Privacy Policy

Last Updated: May 27, 2026

This Privacy Notice describes how Codexis, Inc. (“we”, “us”, “our”) collects, uses and discloses information about you when you use our website (https://www.codexis.com/), applications, services, tools and features, or otherwise interact with us (collectively, the “Services”).

Please read this Privacy Notice carefully. By using any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Notice. If you do not understand or agree to this Privacy Notice, please do not use or access the Services.

1.       CHANGES TO THIS PRIVACY NOTICE

We may modify this Privacy Notice from time to time, in which case we will update the “Last Updated” date at the top of this Privacy Notice. If you do not agree to any updates to this Privacy Notice, please do not continue using or accessing the Services.

2.       COLLECTION AND USE OF INFORMATION

When you use or access the Services, we collect certain categories of information about you from a variety of sources. In addition to the specific uses discussed below, we may use this information to provide and improve the Services and to maintain our business relationship, as a matter of our legitimate interests, including by enhancing the safety and security of our Services, providing customer support, complying with applicable legal obligations, enforcing any applicable terms of service, and protecting our rights and the rights of our employees, users, or other individuals.

Information You Provide to Us

Some features of the Services may require you to directly provide certain information, including information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing these features. Information that you directly submit through our Services includes:

• Contact information, such as your name, address, phone number, email address, and title. We use this information to provide the Services, as required to perform our contract with you, and because it is in our legitimate interests to communicate with you (including to share company press releases, information about events, or otherwise tell you about products or services that may be of interest to you, including, to the extent required by applicable laws, where you have consented to receiving marketing communications from us).
• Applicant details, such as contact information, your LinkedIn URL, information included in your resume or CV, references, and job history. We use applicant details in our legitimate interests to process your application for employment and to evaluate your candidacy.
• Any other information you choose to provide us or otherwise include in communications with us, for example, when sending a message through the Services, because it is in our legitimate interests to be responsive to you.

Information Collected Automatically

We and third parties also automatically collect certain information about your interactions with the Services, including through cookies, pixels, and other tracking technologies (“Tracking Technologies”). Where required by applicable law, we obtain your consent to collect and process this information. This information is collected and used to personalize the Services for you and to target, deliver, and measure interest-based advertising, to tailor your experience with the Services, manage web traffic, run analytics, and better understand user interactions with the Services. Such information includes:

• Device information, such as device type, operating system, unique device identifier and internet protocol (IP) address.
• Location information, such as approximate location based on IP address.
• Other information regarding your interaction with the Services, such as browser type, log data, date and time stamps, clickstream data (e.g., page requests, page views, how much time is spent on a page, content viewed or interacted with, text entered, etc.) and ad impressions.

For further information on the use of Tracking Technologies and your choices, see the section below, Cookies and Other Tracking Technologies.

Information Collected from Other Sources

We may obtain information about you from outside sources, including information that we collect directly from third parties and information from third parties that you choose to share with us. Such information includes:

• Information we receive directly from third-party social media platforms, such as when you interact with us on LinkedIn, which we use in our legitimate interests to communicate with you and personalize our Services.
• Information we receive from career websites and referees, including from LinkedIn or Indeed, which we use in our legitimate interests to consider and process your application for employment.

Any information we receive from outside sources will be treated in accordance with this Privacy Notice. We are not responsible for the accuracy of the information provided to us by third parties. For more information, see the section below, Third-Party Websites and Links.

Deidentified Information

Finally, we may deidentify or anonymize your information such that it cannot reasonably be used to infer information about you or otherwise be linked to you (“deidentified information”) (or we may collect information that has already been deidentified/anonymized), and we may use deidentified information for any purpose. To the extent we possess or process any deidentified information, we will maintain and use such information in deidentified form and not attempt to re-identify the information, except for the purpose of determining whether our deidentification process satisfies legal requirements.

3.       COOKIES AND OTHER TRACKING TECHNOLOGIES

As described above, we and third parties use Tracking Technologies to collect certain information about your interactions with the Services. Some browsers accept Tracking Technologies automatically, but, depending on your location, you may be able to control the way in which your devices permit the use of certain Tracking Technologies. If you so choose, you may block or delete certain Tracking Technologies from your browser; however, blocking or deleting cookies may cause some of the Services, including login features and general functionality, to work incorrectly.

