Privacy Statement

Pharosyn Inc. (“Pharosyn”, “we”, “us”, or “our”) provides an AI-powered competitive intelligence platform for pharmaceutical and biotechnology companies.

This Privacy Statement governs the Pharosyn public website. Use of the Pharosyn platform (our logged-in application) is governed by the applicable customer agreement and data processing addendum.

This Privacy Statement describes Pharosyn’s policies and practices regarding its collection and use of your personal data, and sets forth your privacy rights. We recognize that information privacy is an ongoing responsibility, and so we will from time to time update this Privacy Statement as we undertake new personal data practices or adopt new privacy policies.

Pharosyn is headquartered in Newark in the United States of America. Pharosyn has designated an internal privacy contact for you to reach if you have any questions or concerns about Pharosyn’s personal data policies or practices. If you would like to exercise your privacy rights, please direct your query to Pharosyn’s privacy contact:

Privacy Contact (Chief Technology Officer)
Pharosyn
131 Continental Dr Suite 305, Newark, DE 19713, US
Email: privacy@pharosyn.info

Pharosyn collects personal information about its website visitors and customers, for example when you request a demo or trial through the form on our website, contact us, or communicate with our sales team. With a few exceptions, this information is generally limited to:

• name
• job title
• employer name
• work address
• work email
• work phone number

Pharosyn does not intentionally collect sensitive or special category personal data (such as health, biometric, or genetic data, or data revealing racial or ethnic origin, political opinions, religious beliefs, or trade union membership).

For website, marketing, demo-request, and business-contact personal data, Pharosyn acts as a controller. For personal data submitted to or processed through Pharosyn’s services by or on behalf of customers, Pharosyn processes that data as a processor or service provider under the applicable customer agreement and data processing addendum.

We process this personal data to respond to requests, schedule and provide demos, manage prospective and customer relationships, send business communications where permitted, operate and secure our website and services, and comply with legal obligations. Our legal bases for processing are legitimate interests, the performance of a contract or pre-contractual steps, consent where required, and legal obligation, as applicable.

We do not sell personal data, and we do not use personal data to train or fine-tune artificial intelligence models. We disclose personal data only as described in this Privacy Statement, including to service providers acting on our behalf, professional advisers, authorities where required by law, and other parties with your direction or as necessary to protect rights, security, and safety.

From time to time, Pharosyn receives personal information about individuals from third parties. Typically, information collected from third parties will include further details on your employer or industry. We may also collect your personal data from a third party website (e.g. LinkedIn).

When you visit the Pharosyn website, our hosting and security providers may process limited technical log data, such as internet protocol (IP) addresses, browser type, device information, operating system, pages requested, referring page, and date and time of access. We use this information to operate and secure the website, diagnose problems with our server, troubleshoot, and prevent abuse. We do not use cookies or analytics technologies on the website.

Pharosyn has a legitimate interest in understanding how visitors, customers and potential customers use its website. This assists Pharosyn with providing more relevant products and services and with communicating value to its customers.

Within the Pharosyn platform (our logged-in application), we use a session analytics service to help us reproduce problems, diagnose faults, and improve reliability. Session analytics is configured so that user input is masked and authentication credentials are redacted before capture. Session analytics data is used only for these operational purposes and is shared only with the service provider that processes it on our behalf, in accordance with the applicable customer agreement.

The personal information Pharosyn collects from you is stored in one or more databases hosted by third parties located in the United Kingdom, the European Union, and the United States. We use service providers to host, store, transmit, support, and otherwise process personal data on our behalf, including cloud hosting, AI API, email, and business operations providers. These providers are contractually required to process personal data only on our instructions and to protect it appropriately. A current list of the subprocessors engaged in delivering the Pharosyn platform is available at pharosyn.ai/subprocessors. On occasion, Pharosyn engages third parties to send information to you, including information about our products, services, and events.

We may disclose personal data to third parties if required by law, legal process, or governmental request; to enforce agreements we have with you; to protect the rights, property, security, or safety of Pharosyn, our users, or others; to service providers acting on our behalf; or with your authorization. We may also gather aggregated data about our services and website visitors and disclose the results of such aggregated (but not personally identifiable) information to our partners and service providers.

We may disclose or transfer personal data in connection with any merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar corporate transaction, subject to appropriate confidentiality protections.

