PRIVACY POLICY

Version date: March 30, 2026

Clickmab Biotechnology (Suzhou) Co.,Ltd and its affiliates (collectively, the "Clickmab", "us" "our" or "we") recognize the importance of protecting the personal information we may collect from you. We value your interests and fundamental rights and are committed to processing personal information in a professional, lawful and ethical way.

This Privacy Policy (the "Policy") describes how and why we might collect, store, use, and/or share (collectively, the "process") your personal information when you use Click.mAb. www.clickmab.com, the "Website" or "Platform") and related products and services, including any content or information provided as part of the Website or such related products, services (collectively, the "Services").

Please read this Policy carefully as it will help you understand what we do with the personal information that we process. Please pay special attention to the important contents of this Policy, which have been highlighted in bold form. The Services are intended for adults, if you are a minor under the law of your jurisdiction, you should obtain the consent of your legal guardian or legal representative before using our Services. If you are the guardian of a minor, please also contact us when you have questions related to the minor's personal information under your guardianship. By using or continuing to use our Services after we have updated this Policy (and we will promptly notify you of such updates), you agree to the content of this Policy (including the updated version) and to our collection, use, storage and protection of personal information about you in accordance with this Policy.

By clicking "Agree and Register", you agree to and sign this Policy, indicating that you voluntarily accept to be bound by all the terms and conditions of this Policy, which constitutes a binding legal document between you and Clickmab who operating this Website. After you complete the account registration, no matter you enter this Website, or upload any data on this Website, or use the products or services and data of this Website directly or indirectly through various ways (such as off-site API references, etc.), you will be regarded as accepting all the contents of this Policy.

If you disagree with this Policy or any of its terms, you have the full right to choose not to use our Services, and you may contact us at any time in the manner outlined in Article 9 of this Policy.

SUMMARY OF KEY POINTS

What personal information do we process? When you visit, use, or browse our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use.

Do we process any sensitive personal information? We do not process sensitive personal information.

Do we receive any information from third parties? We do not receive any personal information from third parties.

How do we process your personal information? We process your information to provide registrations, Epitope Prediction, Antigen-Antibody Complex Structure Prediction, Antigen-Antibody Complex Structure Prediction, and Optimization of Prediction Model. We may also process your personal information for other purposes with your consent. We process your personal information only when we have a valid legal reason to do so.

In what situations and with which parties do we share personal information? We don't share your personal information without your consent.

How do we keep your personal information safe? We have organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.

What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.

How do you exercise your rights? The easiest way to exercise your rights is by contacting us. We will consider and act upon any request in accordance with applicable data protection laws.

TABLE OF CONTENTS

PRIVACY POLICY

SUMMARY OF KEY POINTS

1. SCOPE OF THIS POLICY

2. HOW WE COLLECT AND USE YOUR PERSONAL INFORMATION

3. HOW WE USE COOKIES AND SIMILAR TECHNOLOGIES

4. HOW WE SHARE, TRANSFER AND DISCLOSE YOUR PERSONAL INFORMATION

5. HOW WE STORE AND PROTECT YOUR PERSONAL INFORMATION

6. HOW YOU ACCESS AND CONTROL YOUR PERSONAL INFORMATION

7. HOW WE PROCESS MINORS' PERSONAL INFORMATION

8. HOW THIS PRIVACY POLICY IS UPDATED

9. HOW TO CONTACT US

10. APPLICABLE LAW AND DISPUTE RESOLUTION

1. SCOPE OF THIS POLICY

1.1 This Policy applies to products and services related to the Website, including those provided through the Website and other routes that may be expanded from time to time in the future in accordance with business development needs.

1.2 If there is a separate privacy policy for a product or service that we provide to you, the privacy policy for that product or service shall prevail.

1.3 The service providers we use may have access to your personal information. These third-party vendors collect, store, use, process and transfer personal information about your activity on our Service in accordance with their own Privacy Policies. This Policy does not apply to how third parties define personal information or how they process it. We suggest you read their privacy policies and know your privacy rights before interacting with them.

