DENOVIA / LEGAL

Privacy Policy

How we handle personal information when you visit our website, get in touch, or do business with us.

Last updated:

1. Who we are

This Privacy Policy describes how Denovia Inc., Denovia Labs Inc., and their subsidiaries and affiliates involved in your relationship with us (collectively, “Denovia,” “we,” “us,” or “our”) handle personal information. It applies to our website at denovialabs.com and our interactions with prospective and existing business partners, investors, newsletter subscribers, job applicants, and other contacts.

The Denovia entity with which you interact is responsible for the personal information it handles. This policy does not replace a separate privacy notice or agreement that applies to a particular service, employment relationship, or transaction. Privacy questions for either company can be directed to the contact below.

2. Information we collect

The information involved depends on how you interact with us:

  • Inquiries and business relationships: your name, email address, phone number, company or role, inquiry type, message, and information you provide about licensing, feedstock, offtake, media, or other business opportunities.
  • Investor inquiries: your name, contact details, company, country, investor type, investment range, and communication consent selections.
  • Newsletter subscriptions: your email address, any name you provide, selected areas of interest, and subscription or consent information.
  • Job applications: your name, contact details, location, position of interest, professional background, reasons for applying, and any CV or other information you send by email.
  • Correspondence and business records: information you share in emails, calls, meetings, or a business transaction, including information supplied by an authorized representative.
  • Website usage: technical and interaction data, such as IP address, browser and device information, pages visited, referral source, timestamps, clicks, scrolling, and cookie or similar identifiers. What is collected depends on the service, its settings, and your browser controls.

Please provide only information relevant to your request. Do not submit passwords, payment card details, government identification numbers, or sensitive personal information through general website forms. If you provide someone else’s information, you must have authority to do so.

3. How we use information

We use personal information to respond to inquiries; assess and manage business, partnership, licensing, and investor relationships; review job applications; provide requested information; manage subscriptions and communication preferences; operate and improve our website; detect spam and misuse; protect our systems; and meet applicable legal, regulatory, recordkeeping, and dispute-resolution obligations.

Where consent is required, we seek consent appropriate to the information and purpose. Where applicable law permits another basis, processing may be necessary to take steps you request, perform an agreement, comply with a legal obligation, or pursue legitimate business interests subject to your rights. Merely reading this policy does not constitute consent to every use of your information.

4. Newsletters and communications

When you subscribe, we use your email address and selected interests to send Denovia news and updates. Investor communications may also follow the contact preferences you select on the investor form. Submitting a general inquiry or job application does not by itself subscribe you to our newsletter.

You can withdraw marketing consent at any time by using the unsubscribe mechanism in a marketing message or emailing ir@denoviainc.com. We will action requests within the period required by applicable law. We may keep a limited record of your request to respect your preferences.

Unsubscribing from marketing does not prevent necessary replies to your inquiries or non-promotional communications about an existing relationship. Newsletter subscription records are stored using Supabase. Any email delivery service used to send a particular campaign will also process the recipient information needed to deliver it.

5. Analytics and tracking

Google Analytics: we use Google Analytics to understand visits, traffic sources, and how people use our website. Google processes technical and usage information and uses identifiers to distinguish visits and sessions. See how Google uses information from sites that use its services and the Google Privacy Policy.

Microsoft Clarity: we use Clarity for behavioral metrics, heatmaps, and session replay to understand navigation and improve the website. It records interactions such as clicks and scrolling and reconstructs the page experience. Clarity uses cookies and similar technologies; its handling of data is described in the Microsoft Privacy Statement. Microsoft may also use collected information for its own purposes described there, including improving products and advertising.

Hosting and security: our hosting and infrastructure services may process technical request logs to deliver pages, troubleshoot problems, and protect the website. Spam-prevention fields help identify automated form submissions.

6. Cookies and your choices

Cookies are small files stored by your browser. Similar technologies can store preferences or identify a browser or session. The categories used by this website include:

Website cookies and related technologies
Category / servicePurpose and examplesDuration
Necessary / preview accessdn_v3_site_session remembers successful access to the password-protected preview, where enabled.Up to 30 days.
Analytics / Google Analytics_ga and _ga_* distinguish browsers and maintain session information.Default expiry is 2 years; settings and browser limits can change this.
Analytics / Microsoft Clarity_clck and _clsk associate visits and page views with Clarity analytics. Microsoft may use additional identifiers described in its documentation.Varies by cookie and provider settings.
Embedded media / YouTubeVideos use YouTube’s privacy-enhanced embed domain. Loading or playing a video can send technical information to YouTube and involve storage or similar technologies.Varies by interaction and provider settings.

