to reply to you and continue the conversation you started, to operate and secure the Site, to understand at an aggregate level how the Site is used, and to comply with legal obligations.
Where the GDPR or UK GDPR applies, our legal bases are: your consent and our steps taken at your request before entering a relationship, for the contact form; and our legitimate interest in running a secure, useful website and in understanding aggregate traffic, for hosting data and measurement. Where we rely on legitimate interest, you can object as described in section 8.
We do not use information collected through the Site for advertising, retargeting or audience building, and we do not make automated decisions that produce legal or similarly significant effects about you.
5. Who we share it with
We do not sell your personal information. We disclose it only to:
- Service providers acting on our instructions: Vercel, for hosting, analytics and the contact form endpoint; and Google Workspace, through which we receive and answer those messages;
- Professional advisers such as counsel, auditors and insurers, bound by confidentiality;
- Authorities where we are legally required to disclose, or where disclosure is necessary to protect our rights or someone's safety;
- Counterparties in a corporate transaction such as a financing, merger, acquisition or asset sale, in which case this policy continues to apply to the information transferred until the recipient posts its own.
6. International transfers
Our service providers are based in the United States, so information you send through the Site is processed there and may be processed in other countries where those providers operate. Where information is transferred out of the European Economic Area, the United Kingdom, Switzerland or Colombia, we rely on the safeguards incorporated into our agreements with those providers, including the European Commission's Standard Contractual Clauses and, for the United Kingdom, the International Data Transfer Addendum.
7. How long we keep it
We keep contact form submissions for as long as the conversation or relationship remains relevant, and for as long as we need them to meet legal obligations, after which we delete or anonymize them. You can ask us to delete yours sooner. Server logs and aggregate analytics are retained and deleted on our providers' standard schedules, and aggregate analytics contain nothing that identifies you.
8. Your rights
Wherever you are, you can ask us to access, correct or delete the personal information you sent us, to receive a copy of it, or to stop contacting you. You can also withdraw consent at any time, which does not affect processing already carried out. Write to contact@solida.bio from the address you used, or tell us enough to locate your message. We will respond within the period required by the law that applies to you, and we will not treat you differently for exercising a right.
8.1 European Economic Area, United Kingdom and Switzerland
You have the rights of access, rectification, erasure, restriction, portability, and objection to processing based on legitimate interest. You may lodge a complaint with your local supervisory authority, or with the UK Information Commissioner's Office.
8.2 California
Under the CCPA as amended by the CPRA, you have the right to know what personal information we collect, use and disclose, to access and delete it, to correct it, and to opt out of sale or sharing. In the twelve months before this policy was last updated, the categories we collected were identifiers (name, email, IP address), professional information (organization), and internet activity (page views, referrer, approximate region), all as described in section 2, collected from you and from your device. We did not sell or share personal information for cross context behavioural advertising, and we did not knowingly collect it from minors. We collect no sensitive personal information through the Site. You may use an authorized agent, and you may appeal a decision by replying to our response.
8.3 Other United States states
If you live in a state with a comprehensive privacy law, including Colorado, Connecticut, Virginia, Utah, Texas, Oregon or Montana, you have rights of access, deletion, correction and portability, the right to opt out of targeted advertising, sale and profiling, and the right to appeal. Use the same address above.
8.4 Colombia
Under Ley 1581 de 2012 and its implementing decrees you have the rights to know, update and rectify your data, to request proof of the authorization you gave, to be informed of how it has been used, to revoke your authorization or request deletion where the conditions for it are met, and to file a complaint with the Superintendencia de Industria y Comercio.
8.5 Opt out signals
We do not sell personal information or share it for targeted advertising, and the Site runs no advertising trackers, so there is nothing for a Global Privacy Control signal to switch off. If that ever changes, this policy will be updated first and any such processing will be gated behind an explicit choice.
9. Security
We use providers that apply industry standard protections, we keep the Site free of third party scripts, and we limit access to contact form submissions to the people who need to answer them. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. This is why we ask you not to send confidential or health information through the form or by unencrypted email.
10. Children
The Site is intended for people aged 18 and over and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has sent us information, write to us and we will delete it.
11. Third party sites
The Site links to publications and other external resources we do not control. Their privacy practices are their own, and this policy does not apply to them.
12. Changes to this policy
If we update this policy we will change the date at the top of this page. If a change is material we will make reasonable efforts to highlight it on the Site.
13. Contact
Questions about this policy, or any request about your data: contact@solida.bio. See also Privacy Choices and our Terms of Use.