Privacy Notice and Policy

Welcome to the Privacy Policy for Nautilus Biotechnology, Inc. (which, along with any affiliates or subsidiaries, is also referred to herein as “Nautilus”, “we”, “us”, “our” or “ours”). Please review this Privacy Policy (“Privacy Policy”) carefully, as it explains how we collect, use, disclose, and otherwise process Personal Information from individuals (“Users”, “you,” and/or “your”) who use our websites that link to this Privacy Policy, including www.nautilus.bio (the “Sites”), and the related content, platform, services, products, and other functionality offered on or through our services (collectively, the “Services”). It does not address our privacy practices relating to Nautilus’ employees and other personnel.

• Our Collection of Personal Information

We collect Personal Information from or about you or your devices from various sources, as described below. In this Privacy Policy “Personal Information” means any information relating to an identified or identifiable individual, and may include your name, institution, contact information, payment details and location details.

In some cases, provision of your Personal Information may be necessary to provide you with our Services. In these cases, if you fail to provide certain Personal Information when requested, we may not be able to give you access to our Services. Where required by applicable law, we indicate whether and why you must provide us with your Personal Information, as well as the consequences of failing to do so.

Personal Information You Provide to Us

Registration and profile information: When you sign up for an account, register as an on-line customer or as a visitor to use our Services, we ask you for Personal Information such as your contact details (first name, last name, email address), password, institution type, research area of interest, application area of interest and geographic location. We may also receive your telephone number(s), which may be received and stored by third party service providers on our behalf. We do not sell or share your telephone number(s) or opt-in consent data to third parties for their own promotional purposes.

Communications: If you contact us directly or subscribe to receiving marketing emails from us, we collect Personal Information about you, such as your email address, first name, last name, company name, institution type, research area of interest, application area of interest and the contents of a message or attachments that you may send to us.

Careers: If you decide that you would like to apply for a job with us, or you would like to submit an inquiry in response to career opportunities, you may submit your contact details and your resume online. We will collect the Personal Information you choose to provide on your resume, such as your education, employment experience, and other information you choose to provide. If you apply for a job with us through a third-party platform (such as LinkedIn or Lever), we will collect Personal Information you make available to us through such third-party platform.

Order information: When you order a product or a service we collect your contact and ordering details, including your payment related information. If we employ third party payment processors, our third-party payment processors may collect and process your payment-related information, such as credit/debit card information, billing address, or other financial information.

Personal Information Collected via Automatic Means

In addition to the Personal Information described above, when you are using our Services, Nautilus and our third-party partners are automatically collecting the following  Personal Information:

Usage Information. To help us understand how you use our Services and to help us improve them, we automatically receive Personal Information about your interactions with our Services, such as the pages you visited, the content you access, the functions, products, or services you use, and the date and time of your visit(s).

Device Information. We receive Personal information about the device and software you use to access our Services, including your computer’s operating system, your computer’s unique identifier, the browser, and the Internet Protocol (IP) address (which may provide us with your general location).

Information from Cookies and Similar Technologies. We and our third-party providers use (i) cookies or small data files that are stored on an individual’s computer or your browser and (ii) other, related technologies, such as web beacons, pixels, embedded scripts, location-identifying technologies and logging technologies (collectively, “cookies”) to collect your Personal Information and to distinguish you from other users of our Services. Our third-party partners, such as analytics and advertising partners, may use these technologies to collect information about your online activities over time and across different services. We may use both session cookies and persistent cookies. A session cookie disappears after you close your browser. A persistent cookie remains after you close your browser and may be used by your browser on subsequent visits to our Services.

This helps us monitor and analyze how you use and interact with our Services. It also helps us and our partners to determine products and services that may be of interest to you. Please note that if you delete or choose not to accept cookies from the Service, you may not be able to utilize the features of the Service to their fullest potential. For more information about these practices and your choices regarding cookies, please see the section “Your Rights and Choices” and “Third Party Data Collection and Online Advertising” below.