2. HOW WE COLLECT AND USE YOUR PERSONAL INFORMATION

2.1 We May Collect Your Personal Information in the Following Ways

2.1.1 Personal information provided while using the Website. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

THE SPECIFIC FUNCTIONS OF THIS PLATFORM AND THE PERSONAL INFORMATION IT PROCESSES SHALL BE IN ACCORDANCE WITH THE CONTENTS LISTED BY EACH FUNCTION OF THE PLATFORM.

2.1.2 Personal information we collected automatically. Information that we may automatically collect through cookies, web beacons or other means (please refer to "3. HOW WE USE COOKIES AND SIMILAR TECHNOLOGIES" in this Policy for a detailed description of these technologies), such as records of operations or other log-type data, in connection with your use of the Website, such as operation records or other log data, etc.

2.2 We May Collect and Use Your Personal Information for the Following Purposes and in the Following Scenarios

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

2.2.1 Account Creation. We may collect your username, password, Email address, phone number so you can create and log in to your account, as well as keep your account in working order.

2.2.2 Create or join a company:

(a) If you are an individual user, you can choose whether to join a company after registering an account. If you choose to join a company, we will collect your real name for verification by the company administrator.

(b) If you register and log in as a company administrator, we will collect your company name, contact phone number, contact information, and contact person's name for the creation, management, and communication of the company account.

2.2.3 AI Antibody Design. When you use our AI Antibody Design, you need to provide us with Antigen Structure Data, PDB ID, PDB Structure File, and Antigen Target Name (hereinafter collectively referred to as "Design Data Material"). If your uploaded content involves your personal information (including sensitive personal information), you are deemed to have agreed to our handling of your uploaded personal information; if your uploaded content involves other people's personal information (including sensitive personal information), please make sure that you have fully informed the subject of the personal information and obtained his/her authorization and consent.

2.2.4 Epitope Prediction Service. When you use our Epitope Prediction Service, you need to provide us with Antigen Structure Data, Antibody Sequence (hereinafter collectively referred to as "Prediction Data Material"), in order to analyze and provide you with Epitope Prediction results. If your uploaded content involves your personal information (including sensitive personal information), you are deemed to have agreed to our handling of your uploaded personal information; if your uploaded content involves other people's personal information (including sensitive personal information), please make sure that you have fully informed the subject of the personal information and obtained his/her authorization and consent.

2.2.5 Antigen-Antibody Complex Structure Prediction and Antigen-Antibody Complex Structure Prediction. When you use our Antigen-Antibody Complex Structure Prediction and Antigen-Antibody Complex Structure Prediction, you need to provide us with Antibody Sequence and other Prediction Data Material. If your uploaded content involves your personal information (including sensitive personal information), you are deemed to have agreed to our handling of your uploaded personal information; if your uploaded content involves other people's personal information (including sensitive personal information), please make sure that you have fully informed the subject of the personal information and obtained his/her authorization and consent.

2.2.6 Humanization Function. When utilizing our humanization feature, you are required to provide us with predictive data such as antibody names and amino acid sequences. This enables us to perform humanization modifications on the antibodies. If your uploaded content involves your personal information (including sensitive personal information), you are deemed to have agreed to our handling of your uploaded personal information; if your uploaded content involves other people's personal information (including sensitive personal information), please make sure that you have fully informed the subject of the personal information and obtained his/her authorization and consent.

2.2.7 You should ensure that (i) you agree with the above rules for retention of the Data Material; (ii) the Data Material uploaded by you is your own data or the legality of the source and processing; (iii) you have obtained effective, sufficient and necessary authorization when processing or entrusting us to process the Data Material, and have not infringed the legitimate rights and interests of any third party, and have not violated any laws, regulations, departmental rules and national policies; (iv) have carried out the necessary examination of whether the Data Material and the manner and method of your processing of the Data Material comply with the provisions of laws and regulations, departmental rules and national policies. You shall bear all the results and responsibilities caused by the content of your Data Material or your processing of the Data Material and any other related matters that infringe the legitimate rights and interests of a third party or violate laws and regulations, departmental rules and regulations or national policies. You acknowledge and agree that we will not violate any laws and regulations or be held liable for providing products or services in accordance with your instructions. We recommend that you read the Website Terms of Services before uploading your Data Material. Please do not upload any Data Material if there is any doubt.

