Enliven Therapeutics, Inc. Privacy Policy

As adopted on December 1, 2020, amended on May 30, 2025 and June 25, 2025, and last amended on March 17, 2026

Enliven Therapeutics, Inc. and its subsidiaries (collectively “Enliven”, “we”, “us” or “our”) value the privacy of individuals who visit, interact with, or otherwise use our website and related services (collectively, our “Site”). This privacy policy (the “Privacy Policy”) explains how we collect, use, and share information from or about visitors to our Site. By using our Site, you agree to the collection, use, disclosure, and procedures this Privacy Policy describes. If you do not agree, please do not use the Site.

A. Information You Provide to Us

Communications. If you contact us directly, we may receive additional information about you. For example, when you email us, we will receive your email address, the contents of a message or attachments that you may send to us, and other information you choose to provide.

Careers. If you decide that you wish to apply for a job with us, you may submit your contact information and your resume through our website. We will collect the information you choose to provide on your resume, such as your contact information, education and employment experience.

B. Information We Collect When You Use Our Site

Location Information. When you use our Site, we may infer your general location information (for example, your IP address may indicate your general geographic region).

Device Information. We may receive information about the device and software you use to access our Site, including internet protocol (IP) address, web browser type, operating system version, phone carrier and manufacturer, application installations, and device identifiers, mobile advertising identifiers, and push notification tokens.

Usage Information. To help us understand how you use our Site and to help us improve it, we may automatically receive information about your interactions with our Site, like the pages or other content you view, the searches you conduct, your comments, any content you email, and the dates and times of your visits.

Information from Cookies and Similar Technologies. Please see Section C – “Information from Cookies and Similar Technologies” for details on how cookies and similar technologies are used on the Site

C. Cookies and Similar Technologies

We use cookies and similar technologies (such as pixel tags and web beacons) to operate and secure our Site, improve functionality, understand how the Site is used, and support analytics and advertising activities. Cookies are small text files placed on your device when you visit a website. Some cookies are set by us, while others are set by third parties whose services appear on or are used by our Site.

Where required by applicable law, you will be presented with a cookie banner that allows you to accept or reject non-essential cookies or manage your preferences by category. You can withdraw or modify your consent at any time by accessing the cookie preference settings available on our Site.

We use cookies that are strictly necessary for the website to function properly. We also use additional cookies such as analytics, functional, and advertising cookies, to help us understand how the site is used and to improve your experience. If we are required to obtain your consent for the use of such optional cookies, we will do so prior to using them. 

 

D. Information We Receive from Third Parties

Background Checks. We work with third party partners to perform background checks on people who apply for a job with us and receive publicly available information such as criminal history and education verification, where permitted by law.

E. How We Use the Information We Collect

We use the information we collect:

  • To provide, maintain, improve, and enhance our Site;
  • To understand and analyze how you use our Site and improve Site features and functionality;
  • To evaluate and process your job application, if you choose to apply for a job with us;
  • To find and prevent fraud, and respond to trust and safety issues that may arise;
  • For compliance purposes, including enforcing our legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency; and
  • For other purposes for which we provide specific notice at the time the information is collected.

F. How We Share the Information We Collect

We do not sell your personal data. We may disclose personal data to third parties under the following circumstances:

Vendors and Site Providers. We may share information we receive with vendors and service providers retained in connection with the provision of our Site.

As Required by Law and Similar Disclosures. We may access, preserve, and disclose your information if we believe doing so is required or appropriate to: (a) comply with law enforcement requests and legal process, such as a court order or subpoena; (b) respond to your requests; or (c) protect your, our, or others' rights, property, or safety.

Merger, Sale, or Other Asset Transfers. We may disclose and transfer your information to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell, liquidate, or transfer all or a portion of our business or assets. The use of your information following any of these events will be governed by the provisions of this Privacy Policy in effect at the time the applicable information was collected.