Your browser settings may allow you to transmit a signal or other mechanism for exercising your choice regarding the collection or processing of your information when you visit various websites. Depending on where you live, you may have the right to opt out of targeted advertising through a Global Privacy Control (GPC) enabled browser setting. If you have this right, we will treat our initial receipt of the GPC signal as a valid request to opt out of targeted advertising. If you are logged out, our processing of the signal will be limited to the browser that you are using.

You may also opt out of the collection and use of information for interest-based advertising by advertisers that are part of certain industry alliances, including through tools offered by the National Advertising Initiative, the Digital Advertising Alliance, or the European Interactive Digital Advertising Alliance, by clicking the links provided.

While we do not sell personal information in the traditional sense, we disclose (and have disclosed in the preceding 12 months) the following categories of personal information for marketing and advertising purposes with providers of Tracking Technologies in a manner that may be considered “selling” or “sharing” as those terms are defined under applicable law: Identifiers, Internet or similar network activity, geolocation information (such as IP address) and inferences drawn from other personal information, and website interactions and behavior. However, we have no actual knowledge that we have “sold” or “shared” the personal information of individuals under 18 years of age.

4.       DISCLOSURE OF YOUR INFORMATION

We may disclose your information for legitimate purposes subject to this Privacy Notice, including:

• vendors or other service providers who help us provide the Services, in order to perform our contract with you and in our legitimate interests, including for system administration, cloud storage, security, customer relationship management, marketing communications, analytics, generative AI and content creation, payment networks, payment processing, and the deployment of Tracking Technologies;
• professional advisors, such as auditors, law firms or accounting firms, as a matter of our legitimate interests to assess, protect, enforce and defend our rights and to comply with our legal and regulatory obligations;
• third parties, in connection with or anticipation of an asset sale, merger, acquisition, or other business transaction, including in the context of a bankruptcy proceeding or other restructuring matter, as a matter of our legitimate interests to run a successful and efficient business;
• third parties in connection with your application for employment, including companies who help us with background checks and other verifications, referees or other individuals whose details you provide for us to contact and obtain an employment reference about you, and recruitment agencies where relevant, as a matter of our legitimate interests to consider and process your application for employment; and
• for legal and security reasons and to protect our services and business, in our legitimate interests or as required by law, including to cooperate with law enforcement, judicial orders and regulatory inquiries, to detect and prevent against fraudulent or illegal activity, to exercise or defend legal claims and to ensure the safety and security of our business, employees and users, and to enforce our terms or other agreements.

We do not disclose your personal information to third parties for the third parties’ own direct marketing purposes, unless you have affirmatively agreed to such disclosure.

5.       THIRD-PARTY WEBSITES AND MATERIALS

We may provide links to third-party websites or platforms and display or make available content, data, applications or materials from third parties. If you follow links to sites or platforms that we do not control and are not affiliated with us, you should review the applicable privacy notices and other terms. We are not responsible for the privacy or security of, or information found on, these sites or platforms, or the accuracy, completeness, or reliability of third-party materials. Information you provide on public or semi-public venues, such as third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators.

6.       CHILDREN’S PRIVACY

Our Services are not intended for children, and we do not seek or knowingly collect any personal information about children. If we become aware that we have unknowingly collected information about a child, in particular any child under 13 years of age, we will make commercially reasonable efforts to delete such information from our database. If you are the parent or guardian of a child under 13 years of age who has provided us with their personal information, you may contact us using the below information to request that it be deleted.

7.       DATA SECURITY AND RETENTION

We have implemented commercially reasonable security measures designed to protect your personal information from unauthorized access, use, or disclosure. However, despite our efforts to protect your information, no security measures are impenetrable, and we cannot guarantee “perfect security.” Any information you send to us electronically, while using the Services or otherwise interacting with us, may not be secure while in transit. We recommend that you do not use unsecure channels to send us sensitive or confidential information.

We retain your information for as long as is reasonably necessary for the purposes specified in this Privacy Notice. When determining the length of time to retain your information, we consider various criteria, including whether we need the information to continue to provide you the Services, resolve a dispute, enforce our contractual agreements, prevent harm, promote safety, security, and integrity, or protect ourselves, including our rights, property, or products.