2.2.8 Service Credits Acquisition, Exchange, and Usage. You can earn Credits by participating in various Credits-based activities launched on this website. The specific methods and rules of the activities will be subject to the actual page display. Some Credits-based activities may involve the collection of personal information. For example, in activities such as inviting new users to register, we may collect information such as your clipboard permissions, phone number, etc. The specific types of personal information collected will be based on the prompts on the activity page. You can also acquire Credits through paid methods, which require the use of third-party payment channels integrated with this website (including but not limited to Alipay, WeChat Pay, etc.). We will collect information related to the order, including order number, order source, user ID, order price, actual payment amount, payment channel, payment method, order creation time, and order payment time. We will not directly collect your payment account information, but we will generate an order record for you and entrust our affiliate company to collect payment on our behalf. This company will only process your order information as entrusted by us and will not use it for other purposes. Please ensure the protection of your personal information security in online transactions. When cooperating with third-party payment service providers, we will use encryption technologies (such as SSL), de-identification, and other security measures to jointly protect the security of your personal information.

2.2.9 To deliver our core information display services and ensure the Website's normal operation, we will collect your browsing history and click operation records (clicks, searches, and related activities) on this Website.

2.2.10 If we want to use your personal information for purposes other than those set out in this Privacy Policy, or to collect additional personal information from you, we will ask for your consent in advance. We will not use your personal information for other purposes or collect additional personal information without your consent.

3. HOW WE USE COOKIES AND SIMILAR TECHNOLOGIES

3.1 We may collect your personal information through the placement of secure cookies and similar technologies, including: your login information, browsing information, etc. You can also manage cookies through your browser settings. But please note that if you disable cookies, you may not be able to enjoy the best possible service experience, and some services may not function properly. Cookies are important to enhance your web experience, and we generally use cookies for the following purposes:

(a) Ensuring that the website works properly. We store small data files on your device called cookies, which usually contain an identifier, the name of the site, and some numbers and characters. We can use cookies to understand how you use our services or the most popular boards;

(b) Optimize the login experience. Cookies can help you fill in your last login cell phone number and/or email address and simplify the repetitive steps when you register or login by storing your account information;

(c) Security. Cookies can help us ensure the security of our data and services, and detect cheating, hacking and fraudulent behavior against our products and services.

3.2 We use Web beacons for the same purposes as we use cookies.

4. HOW WE SHARE, TRANSFER AND DISCLOSE YOUR PERSONAL INFORMATION

We don't share, transfer or disclose your personal information with any other third parties. We will seek your consent when we think it is necessary to share, transfer and disclose your personal information.

5. HOW WE STORE AND PROTECT YOUR PERSONAL INFORMATION

5.1 We will store your personal information and uploaded data in the People's Republic of China.

5.2 We will only retain your personal information for as long as is necessary to fulfill the purposes outlined in this Policy, unless there is a legally enforceable retention requirement. After your personal information has been retained beyond the legal retention period, we will delete or anonymize your personal information in response to your feedback.

5.3 We have put in place security measures that comply with industry standards and laws and regulations to protect the personal information you provide against unauthorized access, public disclosure, use, modification, damage or loss of data. We take all reasonably practicable steps to protect your personal information. For example, we use encryption technology to ensure data confidentiality; we use trusted protection mechanisms to prevent malicious attacks on data; we deploy access control mechanisms to ensure that only authorized personnel have access to personal information; and we conduct security and privacy training courses to enhance employee awareness of the importance of protecting personal information. When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

5.4 The Internet is not a completely secure environment and e-mail, instant messaging, or other means of communicating with other users are not encrypted, and we strongly recommend that you do not send personal information through such means. Please help us keep your account secure by using complex passwords. We also recommend that you keep your account password secure and do not disclose it to others.

5.5 The Internet environment is not 100% secure and we will endeavor to ensure or warrant the security of any information you provide to us. If our physical, technical, or management protection facilities have been damaged, resulting in unauthorized access to information, public disclosure, tampering, or destruction, resulting in damage to your legitimate rights and interests, we will assume the corresponding legal responsibility.

