Company: TVRD
Filing Date: 2025-11-13
Form Type: 424B3
Source: 0001104659-25-111336
Chunk: 190

Company: Tvardi Therapeutics, Inc.
Filing Date: 2025-11-13
Form: 424B3
Chunk 190
---
 hold harmless third parties from the costs or consequences of non-compliance
with any laws, rules and regulations or other legal obligations relating to privacy or any inadvertent or unauthorized use or disclosure
of data that Tvardi stores or handles as part of operating its business. Any of these events could adversely affect Tvardi’s reputation,
business, or financial condition, including but not limited to: loss of customers; interruptions or stoppages in its business operations
(including clinical trials); inability to process personal information or to operate in certain jurisdictions; limited ability to develop
or commercialize its products; expenditure of time and resources to defend any claim or inquiry; adverse publicity; or substantial changes
to its business model or operations.

​

Tvardi cannot be certain that its CROs, CMOs or
other third-parties with access to its or its suppliers’, manufacturers’, clinical trial participants’ and employees’
sensitive information in relation to which Tvardi is responsible will not breach contractual obligations imposed by Tvardi, or that they
will not experience data security incidents, which could have a corresponding effect on its business, including putting Tvardi in breach
of

<div align='center'>111</div>

Table of Contents

its obligations under privacy laws and regulations and/or which could
in turn adversely affect its business, financial condition, results of operations and prospects. Tvardi cannot be certain that its contractual
measures and its own privacy and security-related safeguards will protect Tvardi from the risks associated with the third-party processing
of such information. Any of the foregoing could adversely affect its business, financial condition, results of operations and prospects.

​

Tvardi posts certain of its privacy policies which
describe its practices concerning its collection, use, disclosure and other processing of the personal information. Although it endeavors
to comply with its public statements and documentation, Tvardi may at times fail to do so or be perceived to have failed to do so. Tvardi’s
publication of its privacy policies and other statements it publishes that provide promises and assurances about privacy and security
can subject Tvardi to potential state and federal action if they are found to be deceptive, unfair or misrepresentative of its actual
practices.

​

Any actual or perceived failure by Tvardi to comply
with federal, state or foreign laws, rules or regulations, industry standards, contractual or other legal obligations relating to data
privacy or security, or any actual, perceived or suspected cybersecurity incident, whether or not