Privacy Policy

Effective date: June 15, 2026

This Privacy Policy explains how Fuse Oncology, Inc. (“Fuse Oncology,” “we,” “us,” or “our”) collects, uses, and shares personal information of visitors to our website at fuseonc.com and related Fuse Oncology web pages (collectively, the “Site”).

1. Scope of this policy

This policy applies to personal information we collect through the Site and through related sales, marketing, and support interactions (for example, when you submit a contact form, request a demo, or register for an account or event).

This policy does not apply to:

·       Protected health information (PHI) or other patient or clinical data that Fuse Oncology processes on behalf of healthcare-provider customers through our software products. We handle that data as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA) and the terms of our customer agreements and Business Associate Agreements (BAAs), not under this website policy.

·       Information collected by our customers, partners, or other third parties through their own websites or services.

2. Information we collect

Information you provide to us

We collect personal information you choose to provide, including when you:

·       Submit a contact, demo-request, or support form;

·       Register for an account, webinar, or event;

·       Subscribe to communications or download content; or

·       Otherwise correspond with us.

This information may include your name, employer/organization, job title, business email address, telephone number, mailing address, the contents of your message and any attachments, and any other information you choose to provide.

Information we collect automatically

When you use the Site, we and our service providers automatically collect certain information through cookies, server logs, and similar technologies, including your IP address, device and browser type, operating system, Internet service provider, referring and exit pages, pages viewed, links clicked, and date/time stamps. We use this information to operate, secure, analyze, and improve the Site.

Information from third parties

We may receive business-contact and firmographic information from analytics, marketing, and lead-generation providers, and from publicly available sources, which we may combine with information we already hold.

3. How we use personal information

We use personal information to:

·       Provide, operate, maintain, secure, and improve the Site;

·       Respond to your inquiries and provide customer and sales support;

·       Send administrative information, and (where permitted) marketing and promotional communications about Fuse Oncology products, services, and events;

·       Understand and analyze how visitors use the Site and develop new features and offerings;

·       Detect, prevent, and address fraud, security incidents, and misuse; and

·       Comply with legal obligations and enforce our terms and agreements.

4. Legal bases for processing (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we process your personal information on one or more of the following legal bases: your consent; performance of a contract with you; our legitimate interests in operating, securing, and promoting our business (balanced against your rights); and compliance with legal obligations. Where we rely on consent, you may withdraw it at any time.

5. How we share personal information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share personal information only as described below:

·       Service providers — With service providers and processors that perform services on our behalf (for example, website hosting, analytics, marketing, CRM, and communications), under contracts that restrict their use of the information;

·       Corporate and advisors — With professional advisors and as needed for corporate transactions such as a merger, acquisition, financing, or sale of assets;

·       Legal and safety — When we believe disclosure is required to comply with law, legal process, or a governmental request, or to protect the rights, property, or safety of Fuse Oncology, our users, or others; and

·       With your consent — With your consent or at your direction.

If our practices change in the future — for example, if we begin using advertising partners that engage in cross-context behavioral advertising — we will update this policy and provide the opt-out mechanisms required by applicable law. See Section 9 for your rights.

6. Cookies and similar technologies

Like most websites, we use cookies and similar technologies to operate the Site, remember your preferences, measure performance, and understand how the Site is used. We use both session and persistent cookies, which may be set by us or by third-party providers. Today these include analytics and marketing platforms such as Google Analytics and HubSpot. We do not currently use cookies for targeted or cross-context behavioral advertising.

You can control cookies through your browser settings and, where available, through our cookie-preferences tool. Disabling some cookies may affect how the Site functions. Where required by law, we obtain consent before placing non-essential cookies. We also honor recognized opt-out preference signals (such as Global Privacy Control) where required.

7. Data retention

We retain personal information for as long as needed to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law. When personal information is no longer needed, we take reasonable steps to delete or de-identify it.

8. Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, and disclosure. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

9. Your U.S. state privacy rights

Depending on your state of residence (including California, Virginia, Colorado, Connecticut, Utah, Texas, and other states with comprehensive privacy laws), you may have the right to:

·       Know and access the categories and specific pieces of personal information we have collected about you;

·       Correct inaccurate personal information;

·       Delete personal information we have collected from you;

·       Obtain a portable copy of your personal information;

·       Opt out of the “sale” or “sharing” of personal information and of targeted/cross-context behavioral advertising; and

·       Limit the use of sensitive personal information, where applicable.

We will not discriminate against you for exercising these rights. To exercise a right, contact us using Section 13. We will verify your request and respond within the timeframes required by applicable law (for example, within 45 days under the California Consumer Privacy Act as amended by the CPRA, with a possible extension). You may use an authorized agent to submit a request on your behalf, subject to verification.

Do Not Sell or Share: We do not sell personal information or share it for cross-context behavioral advertising. If this changes, we will provide a clear opt-out method. You can manage cookies as described in Section 6, and we honor Global Privacy Control where required.

10. Your rights under GDPR/UK GDPR

If you are in the EEA or UK, you have the right to access, rectify, erase, restrict, and object to the processing of your personal information; the right to data portability; and the right to withdraw consent. You also have the right to lodge a complaint with your local data protection supervisory authority. We respond to verified requests within one month, extendable by up to two further months for complex requests.

International transfers: We are based in the United States, and your personal information may be processed in the United States and other countries. Where required, we use appropriate safeguards for international transfers, such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum.

11. Children’s privacy

The Site is intended for a business audience and is not directed to children. We do not knowingly collect personal information from children under 13 (or under 16 where a higher age applies). If you believe a child has provided us personal information, please contact us and we will take reasonable steps to delete it.

12. Third-party links

The Site may contain links to third-party websites and services that we do not control. This policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.

13. How to contact us and exercise your rights

If you have questions about this policy or wish to exercise your privacy rights, contact us at:

Fuse Oncology, Inc.

Attn: Privacy

584 State Farm Rd., Ste 211

Boone, NC 28607

Email: info@fuseonc.com

14. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Effective date” above and post the updated policy on this page. Material changes may be communicated through additional notice as required by law. Your continued use of the Site after an update takes effect constitutes acceptance of the revised policy.