5.6 After the unfortunate occurrence of personal information security incidents, we will, in accordance with the requirements of laws and regulations, promptly inform you of: the basic situation of the security incident and the possible impact, the disposal measures we have taken or will take, the suggestions you can independently prevent and reduce the risk, and the remedial measures for you, etc. We will promptly inform you of the situation related to the incident by email, letter, phone call, push notification, etc. When it is difficult to inform the subject of personal information one by one, we will take a reasonable and effective way to make a public announcement.

6. HOW YOU ACCESS AND CONTROL YOUR PERSONAL INFORMATION

6.1 We take your privacy very seriously and provide you with all the rights associated with the subject of your personal information. If our use of your personal information is based on your consent, you also have the right to withdraw your consent at any time (see below for details).

6.2 To exercise your right as personal information subject, please send your request to info@clickmab.com, and, we will respond as appropriate and within a month under applicable law. We will retain your request and our response (including any supporting documentation) in compliance with applicable laws. Also, we will continue to retain and otherwise process your personal information to the extent required to comply with applicable law; or, to establish, exercise or defend our legal claims and rights.

6.3 Please note that where we require your personal information to comply with legal or contractual obligations, provision of such data is mandatory: If such data is not provided, then we will not be able to manage the relationship, or to meet obligations placed on us. In all other cases, provision of requested personal information is optional.

Please also be noted that, before we respond to your request, we may have to ask you to provide necessary identification data in order to verify your identity. The response to your reasonable request is generally free of charge, unless such requests are manifestly unfounded or excessive, in particular because of their repetitive character, we may either refuse to act on such request or charge a reasonable fee.

6.4 If you are a Hong Kong resident, in principle we will respond to your request for correction within 40 days of unless:

(a) We are unable to determine your identity;

(b) The request is neither made in writing in Chinese nor in writing in English;

(c) We are unable to determine whether the correction request is accurate/confident that the correction request is inaccurate, etc.

6.5 Special rules for California residents: Do Not Sell My Personal Information

California Consumers have the right to opt-out of the "sale" of your Personal Information for monetary or other valuable consideration. If you are a California Consumer and would like to exercise your Right to Opt-Out of Sale or Sharing, please submit your request to us by email.

7. HOW WE PROCESS MINORS' PERSONAL INFORMATION

Our Service are primarily intended for adults. If you are a minor under the laws of your jurisdiction, you should obtain the prior consent of your parent or legal guardian before using our services. If you are the guardian of a minor, please also contact us when you have questions related to the personal information of a minor under your guardianship. We attach great importance to the protection of the personal information of minors, when you have any questions about the protection of the personal information of minors, you can contact us at any time through the contact information published in Article 9 of this Policy to put forward your request, and we will respond within a reasonable time.

If we become aware that we have collected personal information from a minor without the consent of the minors' guardian, we will delete the data as soon as we are aware of it. If you believe that we may improperly hold personal information from or about a minor, please contact us.

8. HOW THIS PRIVACY POLICY IS UPDATED

We may update this Policy from time to time. The updated version will be indicated by an updated "Revised" date and the updated version will be effective as soon as it is accessible. If we make material changes to this Policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Policy frequently to be informed of how we are protecting your information.

9. HOW TO CONTACT US

If you have questions or comments about this Policy, you can contact us by the following ways:

Tel: 0512-65113861

E-mail: info@clickmab.com

Address: Room B09, Block A3, 218 Xinghu Rd., Suzhou Industrial Park, China

10. APPLICABLE LAW AND DISPUTE RESOLUTION

10.1 The conclusion, entry into force, fulfillment, interpretation and dispute resolution of this Policy shall be governed by the laws of the People's Republic of China, and the application of conflict of laws shall be excluded. If a provision of this Policy conflicts with laws and regulations, it will be implemented in accordance with the laws and regulations; if a provision is found to be invalid, it will not affect the validity of other provisions. Other terms will continue to maintain full force.

10.2 Any dispute arising out of and in connection with this Policy shall first be settled through friendly consultation; if consultation fails, either party may submit the dispute to a court of competent jurisdiction at our location (Suzhou, Jiangsu Province) for settlement.