Privacy Policy

Effective May 25, 2026.

Last reviewed by Ligant.ai legal counsel on May 25, 2026.

Ligant.ai Incorporated ("Ligant.ai," "we," "us," "our") operates the website at ligant.ai. This Privacy Policy explains what personal information we collect through this website, why we collect it, and how we handle it. It applies only to the public landing site at ligant.ai and its subdomains used for the same site. It does not apply to the Ligant.ai platform itself, which is in pre-launch and not yet generally available.

1. What we collect

We only collect what you give us through one of three forms on this site:

• Contact form: first name, last name, work email, company, optional role, optional message.
• Research preview application: first name, last name, work email, company / institution, target gene, primary indication, company stage, timeline to decision, optional research focus. Because target genes and indications can be competitively sensitive, we treat preview applications with additional confidentiality — access is limited to senior team members only, and we do not use the contents of an application for any purpose other than evaluating your eligibility and following up about the preview program.
• Launch-updates waitlist: your email address only, plus the page or section the form was submitted from. Waitlist signups require an explicit opt-in on the form and are used solely to send infrequent (approximately quarterly) updates about the Ligant.ai platform's launch. You can unsubscribe at any time by emailing the contact in Section 12.

We also receive limited technical metadata automatically when you visit (IP address, browser type, referrer page, timestamp) which our server logs retain for operational and security reasons.

2. Why we collect it

• To respond to your inquiry, schedule a demo, or evaluate your research-preview application.
• To send you waitlist updates about the platform launch, only if you opted in on the waitlist form.
• To detect and block abuse (spam form submissions, brute-force attempts).

We do not sell your information, share it with advertisers, or use it to target ads.

3. Legal bases for processing (GDPR)

If you are in the European Economic Area, United Kingdom, or Switzerland, our legal bases under Article 6 GDPR are:

• Consent for waitlist sign-ups (explicit opt-in checkbox on the form) and for optional non-essential cookies (third-party embeds and analytics — see Section 4). You may withdraw consent at any time without affecting prior lawful processing.
• Legitimate interests for evaluating inbound demos and research-preview applications, securing the site, and answering messages you initiate.
• Legal obligation where we must retain certain records to comply with applicable law.

4. Cookies and third-party embeds

We use a minimal set of cookies:

• Strictly necessary: a session cookie on the admin.ligant.ai subdomain used only by Ligant.ai staff to sign in to internal tools. Public visitors to ligant.ai do not encounter it.
• Security / infrastructure: our CDN (Cloudflare) may set short-lived cookies such as __cf_bm to distinguish humans from bots. These are necessary for the site to function.
• Third-party embeds, requires your consent: the LinkedIn embeds on the homepage load from linkedin.com. If you accept, LinkedIn may set its own cookies subject to LinkedIn's cookie policy. You can decline; in that case the embeds are replaced with a placeholder.
• Analytics & session recording, requires your consent: if you accept, we load Contentsquare to understand how visitors use the site (session replay, heatmaps, click-stream). Contentsquare may set cookies and record your interactions; recordings are pseudonymised and used only to improve the site. You can decline; nothing loads.

You can change your cookie choices at any time using the "Cookie preferences" link in the page footer.

5. Where your data lives and who can see it

Form submissions are stored in Google Cloud Firestore (US, multi-region). Notification emails are sent through Gmail SMTP (Google Workspace). Static assets are served via Google Cloud Run and Cloudflare. These sub-processors are bound by their respective data-processing agreements; none of them are permitted to use your personal data for their own advertising or marketing purposes. Google may use limited operational metadata (for example, security telemetry, abuse detection, and billing) as set out in the Google Cloud Platform Data Processing and Security Terms.

Only authorised Ligant.ai team members can access submitted form data.

6. Retention

We retain form submissions for up to 24 months from your last interaction with us, after which we delete or irreversibly anonymise them. You can request earlier deletion at any time using the contact in Section 12. Server access logs are retained for up to 90 days for security purposes.

7. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct or update inaccurate data.
• Request deletion ("right to be forgotten").
• Object to or restrict certain processing.
• Withdraw consent at any time (without affecting prior lawful processing).
• Receive your data in a portable, machine-readable format.
• Lodge a complaint with your local data-protection authority.

To exercise any of these rights, email legal@ligant.ai. We will respond within 30 days.

California residents

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you additional rights:

• Right to know what categories of personal information we have collected and the purpose.
• Right to delete the personal information we hold about you, subject to limited exceptions.
• Right to correct inaccurate personal information.
• Right to opt-out of sale or sharing of your personal information. We do not sell or share your personal information as those terms are defined under the CCPA, but you have this right as a matter of law.
• Right to non-discrimination for exercising any CCPA right. We will not deny you services, charge you a different price, or provide a different level of service because you exercised a CCPA right.
• You may designate an authorised agent to make a request on your behalf. We will verify the agent's authority before responding.

To exercise a CCPA right, email legal@ligant.ai.

8. International transfers

Our servers are located in the United States. If you visit from outside the US, your data will be transferred and processed in the US. Where required by GDPR Article 46, we rely on the EU–US Data Privacy Framework and Google's Standard Contractual Clauses for these transfers. You can request a copy of the relevant transfer safeguards by emailing the contact in Section 12.

EU/UK representative

Ligant.ai is a United States company in pre-launch. We do not actively market to or solicit residents of the European Economic Area or the United Kingdom, and we do not target our services at users in those regions. For that reason we have not yet appointed a representative under Article 27 GDPR or the equivalent UK regime. We will appoint a representative before we commence active marketing or service delivery in those regions. In the meantime, individuals in the EEA or UK may contact us directly using the address in Section 12, and we will respond to data-protection requests as set out in Section 7.

9. Security

We use HTTPS everywhere, encrypt data at rest in Firestore and Cloud Storage, restrict access via Google Workspace identity, and follow industry-standard practices to prevent unauthorised access. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Children

This site is not directed at people under 18, and we do not knowingly collect personal data from minors.

11. Changes to this Policy

We may update this policy from time to time. When we do, we will revise the "Effective" date above. If the change is material, we will notify you (for example, by email or a prominent notice on the homepage).

12. Contact

Ligant.ai Incorporated
3675 Market Street, Suite 200
Philadelphia, PA 19104
United States
Privacy contact: legal@ligant.ai