Skip to main content
Coralis Bio

Privacy Policy

Effective date: April 22, 2026

1. Identity of the Controller

Coralis Bio is the data controller for this website. We maintain offices in Boston, San Francisco, and San Diego. For privacy-related questions, contact us at hello@coralis.bio.

2. What We Collect

This website is a static marketing site. It does not currently include a signup form, account system, or document upload flow. We collect only the following categories of data:

  • Contact information you choose to send us — if you email us directly, we receive your email address and any information you include in your message.
  • Aggregate site analytics — we use Google Analytics to understand overall traffic and page usage patterns in aggregate.

3. Legal Basis for Processing

Where the GDPR applies, we rely on the following legal bases:

  • Legitimate interests (Article 6(1)(f)) — to review and respond to inbound business correspondence you initiate by emailing us, and to measure aggregate site usage so we can improve the site.

4. How We Use Your Data

We use this information for the following limited purposes:

  • To respond to messages you send to us and continue the related conversation.
  • To understand high-level site usage patterns in aggregate.

We do not sell or rent your personal information.

5. Data Retention

We retain email correspondence for as long as reasonably necessary to respond to your inquiry and maintain an accurate business record of the conversation. Aggregate analytics are retained within our analytics tooling according to our account settings.

6. Third-Party Processors

We use the following service providers in connection with this website:

  • Amazon Web Services, Inc. — static site hosting and content delivery via Amazon S3 and Amazon CloudFront.
  • Google LLC — Google Analytics for aggregate web analytics.

7. International Transfers

Our service providers may process data in the United States or other jurisdictions where they operate. If you contact us from outside the United States, your information may be transferred to the United States when it is handled by us or our providers.

8. Your Rights Under GDPR

If you are located in the European Economic Area, you have the following rights regarding your personal data:

  • Right of access (Article 15) — You may request a copy of the personal data we hold about you.
  • Right to rectification (Article 16) — You may request that we correct inaccurate or incomplete personal data.
  • Right to erasure (Article 17) — You may request that we delete your personal data.
  • Right to restriction of processing (Article 18) — You may request that we limit how we use your data.
  • Right to data portability (Article 20) — You may request your data in a structured, commonly used, machine-readable format.
  • Right to object (Article 21) — You may object to the processing of your personal data based on legitimate interest.
  • Right to withdraw consent — You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
  • Right to lodge a complaint — You have the right to lodge a complaint with a supervisory authority in your country of residence.

9. Your Rights Under California Law (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

  • Categories of personal information collected: Contact details you voluntarily send us and aggregate analytics data collected via Google Analytics.
  • Business purpose: To respond to inbound inquiries and understand aggregate site usage.
  • Sale of personal information: We do not sell your personal information to third parties.
  • Right to know: You may request disclosure of the personal information we have collected about you.
  • Right to delete: You may request that we delete the personal information we have collected from you.
  • Right to opt-out: As we do not sell personal information, this right does not apply. Should our practices change, we will provide a clear opt-out mechanism.

10. Cookies and Local Storage

We do not use advertising cookies on this site. We use Google Analytics for aggregate site measurement, which sets first-party cookies to distinguish unique visitors and sessions. You can opt out of Google Analytics across all sites by installing the Google Analytics Opt-out Browser Add-on.

11. How to Exercise Your Rights

To exercise any of the rights described in this policy, email hello@coralis.bio. We will respond to your request within 30 days. We may ask you to verify your identity before processing your request.

12. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the effective date at the top of this page. We encourage you to review this policy periodically.