See the current Google Analytics cookie documentation and Clarity cookie documentation for provider details. Cookie expiry is separate from how long a provider retains information already collected.

You can block or delete cookies through your browser settings. Blocking necessary cookies may affect preview access; blocking cookies alone may not stop every form of technical or usage-data collection. Google also offers an Analytics opt-out browser add-on. Provider privacy pages describe additional controls.

Unless you previously declined, we load the standard Google Analytics and Microsoft Clarity tags when you visit. Google Analytics uses its ordinary configuration without Google Consent Mode or a custom country rule. Microsoft Clarity applies its own regional cookie-consent handling. Selecting Accept keeps Google Analytics enabled (or re-enables it after a rejection) and sends explicit analytics and advertising consent to Clarity. Decline or close the notice to disable Google Analytics collection and stop Clarity tracking. A saved rejection prevents both tags from loading on later visits. Your choice takes effect without refreshing the page. You can change it at any time using Cookie settings in the footer. We store your choice in this browser for up to 180 days using local storage (dn_v3_cookie_consent); if browser storage is unavailable, we may ask again on your next visit. Embedded videos are separate: loading or playing a video can still send information to its provider. Opting out does not delete information previously received by a provider. Contact us if you have questions or wish to make a privacy request.

7. Sharing and international processing

Information may be handled by the relevant Denovia companies and authorized personnel, and by service providers supporting hosting, database storage, communications, analytics, recruitment, professional advice, or business administration. Our website uses Vercel for hosting and Supabase for newsletter, investor, and career submission storage, as well as the analytics and media providers described above.

We may disclose information where required or permitted by law, to respond to valid legal requests, protect rights and safety, or in connection with a proposed or completed corporate transaction, subject to applicable confidentiality and privacy requirements. Other disclosures require an appropriate legal basis, including consent where required.

Providers and business contacts may process information outside your province or country, including outside Canada. Information processed abroad may be accessible to courts or authorities under local law. We remain responsible for meeting applicable requirements for information entrusted to service providers. Contact us for information about processing arrangements relevant to your data.

8. Retention and security

Our retention approach is to keep personal information only for as long as reasonably needed for the purpose for which it was collected, including ongoing business relationships, recruitment review, legal obligations, disputes, and consent or unsubscribe records. The period depends on the type of record and its purpose. When information is no longer required, it should be securely deleted or de-identified, subject to backup cycles and legal holds.

We use safeguards appropriate to the sensitivity of the information, including restricted access and security measures provided by our infrastructure services. No internet transmission or storage system is completely secure. Please contact us if you believe information has been handled improperly.

9. Your privacy rights

Depending on applicable law, you may request access to your personal information, correction of inaccuracies, withdrawal of consent, deletion, restriction of processing, portability, or objection to certain uses. These rights are subject to legal limits and exceptions; we may need to retain some information or be unable to continue a service after consent is withdrawn.

Send requests to ir@denoviainc.com with “Privacy request” in the subject line. Tell us which interaction your request concerns. We may ask for proportionate information to verify your identity or authority, and will respond within applicable legal time limits.

You may also raise a concern with the privacy regulator responsible for your location, including the Office of the Privacy Commissioner of Canada or an applicable provincial privacy commissioner.

10. Other websites and children

External links and embedded services have their own privacy practices. Review their notices before interacting with them. Our website and business offerings are intended for a professional and general adult audience, not directed to children. If you believe a child has provided us with personal information, contact us so we can assess and address it.

11. Changes to this policy

We may update this policy to reflect changes in our practices, services, or legal requirements. The date above identifies the latest revision. Where required, we will provide additional notice or seek consent before using information for a new purpose.

12. Contact us

For privacy questions, requests, or complaints, contact:

Denovia Inc. / Denovia Labs Inc.
Attention: Privacy inquiries
ir@denoviainc.com