PRIVACY POLICY

Last Updated: August 16, 2026
Effective Date: August 16, 2026

AnidasoHub, Inc. ("AnidasoHub," "we," "us," or "our") values the privacy of individuals who use our website and related services (collectively, our "Services" or "Platform"). This privacy notice (the "Privacy Notice") explains how we collect, use, and share (collectively, "process") personal information. Your use of our Services is also subject to our Terms of Service.

Our Services include our AI assistant, Anida, which helps you find relevant clinical trials by telephone, through the chat feature on our website, and within third-party AI platforms that you may already use, such as OpenAI's ChatGPT and Anthropic's Claude. Where this Privacy Notice refers to "our AI assistant" or "Anida," it means this feature of our Services; AnidasoHub, Inc. is the company that provides the Services and is responsible for your personal information.

We may update this Privacy Notice from time to time in our sole discretion. If we do, we'll let you know by posting the updated Privacy Notice on our website, and/or we may also send other communications as required by applicable law.

PERSONAL INFORMATION WE COLLECT

Personal Information You Provide to Us

We collect personal information that you provide to us when you contact us, express interest in clinical trials, or otherwise use our Services.

The personal information we collect may include:

• Contact Information: Name, email address, phone number, and mailing address
• Health Information: Information about your medical conditions, medical history, current treatments, medications, symptoms, and other health-related information necessary for clinical trial matching
• Demographic Information: Date of birth, age, gender, race/ethnicity (optional), and location (state, city, and ZIP code, which we use to identify research sites near you)
• Communication Records: Records of your communications with us, including phone call recordings, emails, and text messages
• Newsletter Subscription: If you subscribe to our newsletter, we collect your email address and preferences

Interactions With Our AI Assistant by Telephone and Website Chat

When you call our toll-free number or use the chat feature on our website, you interact with our AI assistant, Anida, which is designed to help you find clinical trials.

During phone calls, we collect:

• Voice recordings of your conversation with our AI assistant
• Transcripts of the conversation
• Call metadata including date, time, duration, and phone number

During chat on our website, we collect:

• The messages you exchange with our AI assistant, including your responses to pre-screening questions
• Any contact information you choose to provide in order to be connected with a research site

Information Collected Automatically

When you visit our website, we automatically collect certain information about your device and how you interact with our Services. This includes information such as your IP address, browser type, operating system, pages visited, time spent on pages, and other usage information.

HOW WE USE PERSONAL INFORMATION

We use personal information to provide, improve, and personalize our Services, to communicate with you, to ensure security, and to comply with legal obligations.

To Provide Our Services

• Clinical Trial Matching: Using your health information to identify clinical trials that may be suitable for you
• Communication: Sending you information about matched clinical trials via email, text message, or phone
• Connecting with Research Sites: Facilitating your connection with clinical trial sponsors and research sites for further eligibility evaluation
• Customer Support: Responding to your inquiries and providing assistance

To Improve Our Services

• Analyzing how our Services are used to improve functionality and user experience
• Using call recordings for quality assurance and compliance purposes
• Improving the accuracy and efficiency of our trial matching

We do not use your personal information, including call recordings, transcripts, chat messages, or health information, to train artificial intelligence models.

To Communicate With You

• Providing updates about clinical trial matches
• Sending our newsletter with educational content about clinical trials (only if you subscribe)
• Responding to your requests and questions
• Notifying you about changes to our Services

You can unsubscribe from our newsletter at any time by clicking the "unsubscribe" link at the bottom of any newsletter email.

For Security and Legal Compliance

• Detecting, preventing, and addressing fraud, security incidents, and other harmful activity
• Complying with legal obligations and protecting our legal rights
• Enforcing our Terms of Service and other policies

HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information to the categories of third parties described below.

Clinical Trial Sponsors and Research Sites

When you express interest in a specific clinical trial, we will share your personal information with the sponsor of that trial and the clinical research site(s) conducting the trial, but only with your explicit consent. The information we share typically includes your name, contact information, and relevant health information to assess your eligibility.

These parties act as independent data controllers and are responsible for their own processing of your information in accordance with applicable laws and their own privacy policies. We are not responsible for the privacy practices of these third parties.

Service Providers

We share personal information with service providers who perform services on our behalf. These service providers are contractually obligated to use your personal information only as we direct them and to maintain the confidentiality and security of your information.

Our service providers include:

• Cloud Infrastructure: Amazon Web Services (AWS) for data storage and hosting
• Communication Services: Email, SMS, and telephone service providers
• AI Model Providers: Anthropic and OpenAI, whose language models we use within our own systems to interpret your responses, remove identifying details from clinical information, and evaluate study eligibility criteria. We access these models under commercial terms that prohibit the provider from using your information to train its models. This is distinct from any third-party AI platform, such as ChatGPT or Claude, that you may use to reach our AI assistant; those platforms process your conversation under their own privacy policies, as described in the section "Using Our AI Assistant Through Third-Party AI Platforms."

Legal Requirements and Protection of Rights

We may disclose personal information if required to do so by law or if we believe in good faith that such disclosure is necessary to:

• Comply with legal obligations, court orders, or legal processes
• Protect and defend our rights, property, or safety, or that of our users or others
• Prevent, detect, or investigate security incidents, fraud, or illegal activity
• Enforce our Terms of Service or other agreements

Business Transfers

We may share or transfer personal information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

SMS / TEXT MESSAGING

When you provide your mobile phone number on one of our forms and agree to be contacted, AnidasoHub may send you text messages about the clinical study you signed up for — a link to check your eligibility, and a secure link to upload medical records when the research team requests them.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All of the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Message frequency varies. Message and data rates may apply. Consent to receive text messages is not a condition of participating in any study. You can opt out at any time by replying STOP to any message, and you can reply HELP for assistance or contact us at info@anidasohub.com.

USING OUR AI ASSISTANT THROUGH THIRD-PARTY AI PLATFORMS

Our AI assistant, Anida, is also available within certain third-party AI platforms, including OpenAI's ChatGPT and Anthropic's Claude, as a connector or app. This section explains how our practices differ when you use our AI assistant through one of these platforms rather than by telephone or on our website.

Information We Receive Through a Third-Party AI Platform

• Health Information: The medical condition you are asking about, your age (ages 90 and above are recorded as 90), and your answers to the eligibility questions for the studies you are screened against.
• Clinical Summary: The third-party AI platform may forward a brief summary of relevant clinical facts you have already discussed with it, such as prior treatments, disease stage, and current medications, so that you are not asked to repeat them. The platform is instructed to omit all identifying details, and we automatically screen each summary for names, dates, contact information, addresses, and record, insurance, or account numbers. If any identifying detail is found, the entire summary is discarded and is not stored.
• General Location: Your approximate city and state, where the platform provides it (ChatGPT, for example, shares approximate location with connected apps), and your ZIP code if our AI assistant asks for it during pre-screening. This information is used solely to identify research sites near you. We do not request or store street addresses or precise coordinates.
• Session Information: The platform used, the point reached in pre-screening, the studies matched, and whether a study signup link was created or used.

How We Use This Information

We use this information to pre-screen you against the eligibility criteria of recruiting studies, to present matched studies and nearby research sites, and to restore your results if you continue on our website. We also use it in aggregated form that does not identify you, in order to understand which conditions and regions people are seeking studies for and to improve our Services. We do not use these sessions for advertising, to build behavioral profiles, or to train artificial intelligence models.

The Role of the Third-Party AI Platform

Your conversation on the platform, including anything you share before or during pre-screening, is processed by the platform's provider (for example, OpenAI or Anthropic) under that provider's own privacy policy and terms, in the same way as any other conversation you have on that platform. We do not receive your identity or account information from the provider, and we do not share your session data with the provider beyond the responses displayed to you in the conversation.

Connecting With a Study

If you choose to connect with a research site, our AI assistant provides a private, single-use link to our website, anidatrials.com, which expires 72 hours after it is created. On our website, you enter your contact information yourself and provide consent before anything is shared with a study team. From that point, the remainder of this Privacy Notice, including our practices regarding health information and referrals to sponsors and research sites, applies to you. If you do not use the link, we never learn your identity.

Retention and Deletion of Anonymous Sessions

Because these sessions are not linked to your identity, we retain them for as long as necessary for the purposes described above, consistent with the Data Retention section of this Notice, and we may retain aggregated statistics indefinitely. To request deletion of a session, contact us at info@anidasohub.com and include the session code or study signup link that our AI assistant provided to you. Without it, we have no way to locate the session, because it contains no name or contact information.

SECURITY

We take data security very seriously and implement appropriate technical, administrative, and physical safeguards designed to protect personal information from loss, misuse, unauthorized access, disclosure, alteration, and destruction.

Our security measures include:

• Encryption: We encrypt personal information in transit using secure socket layer technology (SSL/TLS) and at rest using industry-standard encryption protocols
• Access Controls: We limit access to personal information to authorized employees and service providers who need access to perform their job functions
• Secure Infrastructure: Our data is hosted on Amazon Web Services (AWS), which provides enterprise-grade security, redundancy, and compliance certifications. We maintain control over our databases and implement additional security measures
• Security Monitoring: We implement logging, monitoring, and regular security assessments to identify and respond to potential security incidents
• Employee Training: Our employees receive regular training on data security and privacy practices
• HIPAA Compliance: As a business associate under HIPAA, we comply with all applicable requirements for safeguarding protected health information

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach, we will notify affected individuals and regulators as required by applicable law.

DATA RETENTION

We retain personal information for as long as necessary to provide our Services, comply with our legal obligations, resolve disputes, enforce our agreements, and protect our legitimate business interests.

When we no longer need your personal information, we will securely delete or anonymize it. Some information may be retained in anonymized or aggregated form for analytical purposes.