We use the following cookies on our Services:

• Strictly Necessary Cookies: Some cookies are strictly necessary to make our Services available to you and you cannot use them without this type of cookie. We use this information to provide you with our Services, prevent misuse, and ensure our Services are working properly.
• Functional Cookies: These are used to recognize you when you return to our Services. This enables us to personalize our content for you, to provide you with a customized experience on our Services, and to remember your preferences and various settings (for example, your choice of language or region).
• Analytics or Performance Cookies: We also use cookies for analytics purposes to better understand how you use our Services, to measure the effectiveness of our customer communications, to diagnose and fix technology problems, and otherwise enhance our Services. We may use our own analytics cookies or third-party analytics providers to collect and process certain data analytics on our behalf.
• Advertising Cookies: We or our third-party advertising partners place cookies to show you ads we think may interest you. For example, we may show you ads about our products and services on third party websites and apps or show you ads about third parties’ products and services on our websites and apps.

A list of the Cookies that we use on our Services is available here

Personal Information We Receive from Third Parties 

Third-Party Services. You may also post photos, comments, or reviews on our pages available through third-party platforms, including LinkedIn and X. If you do so, we and other users on those third-party platforms may be able to view the Personal Information you make available through these third-party platforms.  In the context of employment inquiries, we may receive your Personal Information from third parties in performing, e.g., background checks, prior employment inquiries, education and experience.  We may also receive your Personal Information from publicly available resources, such as your public social media accounts, and other public websites.

Our Partners. We may receive additional Personal Information about you from third parties such as data or marketing partners and combine it with other Personal Information we have about you.

• How We Use Your Personal Information

In accordance with this Policy, Nautilus will use and process your Personal Information in conducting our business (e.g., to process any orders, transactions or requests for information, evaluate your candidacy for a job opening, etc.). We may also use and process your Personal Information for our marketing and advertising purposes (e.g., developing and providing promotional and advertising materials that may be relevant, valuable or otherwise of interest to you); to personalize the types of information you receive from us, to store your interests and preferences in order to customize your use of our Services, to communicate with you (e.g., in response to requests for information, for product support and/or for billing issues, provide you with updates and other information relating to our Services, etc.), to facilitate transactions and payments, authenticate customers and users, to evaluate and improve how our Services are accessed and used, to compile, identify and analyze trends and interests that help us improve our Services; to develop and improve the content and operation of our Services to better serve our customers and users, to help maintain the safety, security and integrity of our property and Services, technology assets and business, for compliance purposes, (including enforcing our Terms of Use or other legal rights or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency), to prevent, investigate, or provide notice of fraud or unlawful criminal activity,  to process job applications, and for other purposes that you consent to.

Where you choose to contact us, we may need additional information to fulfill the request or respond to inquiries. We may provide you with additional privacy-related information where the scope of the inquiry/request and/or Personal Information we require fall outside the scope of this Privacy Policy. In that case, the additional privacy notice will govern how we may process the information provided at that time.

Legal Bases for Processing European Personal Information

If you are located in the European Economic Area (“EEA”), Switzerland or the United Kingdom (“UK”) (together “Europe”), we only process your Personal Information when we have a valid “legal basis,” including as set forth below.

• Consent. You have consented to the use of your Personal Information. For example, we may process your Personal Information to send you marketing communications or to use cookies where you have consented to such use.

• Contractual Necessity. We need your Personal Information to provide you with our Services. For example, we may need to process your Personal Information to respond to your inquiries or requests.

• Compliance with a Legal Obligation. We have a legal obligation to use your Personal Information. For example, we may process your Personal Information to comply with tax and accounting obligations.

• Legitimate Interests. We or a third party have a legitimate interest in using your Personal Information. Specifically, we have a legitimate interest in using your Personal Information for product development and internal analytics purposes, and otherwise to improve the safety, security, and performance of our Services. We only rely on our or a third party’s legitimate interests to process your Personal Information when these interests are not overridden by your rights and interests.