Pharosyn has its headquarters in the United States, and personal data collected by Pharosyn is stored on servers located in the United Kingdom and the European Union. Your personal data may be transferred to, stored in, or processed in countries other than your country of residence, including the United States, where some of Pharosyn’s service providers process data. The United States has not received a general finding of “adequacy” from the European Union under Article 45 of the GDPR. For transfers to U.S. recipients not covered by an applicable adequacy decision or data bridge (such as the EU-U.S. Data Privacy Framework or the UK-U.S. data bridge for certified recipients), Pharosyn relies on appropriate safeguards pursuant to Article 46 of the GDPR, including standard contractual clauses and, for UK personal data, the UK Addendum, implemented through data processing agreements with its vendors. We do not rely on transfer derogations for routine transfers.

To date, Pharosyn has not received any government requests for personal data. We assess any such request for legal validity before responding.

For more information or if you have any questions, please contact us at privacy@pharosyn.info.

The European Union’s General Data Protection Regulation (GDPR), the United Kingdom GDPR, and other countries’ privacy laws provide certain rights for data subjects. Data Subject rights under the GDPR and UK GDPR include the following:

• Right to be informed
• Right of access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right of data portability
• Right to object
• Rights related to automated decision making including profiling

This Privacy Statement is intended to provide you with information about what personal data Pharosyn collects about you and how it is used.

If you wish to confirm that Pharosyn is processing your personal data, or to have access to the personal data Pharosyn may have about you, please contact us.

You may also request information about: the purpose of the processing; the categories of personal data concerned; who else outside Pharosyn might have received the data from Pharosyn; what the source of the information was (if you didn’t provide it directly to Pharosyn); and how long it will be stored. You have a right to correct (rectify) the record of your personal data maintained by Pharosyn if it is inaccurate. You may request that Pharosyn erase that data or cease processing it, subject to certain exceptions. You may also request that Pharosyn cease using your data for direct marketing purposes. In many countries, you have a right to lodge a complaint with the appropriate data protection authority if you have concerns about how Pharosyn processes your personal data. Where the right to data portability applies, you may request a copy of the personal data you provided to us in a structured, commonly used, machine-readable format and ask us to transmit it to another controller where technically feasible.

Pharosyn does not use website, prospect, or business-contact personal data to make solely automated decisions that produce legal or similarly significant effects about individuals.

We respond to rights requests within the period required by applicable law. Reasonable access to your personal data will be provided at no cost; where permitted by law, we may extend the response period, refuse, or charge a reasonable fee for requests that are manifestly unfounded or excessive. If access cannot be provided within the legally required time frame, Pharosyn will provide you with a date when the information will be provided. If for some reason access is denied, Pharosyn will provide an explanation as to why access has been denied.

For questions or complaints concerning the processing of your personal data, you can email us at privacy@pharosyn.info. Alternatively, if you are located in the European Union, you can also lodge a complaint with your nation’s data protection authority. If you are located in the United Kingdom, you can lodge a complaint with the Information Commissioner’s Office (ICO).

Your personal data is stored by Pharosyn on its servers, and on the servers of the cloud-based service providers Pharosyn engages, located in the United Kingdom, the European Union, and the United States. We retain personal data for as long as necessary for the purposes described in this Privacy Statement, including to provide and administer services, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and preserve backups. Customer data processed under a customer agreement is retained and deleted in accordance with that agreement and any applicable data processing addendum. Pharosyn retains prospect data until such time as it no longer has business value; we review retained prospect data at least every 24 months and delete data that is no longer needed.

You may request deletion of your personal data, subject to applicable exceptions, including where retention is necessary to comply with legal obligations, resolve disputes, enforce agreements, maintain security, or complete transactions. For more information on where and how long your personal data is stored, and for more information on your rights of erasure and portability, please contact us at privacy@pharosyn.info.

We use appropriate technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, and destruction, taking into account the nature of the data and the risks of processing. For more information about our security program, visit our Trust Center.

The Pharosyn website and services are intended for business users and are not directed to individuals under 18 years of age. We do not knowingly collect personal data from individuals under 18. If you believe an individual under 18 has provided us personal data, please contact us and we will take appropriate steps to delete it.

If you have questions, concerns, complaints, or would like to exercise your rights, please contact us at:

Pharosyn
131 Continental Dr Suite 305, Newark, DE 19713, US
Email: privacy@pharosyn.info