Consent. We may also disclose information from or about you or your devices with your permission.

G. Third Parties

Our Site may contain links to other websites, products, or services that we do not own or operate. We are not responsible for the privacy practices of these third parties. Please be aware that this Privacy Policy does not apply to your activities on these third-party services or any information you disclose to these third parties. We encourage you to read their privacy policies before providing any information to them.

H. Security

We make reasonable efforts to protect your information by using physical and electronic safeguards designed to improve the security of the information we maintain. However, as our Site is hosted electronically, we can make no guarantees as to the security or privacy of your information.

I. Children’s Privacy

Our Site is not directed to children under the age of sixteen (16). We do not knowingly collect personal data from children in connection with our Site. If we become aware that an individual under the age of sixteen has provided personal data through our Site, we will immediately remove the individual’s personal data. If you learn that a child has provided us with personal data in violation of this Privacy Policy, then you may alert us at legal@enliventherapeutics.com.

J. International Visitors

Our Site is hosted in the United States and primarily intended for visitors located within the United States. If you choose to use the Site from the European Union or other regions of the world with laws governing data collection and use that may differ from U.S. law, then please note that you are transferring your personal data outside of those regions to the United States for storage and processing. Also, we may transfer your data from the U.S. to other countries or regions in connection with storage and processing of data, fulfilling your requests, and operating the Site. 

K. Lawful Basis for Processing your Information

If you reside in the United Kingdom, European Economic Area (“EEA”) or Switzerland, we process your personal data only where we have a valid legal basis under applicable data protection laws. The legal bases we rely on include:

  • Your consent, where provided;
  • Performance of a contract (e.g., job application processes);
  • Compliance with legal obligations (e.g., regulatory compliance);
  • Our legitimate interests (e.g., improving our website, ensuring security), where such interests are not overridden by your rights and freedoms.

For individuals located in the EEA, UK, or Switzerland, the table below summarizes the legal bases on which we rely, for ease of reference only.

Processing Purpose Legal Basis
To provide services and operate the Site Contract / Legitimate interests

To communicate with you

For compliance, fraud prevention, and security

To create anonymous or aggregated analytics

 These processing activities are based on our legitimate interests. We consider and balance potential impact on your rights and do not process your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
To comply with applicable laws Processing is necessary to comply with our legal obligations.
Where consent is requested Processing is based on your consent. Where we rely on consent, you have the right to withdraw it at any time.

L. Data Retention

We will retain personal data for as long as is necessary to fulfill the purpose for which it was collected (or for any subsequent purpose that is compatible with the original purpose).  This does not affect your right to request that we delete your personal data before the end of its retention period.  We may archive personal data (storing it in inactive files) for a certain period prior to its final deletion, as part of our ordinary business continuity procedures. In some circumstances we may anonymize your personal data (so that it can no longer be associated with you) in which case we may use this information indefinitely without further notice to you.

M. Your Rights

Depending on your location, you may have certain rights regarding your personal data, including the right to: (i) access, rectify, or erase your personal data; (ii) restrict or object to certain processing; (iii) withdraw consent at any time (where processing is based on consent); (iv) receive a copy of your data in portable form; and (v) lodge a complaint with your local data protection authority if you believe that we are not complying with data protection laws. You may also have the right to opt out of certain uses of your information, such as targeted advertising or the sale or sharing of personal data, where applicable. To exercise your rights, please contact us at legal@enliventherapeutics.com.

A. Changes to this Privacy Policy

We will post any adjustments to the Privacy Policy on this page, and the revised version will be effective when it is posted. If we materially change the ways in which we use or share personal data previously collected from you through the Site, we will notify you through the Site, by email, or other appropriate communication.

N. Contact Information

Enliven is responsible for processing your information. If you have any questions, comments, or concerns about our processing activities, please email us at legal@enliventherapeutics.com.
If you’re located in the EEA, the United Kingdom, or Switzerland, you may also contact: