Privacy Statement

Effective Date: June 25, 2025

1. Who We Are

StatSketch, Inc., dba IKASI
Address: San Francisco, CA, USA
Website: www.ikasi.ai
Contact Email: support@ikasi.ai

2. What Data We Collect

StatSketch, Inc. complies with the EU-U.S. Data Privacy Framework (DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework as set forth by the U.S. Department of Commerce. We have certified to the U.S. Department of Commerce that we adhere to the DPF Principles. To learn more about the Data Privacy Framework program and to view our certification, please visit https://www.dataprivacyframework.gov/.

We process the following categories of personal data:
– Customer ID
– Date of Birth
– Marital Status
– Gender
– Number of Dependents
– Postal Code
– Employment Status and Type
– Bureau Score
– Gross Income and Income Frequency
– Expenses
– Purchase Transaction Data
– Offer Redemption Data

This data is provided by the Data Controller or Data Collector with whom we have a contractual relationship.

3. Purpose and Legal Basis for Processing

We process personal data for the purpose of personalizing offers and incentives to customers. The legal basis for this processing is our legitimate interest in delivering relevant and impactful services to our clients and their end users.

4. How We Collect Data

IKASI does not collect data directly from individuals. All data is provided by our clients (Data Controllers or Data Collectors) through secure channels.

5. Use of Third-Party Services

We use Google Cloud Services for hosting and processing data in a secure and scalable environment. All processing with third-party providers complies with GDPR standards and is governed by Data Processing Agreements.

We ensure that all third-party service providers to whom personal data is disclosed comply with the DPF Principles or offer an equivalent level of protection. StatSketch, Inc. remains liable under the DPF Principles if such third parties process personal data in a manner inconsistent with the Principles, unless we prove that we are not responsible for the event giving rise to the damage.

6. Data Retention

Personal data is retained for a maximum period of 2 years from the date of collection unless otherwise required by law or the Data Controller’s instructions.

7. Your Rights Under GDPR

If you are a data subject located in the European Economic Area (EEA), you have the following rights:
– Access to your personal data
– Correction of inaccurate or incomplete data
– Erasure of data (“right to be forgotten”)
– Restriction or objection to processing
– Data portability
– Withdraw consent at any time (if processing is based on consent)

To exercise your rights, please contact us at support@ikasi.ai. We will respond to your request within 30 days.

8. International Data Transfers

As we are located in the United States, your data may be transferred outside the EEA. All transfers are conducted in compliance with GDPR requirements, using appropriate safeguards such as Standard Contractual Clauses.

9. Security Measures

We implement industry-standard technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We encourage you to review this page periodically. Your continued use of our services constitutes acceptance of the updated policy.

11. Contact Us

For any questions or concerns related to this policy or our data practices, please contact:

Email: support@ikasi.ai
Mailing Address: StatSketch, Inc., dba IKASI, c/o Anthony Chong, 1 Ferry Building, SUITE 201, San Francisco, CA, 94111 USA

12. DPF Dispute Resolution and Enforcement

In compliance with the DPF Principles, StatSketch, Inc. commits to resolve complaints about our collection or use of your personal information. Individuals from the EU, UK, and Switzerland with inquiries or complaints should first contact us at:

Email: support@ikasi.ai

If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please contact our designated independent recourse mechanism at https://www.jamsadr.com/DPF-Dispute-Resolution

Under certain conditions, more fully described on the Data Privacy Framework website, you may invoke binding arbitration when other dispute resolution procedures have been exhausted. These procedures apply equally to individuals protected under the EU-U.S. DPF, the UK Extension, and the Swiss-U.S. DPF.