8.       DATA TRANSFERS

We are based in the United States. If you are using the Services from outside the United States, please be aware that the information we collect from you may be transferred to, stored, and processed in the United States or other countries outside your country of residence.

9.       PRIVACY RIGHTS

Depending on where you live, you may have certain rights in relation to your personal information. However, please note that a number of these rights only apply in certain circumstances, and all of these rights may be limited by law.

• Access / Know: You may have the right to request access to the personal information we hold about you and to obtain details about what personal information we have collected about you, including the categories of personal information, the categories of sources from which the information was collected, the business or commercial purposes for collecting, selling or sharing personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we have collected about you.
• Deletion / Erasure: You may have the right to request that we delete personal information we hold about you.
• Correction: You may have the right to request that we correct inaccurate personal information we hold about you.
• Portability: You may have the right to receive a copy of the personal information we hold about you in a portable and, to the extent technically feasible, readily usable format, and to request that we transfer it to a third party.
• Restriction of Processing: You may have the right to require us to stop, suspend or restrict our processing of personal information we hold about you.
• Objection: You may have the right to object to our processing of your personal information.
• Opt-Out of Marketing: You may opt out of marketing at any time by using the unsubscribe / opt-out instructions provided in our communications to you. If you opt out, we may still send you transactional or administrative messages, such as emails about your account.
• Opt out of Sale or Sharing / Processing for Targeted Advertising. You may have a right to direct us not to sell your personal information or share or process your personal information for targeted advertising. For information on how we process opt-out preference signals, see the section above, Cookies and Other Tracking Technologies.
• Withdrawal of Consent: Where we rely on consent to process your personal information, you may have the right to withdraw this consent at any time.

Submitting a Request

To make a request described in this section, please send the request to legal@codexis.com.

We will not retaliate or discriminate against you for exercising any of these rights. Further information may be needed to verify your identity before exercising these rights, such as your email address. You may designate, in writing or through a power of attorney document, an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. If we deny your request, you may have the right to appeal our decision by contacting us through the methods described in the section below, How to Contact Us.

When you submit a request or launch an appeal, we will limit our collection of your information to only what is necessary to securely fulfil your request or process your appeal. We will not require you or your authorized agent to pay a fee for the verification of your request or appeal. You may also have the right to complain to your local data protection authority about how we process your personal data.

10.   CALIFORNIA  RESIDENTS

This section applies to you if you are a resident of California and we process personal information about you that is subject to the California Consumer Privacy Act (“CCPA”). For purposes of this section, references to “personal information” shall include “sensitive personal information” as defined under the CCPA.

Processing of Personal Information

In the preceding 12 months, we collected and disclosed to service providers (as described in the Disclosure of your Information section above) the following categories of personal information and sensitive personal information (denoted by *):

• Identifiers, such as name, e-mail address and IP address
• Personal information categories listed in the California Customer Records statute such as name
• Characteristics of protected classifications under California or federal law, if you apply for employment with us, such as sex (including gender), age, physical or mental disability* and citizenship
• Internet or other similar network activity such as information regarding your interaction with the Services
• Geolocation data such as general location derived from your IP address
• Professional or employment-related information such as title of profession, employer, professional background

The categories of sources from which we collect your personal information and the specific purposes for which we collect and disclose (including “selling” and/or “sharing”) your personal information, are described in the sections above, Collection of Your Information, Use of Your Information and Disclosure of Your Information, respectively.

We only use and disclose sensitive personal information for purposes specified in the CCPA or otherwise in line with your consent, and we do not use or disclose sensitive personal information for purposes of inferring characteristics about you. The criteria we use to determine how long to retain your personal information is described in the section above, Retention of Your Information.

California Rights

In addition to the rights described in the section above, Privacy Rights, that are applicable to California residents, you may also have the following rights under California law.

We provide California residents with the ability to opt out of the disclosure of their personal information to third parties for the third parties’ direct marketing purposes under the California “Shine the Light” law at no cost. To exercise this right, please contact us using the method(s) described in the How to Contact Us section, below.

11.   HOW TO CONTACT US

Should you have any questions about our privacy practices or this Privacy Notice, please fill out the contact form on the “Contact Us” page of our website. Call us at (650) 421-8100.

Cookies