Privacy Policy

Last updated: July 6, 2026

Ozcorp Scientific LLC ("Ozcorp," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit or use our websites, applications, subscription services, authenticated platforms, inquiry forms, and related digital properties.

Who is responsible for your data

The data controller for the properties covered by this policy is Ozcorp Scientific LLC, unless a supplemental notice on a specific product identifies a different portfolio entity as controller for that product.

Scope of this policy

This policy applies to the Ozcorp umbrella platform and affiliated brands operated by Ozcorp Scientific LLC or its portfolio ventures, including:

• Ozcorp Scientific at ozcorpscientific.com and app.ozcorpscientific.com
• InfraOps at ozcorp.io and app.ozcorp.io
• Ozcorp Studio at ozcorp.studio and app.ozcorp.studio
• Ozcorp Science at ozcorp.science and app.ozcorp.science
• Tortzal at tortzal.com and app.tortzal.com
• GENOS.BIO at genos.bio
• Hypomax at hypomax.tech
• Backend and platform services supporting authenticated applications, billing, work orders, agreements, and customer operations
• Other portfolio sites, landing pages, scheduling links, and authenticated applications that link to this policy

When a subsidiary or product publishes a supplemental privacy notice, that notice applies in addition to this policy for the relevant service.

Information we collect

We may collect the following categories of information depending on how you interact with us:

Information you provide directly

• Identity and contact details such as name, email address, phone number, job title, organization name, mailing address, and preferred language
• Account and authentication details such as login identifiers, one-time passcodes, OAuth profile basics, and account preferences
• Billing and payment-related details such as billing address, invoice contacts, tax identifiers where applicable, and transaction history. Payment card or bank details are generally processed by our payment processors rather than stored directly by us
• Company profile and onboarding details such as company website, business goals, executive team composition, and service selections
• Support, work order, and service delivery communications, including attachments submitted through dashboards or email
• Marketing and newsletter sign-ups, including footer contact forms and mailing list requests
• General contact, demo, and meeting requests, including information submitted through contact modals or scheduling tools
• InfraOps and platform usage data, including plan selections, service configurations, approval actions, amendment requests, and dashboard activity needed to deliver subscriptions and work orders
• Ozcorp Insights and Studio inquiry data, including research interests, portfolio engagement requests, scope descriptions, and timelines
• Ozcorp Science submission data, including affiliation, research field, work summaries, and authorship-related materials submitted for publication review
• Tortzal engagement data, which may include organization profile, systems in scope, asset descriptions, timelines, budget ranges, compliance frameworks such as HIPAA, GDPR, SOC 2, ISO 27001, FDA 21 CFR Part 11, or NIST CSF, security contacts, NDA preferences, and referral information
• Investor and venture inquiry data, including fund or company affiliation, stated interests, and related contact details. Submission does not create an investor relationship or securities offering by itself
• Careers and recruiting data submitted through job postings or application flows
• Portfolio licensing and partnership inquiries, including compound licensing discussions and bioinformatics engagement requests

Information collected automatically

• IP address, browser type, device identifiers, operating system, language settings, and referring URLs
• Pages viewed, session duration, clickstream data, feature usage, error logs, and security events
• Cookie, pixel, and similar technology data used for authentication, preferences, analytics, fraud prevention, and service performance
• Approximate location derived from IP address or device settings where available

Information from third parties

• Payment processors, identity providers, analytics vendors, hosting providers, communication platforms, scheduling providers, and professional advisors
• Publicly available business contact or company information used for onboarding, fraud prevention, or service context
• Service interaction and audit records generated through our platform backend supporting authenticated applications

How we use your information

We use personal information to:

• Provide, operate, maintain, secure, and improve our websites, platforms, and subscription services
• Create and manage accounts, authenticate users, and deliver customer support
• Build and administer InfraOps plans, work orders, billing events, invoices, agreements, and deliverables
• Process transactions, deposits, renewals, pass-through vendor charges, and approved overages
• Deliver Insights content, Studio research services, Science publishing workflows, Tortzal engagements, and portfolio-related communications you request
• Send service-related notices, security alerts, onboarding messages, and administrative communications
• Send marketing communications where you have opted in or where permitted by law
• Analyze usage, measure performance, debug issues, and develop new features
• Detect, investigate, and prevent fraud, abuse, unauthorized access, and security incidents
• Comply with legal obligations, enforce our terms, respond to lawful requests, and protect rights and safety
• Operate internal mail, notification, SMS, and workflow systems connected to customer accounts where enabled

Legal bases for processing

Where applicable law requires a legal basis, we process personal information as necessary to perform a contract with you, comply with legal obligations, pursue legitimate interests such as securing and improving our services, and, where required, based on your consent. You may withdraw consent where processing is consent-based, subject to legal and contractual limits.

