Privacy Policy

CircNova, Inc., doing business as Novarna (“Novarna,” “we,” “us”), is an AI-powered drug design company headquartered at One Broadway, 14th Floor, Cambridge, MA 02142, with laboratory operations in Ann Arbor, Michigan. CircNova remains our legal name; Novarna is the name we trade under.

This policy explains what happens to information collected through novarna.ai — this website and its contact form. It does not govern information exchanged under a separate signed agreement (a confidentiality agreement, material transfer agreement, research collaboration, or investor agreement); those agreements control on their own terms. It also does not cover recruiting or employment data, which is handled directly by our team.

The only place this site asks for information is the Connect form. When you submit it, we receive:

• Your name and email address — required, so we can reply.
• Your message — whatever you choose to write.
• Organization and role — optional.
• Inquiry type— which of pharma & biotech, academic research, investor, press & media, or other you selected, so your message reaches the right team.

You can also email us directly at the addresses published on this site. Anything you send that way reaches us as ordinary email.

Please do not send confidential, proprietary, or personal health information through the contact form or by unsolicited email. Initial outreach is not covered by a confidentiality agreement. If you want to discuss an unpublished target, sequence, or dataset, tell us that you’d like to and we will put a confidentiality agreement in place first.

We do not run analytics, advertising, or visitor-tracking software on this site. There is no Google Analytics, no advertising pixel, and no third-party profiling of your visit.

Our hosting provider, Cloudflare, records standard server and security logs for every request — your IP address, browser user-agent, the page requested, and a timestamp. These logs exist to serve the site, block attacks, and diagnose faults. We do not use them to build a profile of you, and we do not link them to contact-form submissions.

This site sets no cookies. There is nothing to consent to and nothing to opt out of.

We use one item of browser session storage to remember that you dismissed the banner announcing our name change, so it does not reappear on every page. It contains no personal information and your browser discards it when you close the tab.

Our Team page embeds a video hosted on YouTube’s privacy-enhanced domain (youtube-nocookie.com). Loading that page contacts Google’s servers, and playing the video may cause Google to store data on your device under Google’s privacy policy, which we do not control.

We use what you send us to:

• Read and respond to your inquiry.
• Route your message to the right people on our team.
• Keep a record of our correspondence and of any resulting relationship.
• Protect the site against spam, abuse, and security threats.

We do not sell your personal information, share it with advertisers, or disclose it for anyone else’s marketing. We do not add you to a mailing list because you used the contact form. We do not use the contents of your message as training data for our design models.

We may disclose information where we are legally required to, or where it is necessary to establish or defend legal claims, or to protect the rights and safety of Novarna and others.

We keep this list short on purpose:

• Cloudflare— hosts the site and stores contact-form submissions in a Cloudflare D1 database within Cloudflare’s network.
• An email delivery provider — used to notify our team that a new submission has arrived, so that it reaches a person rather than sitting in a database.
• YouTube (Google) — serves the embedded video described above.

Typefaces are bundled with the site rather than fetched from a font service, so viewing these pages does not report your visit to a third party.

We keep contact-form submissions and correspondence for as long as we have an active or reasonably prospective relationship with you, plus any period we are required to retain records for legal, tax, or compliance reasons. When information is no longer needed for those purposes, we delete it. You can ask us to delete your submission sooner at any time. Server and security logs are retained on our hosting provider’s standard schedule, which is measured in days, not years.

Wherever you are, you can email us at privacy@novarna.ai to ask what we hold about you, to have it corrected, or to have it deleted. We will respond within the time your local law requires, and within 30 days where no specific deadline applies. We may need to confirm your identity before acting on a request.

If you are in the EEA, the UK, or Switzerland

You have rights of access, rectification, erasure, restriction, objection, and data portability under the GDPR and equivalent UK law. Our legal basis for handling contact-form data is our legitimate interest in responding to people who contact us, and, where you are asking us about a possible collaboration, taking steps at your request before entering into a contract. You may lodge a complaint with your national supervisory authority.

If you are in California

You have the right to know what personal information we collect and why, to request its deletion or correction, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by the CCPA, and we do not process it for cross-context behavioral advertising.

Novarna operates in the United States, and information you send us is processed there. Our hosting provider operates a global network, so requests may be served from infrastructure closer to you, but contact-form submissions are handled by our team in the United States. If you are contacting us from outside the US, you are sending your information to a US company by choice.

The site is served exclusively over HTTPS. Contact-form submissions are validated and length-limited before storage, and access to the stored submissions is restricted to the team members who need it. No system is perfectly secure, and we cannot guarantee the security of information you transmit to us — which is the practical reason for the warning above about sending confidential material through this form.

This is a business-to-business site for scientific, commercial, and investor audiences. It is not directed to children, and we do not knowingly collect information from anyone under 16. If you believe a child has sent us information, contact us and we will delete it.

If we change how we handle information — for example, if we add a tool that collects something new — we will update this page and revise the “last updated” date at the top. Material changes will be described here rather than made silently.

Questions about this policy, or about information we hold, go to privacy@novarna.ai.

CircNova, Inc. d/b/a Novarna
One Broadway, 14th Floor
Cambridge, MA 02142
United States