Privacy Policy - Coya Therapeutics

Coya Therapeutics – Privacy Policy

Last Updated: 02/05/2026
Version: 1.0

At Coya Therapeutics (“Coya,” “we,” “our” or “us”), privacy, integrity and trust are of utmost importance to us. We want you to understand how we collect, use, disclose and protect your information when visiting the website located at https://www.coyatherapeutics.com (the “Site”).

This website privacy policy (“Privacy Policy”) explains the ways in which your information is collected and used when you view the Site or contact us via the Site. This Privacy Policy is incorporated into and subject to our Terms of Use.

By accessing the Site, you accept the terms and conditions of this Privacy Policy and agree that Coya will have the right to use your information as described in this Privacy Policy. If you do not agree to the terms and conditions of this Privacy Policy, you must immediately discontinue your access to and use of the Site.

As used in this Privacy Policy, the terms “you” and “your” mean each individual or entity that accesses, browses or uses the Site in any manner. If you are accessing the Site on behalf of an entity, you represent and warrant to Coya that you have the authority to bind the entity to the Privacy Policy and your agreement to the terms and conditions of the Privacy Policy will be treated as the agreement of the entity you represent.

1. Scope of this Privacy Policy

This Privacy Policy covers information collected by Coya when you visit or use the Site, interact with our emails or online content, or otherwise communicate with us. This Privacy Policy does not apply to third parties, including entities that Coya does not own or control.

2. General Business; Not Intended for Minors

The Site is intended for a general business audience and is not directed to minors under applicable law. Coya does not knowingly collect personal information from individuals considered minors under applicable state law. If you are under 18 years of age, you may not use the Site.

3. What Information is Collected and How

Coya, including through third party providers, may collect information when you visit the Site or contact us via the Site.

3.1 Information You Provide to Us

Contact Data. Full name, email address, zip code, telephone number and birth date when voluntarily provided.
Communications Data. Details about your requests and inquiries.

3.2 Information We Collect Automatically

Log and Usage Data. Browser type, navigation path, demographic location details, time spent on pages,
IP address and internet service provider.
Cookies, Web Beacons and Tracking Technologies. Information collected through cookies, web beacons,
clear gifs and similar tools.
Usage Data and Web Analytics. Analytics information such as impressions, clicks, pages viewed and
time spent on pages.
We use Google Tag Manager (GTM) to manage analytics tags and collect aggregated website usage data.
For more information visit https://policies.google.com/privacy
.

4. How We Use Your Information

To manage your account;
To fulfill your requests for products, programs and services;
To respond to inquiries and requests;
To improve services;
To offer products and services that may be of interest;
To provide direct email marketing;
To enforce legal terms; and
For purposes for which you provided consent.

5. How We Share Your Information

5.1 We share your information with:

Third parties you authorize us to share information with; and
Vendors and service providers that support our operations.

Coya does not rent, share, or sell your personal information for marketing purposes.

5.2 We may share your information:

With government authorities or legal counsel;
To enforce agreements;
To protect rights, property or safety; or
In connection with a business transaction such as a merger or sale of assets.

6. Your Privacy Choices

a. Marketing Communications.
You may unsubscribe through our emails or by contacting support@coyatherapeutics.com.

b. Manage Cookie Preferences.
You may remove or reject cookies through your browser settings. More information is available at https://www.allaboutcookies.org
.c. Do Not Track. We do not respond to Do Not Track signals.

d. Universal Opt-Out Mechanisms. We honor applicable universal opt-out signals where required by law.

e. Exercising Your Privacy Rights. You may contact us using the methods described below.

7. Texas and Additional U.S. State Privacy Laws

Depending on your place of residence, you may have rights regarding your personal information, including:

Right to access your personal information;
Right to correct inaccuracies;
Right to delete personal information;
Right to obtain a portable copy of your information;
Right to opt out of targeted advertising, profiling and sale or sharing of information;
Right to designate an authorized agent;
Right to appeal decisions regarding your request; and
Right to receive equal service and price.

7. Data Retention

You may request deletion of your personal information. Certain information may be retained for legal or
legitimate business purposes.

8. Data Security

Coya uses reasonable safeguards to protect your personal information, but cannot guarantee absolute security.

9. External Links

The Site may contain links to third-party websites. Coya is not responsible for their content or privacy practices.

10. Changes to this Privacy Policy

Coya may update this Privacy Policy from time to time. Continued use of the Site after changes become effective signifies acceptance of the updated policy.

11. Contact Us

If you have questions or wish to exercise your privacy rights, contact us at info@coyatherapeutics.com.

You may also submit requests at: https://ir.coyatherapeutics.com/whistleblower-information/default.aspx

Appeals:
If your request is denied, you may appeal by contacting support@coyatherapeutics.com and indicating “Privacy Rights Appeal”.

Authorized Agent:
You may designate an authorized agent by providing written authorization to support@coyatherapeutics.com.