Privacy Policy

1. Introduction

This Privacy Policy explains how Mitragen, Inc. ("MitraGen", "we", "us", or "our") collects, uses, discloses, and protects information about you when you visit www.mitragenlabs.com, contact us, sign up for our communications, or purchase our products (together, the "Services").

By using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Services.

2. Information we collect

We collect the following categories of information:

• Information you provide: your name, email address, phone number, shipping and billing addresses, order details, age or eligibility confirmations, account details if you create an account, and the contents of any messages you send us.
• Payment information: when you make a purchase, your payment card details are collected and processed by our third-party payment processors. We do not store full payment card numbers on our systems.
• Information collected automatically: device and browser type, operating system, IP address, general location derived from your IP address, pages viewed, links clicked, referring pages, and timestamps, collected through cookies and similar technologies.
• Information from third parties: our payment processors, shipping carriers, analytics providers, fraud-prevention services, and advertising or social media platforms may share information with us to help us operate and secure the Services.

3. Cookies and similar technologies

We and our service providers use cookies, pixels, and similar technologies to operate the Services, remember your preferences, measure performance, and understand how the Services are used.

You can control cookies through your browser settings and, where available, opt-out tools. Some features of the Services may not function properly if you disable certain cookies. Where required by law, we honor recognized browser-based opt-out signals such as Global Privacy Control (GPC). For more detail, see our Cookie Policy at /legal/cookies.

4. How we use information

We use the information we collect to:

• Process, fulfill, and deliver your orders, and communicate with you about them.
• Verify that you meet our eligibility requirements, including that you are at least 21 years of age.
• Provide customer support and respond to your requests.
• Send transactional messages and, where you have opted in, marketing communications and newsletters (you can opt out at any time).
• Operate, maintain, secure, and improve the Services.
• Detect, prevent, and address fraud, abuse, and security incidents.
• Comply with our legal, tax, and regulatory obligations and enforce our Terms of Service.

5. How we share information

We do not sell your personal information for money. We share information only as described below:

• Service providers: companies that perform services for us, such as payment processing, order fulfillment and shipping, email delivery, analytics, hosting, and customer support, under contracts that limit their use of the information.
• Legal and safety: to comply with applicable law, regulation, legal process, or governmental request, to enforce our agreements, and to protect the rights, property, and safety of our customers, the public, or us.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.
• With your consent: when you direct us to share information or otherwise consent to the sharing.
• Aggregated or de-identified information: information that cannot reasonably be used to identify you.

6. Age restriction (21+)

The Services and our products are intended only for adults who are at least 21 years of age. We do not knowingly collect personal information from anyone under 21. We also do not knowingly collect personal information from children under 13 as defined by the Children's Online Privacy Protection Act (COPPA).

If you believe we have collected information from someone under 21, please contact us and we will take appropriate steps to delete it.

7. Data retention

We retain personal information for as long as necessary to provide the Services and fulfill the purposes described in this Policy, and thereafter as needed to comply with our legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of information and the purpose for which it is used.

8. How we protect information

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, and alteration. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

9. Your privacy rights and choices

Depending on where you live, you may have rights regarding your personal information. These may include the right to access, correct, delete, or receive a copy of your information, and the right to opt out of certain processing.

Residents of California (under the CCPA as amended by the CPRA) and of states with comprehensive privacy laws, including Virginia, Colorado, Connecticut, Utah, and others as those laws take effect, may have rights to know about and access their personal information, to request deletion or correction, to opt out of the sale or sharing of personal information and of targeted advertising, and to not be discriminated against for exercising these rights.

To exercise any of these rights, contact us at support@mitragenlabs.com. We will verify your request as required by law before responding, and you may use an authorized agent where permitted. If we decline a request, you may appeal where applicable law provides an appeal right.

Marketing choices: you can opt out of marketing emails at any time using the unsubscribe link in those messages or by contacting us. We may still send you non-marketing, transactional messages related to your orders and account.

10. Third-party links and services

The Services may link to or integrate with third-party websites and services that we do not control. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review their privacy policies.

11. Data location

We operate in the United States, and the information we collect is processed and stored in the United States. If you access the Services from outside the United States, you understand that your information will be processed in the United States, where privacy laws may differ from those of your location.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date above and, where appropriate, provide additional notice. Your continued use of the Services after an update means you accept the updated Policy.

13. Contact us

If you have questions about this Privacy Policy or how we handle your information, contact us at support@mitragenlabs.com.