• How We Disclose Your Personal Information

We share, transmit, disclose, grant access to, make available, or provide Personal Information with third parties, as follows:

• Nautilus Entities: We share Personal Information with other companies owned or controlled by Nautilus, and other companies owned by or under common ownership as Nautilus, which also includes our subsidiaries (i.e., any organization we own or control) or our ultimate holding company (i.e., any organization that owns or controls us) and any subsidiaries it owns for any of the purposes described in this Privacy Policy, particularly when we collaborate in providing the Services.

• Your Employer / Company: If you interact with our Services through your employer or company, we may disclose your Personal Information to your employer or company, including another representative of your employer or company.

• Service Providers: We engage third-party service providers that perform business or operational services, such as distribution, marketing, customer service and communications, payment processing, website hosting, infrastructure provisioning, IT services, analytics services, employment application-related services, and administrative services.

• Analytics Partners. We use analytics services such as Google Analytics to collect and process certain analytics data. These services may also collect Personal Information about your use of other websites, apps, and online resources. You can learn more about Google’s practices by visiting https://www.google.com/policies/privacy/partners/, and opt-out of them by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout?hl=en.

• Ad Networks and Advertising Partners: We work with third-party ad networks and advertising partners to deliver advertising and personalized content on our Services. These parties may also collect Personal Information directly from a browser or device when an individual visits our Services through cookies or other data collection technologies. This information is used to provide and inform targeted advertising, as well as to provide advertising-related services such as reporting, attribution, analytics and market research. Please see the “Third-Party Data Collection and Online Advertising” section below for more information.

• Merger, Sale, or Other Asset Transfers: We disclose your Personal Information to service providers, advisors, potential transactional partners, or other third parties in connection with a corporate business transaction, such as a merger, acquisition, joint venture, or financing or sale of company assets. We may disclose your Personal Information to a third party during negotiation of, in connection with or as an asset in such a corporate business transaction. Personal Information may also be disclosed in the event of insolvency, bankruptcy or receivership.

• As Required by Law and Similar Disclosures: We may also disclose your Personal Information to law enforcement agencies, regulatory bodies, public authorities or pursuant to the exercise of legal proceedings in situations where we believe doing so is required or appropriate to: protect your, our, or others’ rights, property, or safety; respond to your requests; or comply with law enforcement requests and legal process, including to meet national security or law enforcement requirements.

• With Your Consent: We may also disclose your Personal Information to third parties with your consent.

Third Party Data Collection and Online Advertising

We participate in interest-based advertising and may use third party advertising companies to serve you targeted advertisements based on your browsing history. We permit third party online advertising networks, social media companies and other third-party services, to collect Personal Information about your use of our online services over time so that they may play or display ads on our Services, on other websites or services you may use, and on other devices you may use. Typically, though not always, the Personal Information used for interest-based advertising is collected through tracking technologies, such as cookies, web beacons, embedded scripts, location-identifying technologies, and similar technology, which recognize the device you are using and collect information, including click stream information, browser type, time and date you visited the Sites, AdID, precise geolocation and other information. We may share a common account identifier (such as a hashed email address or user ID) with our third-party advertising partners to help identify you across devices. We and our third-party partners use this Personal Information to make the advertisements you see online more relevant to your interests, as well as to provide advertising-related services such as reporting, attribution, analytics and market research. We may also use services provided by third parties (such as social media platforms) to serve targeted ads to you and others on such platforms. We do this by providing a hashed version of your email address or other information to the platform provider.

Please see “Online Ads” of the  “Your Rights and Choices” section below, to learn how you can opt out of interest-based advertising.

We engage in the following:

• Social Media Widgets and Advertising. Our Services may include social media features, such as the Facebook “Like” button, Pinterest, Instagram, Twitter or other widgets. These social media companies may recognize you and collect information about your visit to our Services, and they may set a cookie or employ other tracking technologies. Your interactions with those features are governed by the privacy policies of those companies.

• Social Media Platforms. We may display targeted advertising to you through social media platforms, such as Facebook, Twitter, Bluesky, Instagram, LinkedIn, and other social media forums. These companies have interest-based advertising programs that allow us to direct advertisements to users who have shown interest in our services while those users are on the social media platform, or to groups of other users who share similar traits, such as likely commercial interests and demographics. We may share a unique identifier, such as a user ID or hashed email address, with these platform providers or they may collect information from our website visitors through a first-party pixel, in order to direct targeted advertising to you or to a custom audience on the social media platform. These advertisements are governed by the privacy policies of those social media companies that provide them. If you do not want to receive targeted ads on your social networks, you may be able to adjust your advertising preferences through your settings on those networks.

• Third Party Partners.  We work with a variety of third-party partners to provide advertising services. For example, we use Google Analytics to recognize you and link the devices you use when you visit our Services on your browser or mobile device, log in to your account on our Services, or otherwise engage with us.  We share a unique identifier, like a user ID or hashed email address, with Google to facilitate the service. Google Analytics allows us to better understand how our users interact with our Services and to tailor our advertisements and content to you.  For information on how Google Analytics collects and processes data, as well as how you can control information sent to Google, review Google’s website, “How Google uses data when you use our partners’ sites or apps” located at www.google.com/policies/privacy/partners/. You can learn about Google Analytics’ currently available opt-outs, including the Google Analytics Browser Ad-On here: https://tools.google.com/dlpage/gaoptout/. We may also utilize certain forms of display advertising and other advanced features through Google Analytics. These features enable us to use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick advertising cookie) or other third-party cookies together to inform, optimize, and display ads based on your past visits to the Services.  You may control your advertising preferences or opt-out of certain Google advertising products by visiting the Google Ads Preferences Manager, currently available at  https://google.com/ads/preferences, or by visiting NAI’s online resources at http://www.networkadvertising.org/choices.

For more information about these practices and your choices regarding cookies, please see the  “Your Rights and Choices” section below.

• Your Rights and Choices 

Email Communications Preferences. You can stop receiving promotional email communications from us via the link provided in the email. You may not opt-out of service-related communications (e.g., account verification, transactional communications, changes/updates to features of the Services, technical and security notices).

Modifying or Deleting Your Personal Information. If you have any questions about reviewing, modifying, or deleting your Personal Information, you can contact us directly at info@nautilus.bio. We may not be able to modify or delete your Personal Information in all circumstances.

How to Block Cookies. Depending on your browser or mobile device, you may be able to set your browser to delete or notify you of cookies by actively managing the settings on your browser or mobile device. You can change your browser settings to block or notify you when you receive a cookie, delete cookies or browse our Services using your browser’s anonymous usage setting. Please refer to your browser instructions or help screen to learn more about how to adjust or modify your browser settings. Please note that doing so may negatively impact your experience using the sites, as some features and services on our sites may not work properly. Depending on your mobile device and operating system, you may not be able to delete or block all cookies. You may also set your e-mail options to prevent the automatic downloading of images that may contain technologies that would allow us to know whether you have accessed our e-mail and performed certain functions with it.

Online Ads. To learn more about interest-based advertising and how you may be able to opt-out of some of this advertising, you may wish to visit the Digital Advertising Alliance’s (DAA) resources and/or the Network Advertising Initiative’s (NAI) online resources, at http://www.aboutads.info/choices or http://www.networkadvertising.org/choices/. You may also be able to limit interest-based advertising through the settings menu on your mobile device by selecting “limit ad tracking” (iOS) or “opt-out of interest-based ads” (Android). You may also be able to opt-out of some — but not all — interest-based advertising served by mobile ad networks by visiting http://youradchoices.com/appchoices and downloading the mobile AppChoices app. You may control your advertising preferences or opt-out of certain Google advertising products by visiting the Google Ads Preferences Manager, currently available at https://google.com/ads/preferences, or by visiting NAI’s online resources at http://www.networkadvertising.org/choices.

Please note that when you opt out of receiving interest-based advertisements, this does not mean you will no longer see advertisements from us or on our online services. It means that the online ads that you do see from DAA program participants should not be based on your interests. We are not responsible for the effectiveness of, or compliance with, any third-parties’ opt-out options or programs or the accuracy of their statements regarding their programs. In addition, third parties may still use cookies to collect information about your use of our online services, including for analytics and fraud prevention as well as any other purpose permitted under the DAA’s Principles.

Your European Privacy Rights. If you are located in Europe, you have the additional rights described below:

• You may request access to the Personal Information we maintain about you, update and correct inaccuracies in your Personal Information, restrict or object to the processing of your Personal Information, have your Personal Information anonymized or deleted, as appropriate, or exercise your right to data portability to easily transfer your Personal Information to another company. In addition, you also have the right to lodge a complaint with a supervisory authority, including in your country of residence, place of work or where an incident took place.

• You may withdraw any consent you previously provided to us regarding the processing of your Personal Information at any time and free of charge. We will apply your preferences going forward and this will not affect the lawfulness of the processing before you withdrew your consent.

You may exercise these rights by contacting us using the contact details as indicated in the “Contact Us” section below. Before fulfilling your request, we may ask you to provide reasonable information to verify your identity. Please note that there are exceptions and limitations to each of these rights, and that while any changes you make will be reflected in active user databases instantly or within a reasonable period of time, we may retain Personal Information for backups, archiving, prevention of fraud and abuse, analytics, satisfaction of legal obligations, or where we otherwise reasonably believe that we have a legitimate reason to do so.

• Children’s Personal Information

Our Services are not directed to, and we do not intend to, or knowingly, collect or solicit Personal Information from children under the age of 16. If an individual is under the age of 16, they should not use our Services or otherwise provide us with any personal information either directly or by other means. If a child under the age of 16 has provided Personal Information to us, then please alert us at info@nautilus.bio or otherwise as indicated in the “Contact Us” section below.

• Retention

We take measures to delete your Personal Information or keep it in a form that does not permit identifying you when your Personal Information is no longer necessary for the purposes for which we process it unless we are required by law to keep your Personal Information for a longer period. When determining the specific retention period, we consider various factors, such as the type of service provided to you, the nature and length of our relationship with you, and mandatory retention periods provided by law and the statute of limitations.

• Third-Parties

Please note that this Privacy Policy does not apply to any third party websites that are linked on our Services (e.g., social media widgets) or that may provide links to our Services, and your use of any third party websites shall be governed by the terms of use, privacy and other policies, if any, of such other websites. Nautilus accepts no responsibility for, and makes no representations as to the security and/or privacy of any such third party websites. To learn about the personal information practices of third parties, please visit their respective privacy policies.

• Cross-Border Personal Information Transfers

If you are located in Europe, we may transfer your Personal Information outside of Europe to other countries or regions in connection with its storage and processing, fulfilling your requests, and operating the Services, including to the U.S. We will comply with applicable European protection laws when transferring your Personal Information outside Europe. In particular, we may transfer your Personal Information to countries which have been found to provide adequate protection by the competent authorities as appropriate, use contractual protections for the transfer of Personal Information, transfer to recipients who have adopted binding corporate rules, or rely on an appropriate legal derogation.

For more information about how we transfer outside Europe, or to obtain a copy of the contractual safeguards we use for such transfers, you may contact us using the contact details as indicated in the “Contact Us” section below.

• Updates to this Privacy Policy

We may update this Privacy Policy from time to time. When we make changes to this Privacy Policy, we will change the date listed at the bottom of this Privacy Policy. If we make material changes to this Privacy Policy, we will notify individuals by email to their registered email address, by posting on our Services, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided.

• Contact Us

Nautilus Biotechnology, Inc. is the controller or entity responsible for processing your Personal Information. If you have any questions or requests in connection with this Privacy Notice or other privacy-related matters, please send an email to info@nautilus.bio or write to us at 2701 Eastlake Avenue East Seattle, WA 98102, U.S.A.

• Region-Specific Disclosures

1. Nevada

If you are a resident of the State of Nevada in the United States, Chapter 603A of the Nevada Revised Statutes permits a Nevada resident to opt out of future sales of certain covered information that a website operator has collected or will collect about the resident. If you would still like to submit such a request, please contact us at info@nautilus.bio.

1. Your California Privacy Rights (“Shine the Light”)

We do not rent, sell, or share information about you with nonaffiliated companies for their direct marketing purposes, unless we have your permission.

Last updated: February 1, 2026