Privacy Policy & Terms

1. Introduction

Iksa Inc (“iksa,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website iksa.ai (the “Site”) or use our services (collectively, the “Services”).

For information collected through this Site and directly from you (such as waitlist signups, contact forms, and partnership inquiries), Iksa Inc. acts as the data controller under applicable data protection laws. For personal data processed on behalf of our customers through our clinical platform, we act as a data processor under the terms of separate agreements (including Business Associate Agreements and Data Processing Agreements) with those customers.

Relationship to Customer Agreements. This Privacy Policy applies to information collected through the Site and our direct interactions with you. It does not supersede or modify any Business Associate Agreement (BAA), Data Processing Agreement (DPA), or other contract between Iksa and a customer. Where our clinical platform processes data on behalf of customers, the terms of the applicable customer agreement govern. Our platform operations are designed to align with HIPAA and ISO 27001 standards, and the specific privacy and security obligations for customer data are defined in those agreements.

2. Information We Collect

Personal Information. When you join our waitlist, submit a contact or partnership inquiry, or otherwise interact with us, we may collect your name, email address, company name, job title, and any message or information you voluntarily provide.

Usage Data. We automatically collect certain information when you access the Site, including your IP address, browser type and version, operating system, referring URLs, pages viewed, time and date of visits, and time spent on each page.

Cookies & Tracking Technologies. We may use cookies, web beacons, and similar technologies to collect usage data and improve your experience. You may control cookies through your browser settings. Disabling cookies may limit certain functionality of the Site.

Protected Health Information (PHI). The Site itself does not collect PHI. Our clinical platform processes PHI solely on behalf of healthcare customers under the terms of Business Associate Agreements (BAAs) with covered entities and in compliance with HIPAA requirements. Iksa does not sell, rent, monetize, or use PHI for marketing or advertising purposes. Our platform and operations are designed to align with healthcare-grade security frameworks including HIPAA and ISO 27001.

3. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and requests
• Process waitlist registrations and partnership inquiries
• Send product updates and communications (with your consent)
• Analyze Site usage to improve functionality and user experience
• Comply with legal obligations and enforce our terms
• Protect against unauthorized access, fraud, or misuse

4. Legal Basis for Processing

We process your personal information based on: (a) your consent, where you have provided it; (b) the necessity to perform a contract or take pre-contractual steps at your request; (c) our legitimate interests in operating and improving our business, provided these do not override your rights; and (d) compliance with legal obligations.

5. Data Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may share your information with:

• Service Providers: Trusted third parties who assist in operating the Site (e.g., form processing via Formspree, hosting, analytics)
• Legal Requirements: When required by law, regulation, legal process, or governmental request
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction
• Protection of Rights: To protect the rights, property, or safety of Iksa Inc, our users, or the public

6. Data Security

We implement industry-standard technical and organizational security measures to protect your personal information, including encryption in transit (TLS) and at rest. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security. If you become aware of any unauthorized access, please contact us immediately.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, or as required by applicable law. Waitlist and inquiry data is retained for the duration of our pre-launch period and deleted or anonymized within 12 months of collection unless you become a customer or request earlier deletion.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability (receive your data in a structured, machine-readable format)
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, contact us at info@iksa.ai. We will respond within 30 days.

We do not sell or share your personal information for cross-context behavioral advertising. As our business grows, we will update this section with jurisdiction-specific disclosures as required by applicable state privacy laws (including the California Consumer Privacy Act and similar state legislation).

9. International Data Transfers

Your information may be transferred to and processed in the United States or other jurisdictions where our service providers operate. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

10. Children's Privacy

The Site and Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

11. Third-Party Links

The Site may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies before providing any personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and revising the “Last updated” date. Your continued use of the Site after changes are posted constitutes acceptance of the revised policy.