Privacy Statement

Effective Date: July 7, 2025

StatSketch, Inc., dba IKASI complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. StatSketch, Inc., dba IKASI has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. StatSketch, Inc., dba IKASI has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) Program, and to view our certification, please visit https://www.dataprivacyframework.gov/

1. Who We Are

StatSketch, Inc., dba IKASI Address: San Francisco, CA, USA Website: www.ikasi.ai Contact Email: support@ikasi.ai

2. What Data We Collect

StatSketch, Inc. complies with the EU-U.S. Data Privacy Framework (DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework as set forth by the U.S. Department of Commerce. We have certified to the U.S. Department of Commerce that we adhere to the DPF Principles. To learn more about the Data Privacy Framework program and to view our certification, please visit https://www.dataprivacyframework.gov/.

We process the following categories of personal data:

  • Customer ID
  • Date of Birth
  • Marital Status
  • Gender
  • Number of Dependents
  • Postal Code
  • Employment Status and Type
  • Bureau Score
  • Gross Income and Income Frequency
  • Expenses
  • Purchase Transaction Data
  • Offer Redemption Data

This data is provided by the Data Controller or Data Collector with whom we have a contractual relationship.

3. Purpose and Legal Basis for Processing

We process personal data for the purpose of personalizing offers and incentives to customers. The legal basis for this processing is our legitimate interest in delivering relevant and impactful services to our clients and their end users.

4. How We Collect Data

IKASI does not collect data directly from individuals. All data is provided by our clients (Data Controllers or Data Collectors) through secure channels.

5. Use of Third-Party Services

We use Google Cloud Services for hosting and processing data in a secure and scalable environment. All processing with third-party providers complies with GDPR standards and is governed by Data Processing Agreements.

We ensure that all third-party service providers to whom personal data is disclosed comply with the DPF Principles or offer an equivalent level of protection. StatSketch, Inc. remains liable under the DPF Principles if such third parties process personal data in a manner inconsistent with the Principles, unless we prove that we are not responsible for the event giving rise to the damage.

6. Data Retention

Personal data is retained for a maximum period of 2 years from the date of collection unless otherwise required by law or the Data Controller’s instructions.

7. Your Rights Under GDPR

If you are a data subject located in the European Economic Area (EEA), you have the following rights:

  • Access to your personal data
  • Correction of inaccurate or incomplete data
  • Erasure of data (“right to be forgotten”)
  • Restriction or objection to processing
  • Data portability
  • Withdraw consent at any time (if processing is based on consent)

To exercise your rights, please contact us at support@ikasi.ai. We will respond to your request within 30 days.

8. International Data Transfers

As we are located in the United States, your data may be transferred outside the EEA. All transfers are conducted in compliance with GDPR requirements, using appropriate safeguards such as Standard Contractual Clauses.

9. Security Measures

We implement industry-standard technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We encourage you to review this page periodically. Your continued use of our services constitutes acceptance of the updated policy.

11. Contact Us

For any questions or concerns related to this policy or our data practices, please contact:

Email: support@ikasi.ai Mailing Address: StatSketch, Inc., dba IKASI, c/o Anthony Chong, 1 Ferry Building, SUITE 201, San Francisco, CA, 94111 USA

12. DPF Dispute Resolution and Enforcement

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, StatSketch, Inc., dba IKASI commits to resolve complaints about our collection or use of your personal information. Individuals from the EU, UK, and Switzerland with inquiries or complaints should first contact us at: support@ikasi.ai. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://www.jamsadr.com/DPF-Dispute-Resolution for more information or to file a complaint. The services of JAMS (formerly “Judicial Arbitration and Mediation Services”) are provided at no cost to you.

Under certain conditions, more fully described on the Data Privacy Framework website, you may invoke binding arbitration when other dispute resolution procedures have been exhausted. These procedures apply equally to individuals protected under the EU-U.S. DPF, the UK Extension, and the Swiss-U.S. DPF.

13. Disclosure in Response to Legal Requests

StatSketch, Inc., dba IKASI may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We will only disclose such information when required to do so by applicable law, regulation, legal process, or enforceable governmental request.

We are committed to balancing the legal obligations imposed on us with our users’ right to privacy and, where appropriate and not prohibited by law, we will attempt to notify individuals before disclosing their data in response to such requests.

Such disclosures are made in compliance with the obligations set forth under the EU-U.S. Data Privacy Framework (DPF), the UK Extension to the EU-U.S. DPF, the Swiss-U.S. DPF, and the General Data Protection Regulation (GDPR), as applicable.

14. FTC Investigatory and Enforcement Authority

In compliance with the EU-U.S. Data Privacy Framework (DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, IKASI acknowledges that it is subject to the investigatory and enforcement powers of the United States Federal Trade Commission (FTC).

This means that the FTC has the authority to investigate and take enforcement action against IKASI if we fail to comply with the DPF Principles. This oversight provides an additional layer of accountability and ensures that we uphold our commitments to protecting personal data transferred from the European Union, the United Kingdom, and Switzerland.

15. Disclosure of Personal Information to Third Parties

StatSketch, Inc., doing business as IKASI, may disclose personal information to certain third parties for specific business purposes. These disclosures are made in accordance with applicable data protection laws and are limited to what is necessary for the intended purpose. The types or identities of these third parties and the purposes of such disclosures include:

Service Providers and Vendors: We share personal information with trusted service providers who perform services on our behalf, such as cloud hosting, data analytics, email communications, customer support, and payment processing. These third parties are contractually obligated to use the information only for the purposes of providing services to us and are required to maintain appropriate confidentiality and security measures.

Business Partners and Integration Partners: In certain cases, we may share information with business partners or integration providers to enable product functionality or enhance user experience, subject to the user’s direction or consent.

Legal and Regulatory Authorities: We may disclose personal information when required to do so by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of IKASI, our users, or others.

In the Event of a Business Transaction: If IKASI is involved in a merger, acquisition, reorganization, or sale of assets, personal information may be disclosed or transferred as part of that transaction, in accordance with applicable law.

We do not sell personal information to third parties. When we transfer personal data to third parties, we ensure adequate protection is in place, including compliance with the DPF Principles where applicable.