Third-Party AI Platform Sessions. Pre-screening sessions started through a third-party AI platform are not linked to your identity and are retained under the same standard. Study signup links generated through such a platform are single-use and expire 72 hours after they are created. See the section "Using Our AI Assistant Through Third-Party AI Platforms" for how to request deletion of a session.

YOUR PRIVACY RIGHTS AND CHOICES

In accordance with applicable law, you may have the right to:

• Information: Request information about the personal information we collect, how we use it, and with whom we share it
• Access: Request access to the personal information we hold about you and receive a copy of it
• Rectification: Request that we correct inaccurate or incomplete personal information
• Erasure: Request deletion of your personal information, subject to certain legal exceptions
• Restriction: Request that we restrict the processing of your personal information in certain circumstances
• Data Portability: Request a copy of your personal information in a structured, commonly used, and machine-readable format
• Object: Object to the processing of your personal information for certain purposes
• Withdraw Consent: Where we process your information based on your consent, you may withdraw that consent at any time

If you would like to exercise any of these rights, please contact us at info@anidasohub.com. We will process such requests in accordance with applicable laws. To protect your privacy, we will take steps to verify your identity before fulfilling your request.

Email Communications. You can unsubscribe from our promotional emails via the unsubscribe link provided in the emails. Even if you opt out of receiving promotional messages from us, you will continue to receive important service-related communications.

Text Messages. Message frequency varies. Message and data rates may apply. Reply STOP to any message to opt out, or HELP for assistance. You may also contact us at info@anidasohub.com. See the SMS / Text Messaging section above for full details.

Data Deletion. You can request that your data be deleted by emailing us at info@anidasohub.com.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to Know. You may request that we disclose:

• The categories of personal information we have collected about you
• The categories of sources from which the personal information is collected
• Our business or commercial purpose for collecting or selling personal information
• The categories of third parties with whom we share personal information
• The specific pieces of personal information we have collected about you

Right to Delete. You may request that we delete personal information we have collected from you, subject to certain exceptions.

Right to Correct. You may request that we correct inaccurate personal information.

Right to Opt-Out. You have the right to opt out of the "sale" or "sharing" of personal information. We do not sell your personal information.

Right to Non-Discrimination. You have the right not to receive discriminatory treatment for exercising your privacy rights.

To exercise your California data protection rights, please send your request to info@anidasohub.com.

Other U.S. State Privacy Rights

If you are a resident of Virginia, Colorado, Connecticut, Utah, or other states with comprehensive privacy laws, you may have similar rights to those described above. Please contact us to exercise your rights.

European Union (EU), United Kingdom (UK), and European Economic Area (EEA)

If you are located in the EU, UK, or EEA, you have certain rights under the General Data Protection Regulation (GDPR) and related laws:

• Right of Access: The right to obtain confirmation of whether we process your personal data and to access such data
• Right to Rectification: The right to have inaccurate personal data corrected
• Right to Erasure: The right to have your personal data deleted in certain circumstances
• Right to Restriction of Processing: The right to request that we restrict processing of your personal data in certain circumstances
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format
• Right to Object: The right to object to our processing of your personal data for certain purposes
• Right to Withdraw Consent: Where we rely on consent to process your personal data, you have the right to withdraw that consent at any time
• Right to Lodge a Complaint: The right to lodge a complaint with your local data protection authority

To exercise your rights, please contact us at info@anidasohub.com.

How We Verify Your Identity

Only you, or someone legally authorized to act on your behalf, may make a request related to your personal information. To protect your privacy and security, we will take steps to verify your identity before processing your request. We may ask you to provide additional information to confirm your identity.

You may designate an authorized agent to make a request on your behalf. The authorized agent must provide proof of authorization, and we may require you to verify your identity directly with us.

CHILDREN'S PRIVACY

Our Services are not directed to children under 16 years of age, and we do not knowingly collect personal information from children under 16 without parental consent.

If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at info@anidasohub.com. If we learn that we have collected personal information from a child under 16 without appropriate consent, we will delete that information.

THIRD-PARTY WEBSITES AND SERVICES

Our Services may contain links to third-party websites, applications, or services that are not owned or controlled by us, including clinical trial sponsor websites, research site websites, and educational resources.

We are not responsible for the privacy practices of these third-party websites and services. This Privacy Notice does not apply to third-party websites or services. We encourage you to review the privacy policies of any third-party websites or services before providing them with your personal information.

This also applies to the third-party AI platforms, such as ChatGPT and Claude, through which you may choose to use our AI assistant. Those platforms are operated by their respective providers, and their handling of your conversation is governed by their own privacy policies.

CHANGES TO THIS PRIVACY NOTICE

We may update this Privacy Notice from time to time. When we make changes, we will revise the "Last Updated" date at the top of this Privacy Notice and post the updated version on our website.

For material changes, we will provide notice by posting a prominent notice on our website or by sending you an email (if you have provided us with your email address). Your continued use of our Services after we make changes constitutes your acceptance of the updated Privacy Notice.

INTERNATIONAL USERS

Our Services are currently available only in the United States. If you are accessing our Services from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States. By using our Services, you consent to the transfer of your information to the United States.