How we share your information

We may share personal information with:

• Service providers that host infrastructure, process payments, deliver email or SMS, provide analytics, customer support, scheduling, identity verification, security monitoring, document generation, or other operational services on our behalf
• Affiliated entities and portfolio ventures within the Ozcorp ecosystem when needed to deliver a requested service, fulfill a contract, operate shared authentication or billing systems, or respond to an inquiry directed to a portfolio brand
• Professional advisors such as lawyers, accountants, and auditors under confidentiality obligations
• Authorities or third parties when required by law, court order, or governmental request, or when we believe disclosure is necessary to protect rights, safety, and security
• Business transaction parties in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate confidentiality protections

We do not sell personal information in the conventional sense. Where required by law, we provide opt-out or limitation rights for certain sharing activities.

Cookies, authentication, and session data

We use cookies and similar technologies to keep sessions secure, remember preferences, measure traffic, and understand how visitors use our properties. Authentication-related cookies or local storage entries may include session tokens, user profile basics, and security state required to access authenticated applications.

You can manage cookies through your browser settings. Disabling cookies may limit sign-in, dashboard access, or other features.

We may use third-party analytics services such as Google Analytics. Learn more in Google's Privacy Policy. You may opt out via the Google Analytics Opt-out Browser Add-on.

Payments and billing records

Payments may be processed by third-party processors such as Stripe. We receive transaction confirmations, billing metadata, and limited payment method details from those processors rather than storing full payment credentials on our own systems where avoidable. We retain invoices, subscription history, plan archives, and related billing records as needed for accounting, tax, dispute resolution, and service continuity.

Sensitive, regulated, and client-submitted data

Some inquiries and engagements may involve sensitive information about research systems, biological or chemical workflows, security posture, compliance frameworks, or regulated environments. Submit only information you are authorized to share.

Where a signed agreement requires handling of protected health information or other regulated data categories, additional contractual terms such as a business associate agreement or data processing addendum govern that processing in addition to this policy.

For open Science submissions and published materials, do not submit information you are not authorized to disclose publicly if the material becomes published or shared in review workflows.

Data retention

We retain personal information for as long as needed to provide services, maintain billing and plan history, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type, product, and business purpose. Archived plans, invoices, audit logs, and agreement records may be retained longer where required for legal, accounting, or security reasons.

Data security

We use administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit where supported, access controls, vendor review, and monitoring. No online system is completely secure, and we cannot guarantee absolute security.

International users

Ozcorp is headquartered in Puerto Rico. If you access our services from outside Puerto Rico or the United States, your information may be transferred to, stored in, and processed in the United States or other countries that may not provide the same level of data protection as your home jurisdiction. By using our services, you consent to those transfers where permitted by law.

Children's privacy

Our services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will take steps to delete it.

Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal information, and to object to certain processing or withdraw consent. You may also have the right to lodge a complaint with a supervisory authority.

To exercise these rights, contact us at contact@ozcorp.io. We may need to verify your identity before responding. Some rights may be limited by applicable law, contractual requirements, or our need to retain records for billing, security, or legal compliance.

Marketing choices

You may opt out of marketing emails by using the unsubscribe link in those messages or by contacting us. Even if you opt out of marketing, we may still send transactional, security, billing, or service-related communications.

Business transfers

If Ozcorp is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction subject to appropriate confidentiality protections and notice where required by law.

Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the latest revision. Material changes may also be posted on the relevant website or communicated through service notices.

Contact us

Questions about this Privacy Policy or our privacy practices may be sent to:

Ozcorp Scientific LLC
contact@ozcorp.io