Ixana Privacy Policy

1. Introduction

Quasistatics Inc., doing business as Ixana (“Ixana,” “we,” “us,” or “our”), is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit our website at ixana.ai, use our general business services, or otherwise interact with us.

Scope: What This Policy Covers:

This policy covers personal information processed through our website and general business interactions (including sales enquiries, newsletters, and support communications). Data processed through Ixana devices, device software, or enterprise deployments is governed separately by our Order Form, provided at the time of purchase and available upon request at privacy@ixana.ai. Where there is any conflict between this policy and the Order Form for product/device data, the Order Form will take precedence.

This policy applies to individuals worldwide. Where regional laws (GDPR, UK GDPR, CCPA/CPRA, India DPDP Act) grant additional rights or impose additional obligations, those are addressed explicitly in Sections 10–13.

2. Who We Are

The data controller responsible for your personal information is:

EU/EEA Representative (Article 27 GDPR):

We are currently in the process of appointing an EU representative in accordance with Article 27 GDPR. Once appointed, their full name, address, and contact details will be published in this section. In the meantime, EEA data subjects and supervisory authorities may contact us directly at privacy@ixana.ai for any privacy-related matters.

UK Representative:

We are currently in the process of appointing a UK representative in accordance with UK GDPR Article 27. Once appointed, their details will be published here. Until then, UK data subjects may contact us directly at privacy@ixana.ai.

3. Information We Collect

3a. Information You Provide Directly

• Identity & Contact Data: Name, email address, phone number, job title, company name, and postal address, collected when you fill in forms, subscribe to our newsletter, register an account, or contact us.
• Communications Data: Content of emails, support tickets, and survey responses you send us.
• Transaction & Commercial Data: Billing name, billing address, and payment method details. Full card numbers are processed directly by our payment processors and are never stored by Ixana.

3b. Information Collected Automatically

• Device & Technical Data: IP address, browser type and version, operating system, device identifiers, screen resolution, and referring URL.
• Usage & Log Data: Pages visited, links clicked, time spent on pages, error logs, and access timestamps.
• Cookie & Tracking Data: Identifiers set by first-party and third-party cookies and similar technologies. See Section 6 for full details.

3c. Information from Third Parties

• Analytics Providers: Pseudonymous behavioral data from services such as Google Analytics, Microsoft Clarity.
• Public Sources: Publicly available professional information (e.g., LinkedIn) where relevant to a business relationship.

3d. Sensitive & Special Category Data

This website does not intentionally collect sensitive personal data (such as health, biometric, racial, or political data) from general visitors. Where Ixana's products involve healthcare, clinical research, or human body-area network applications, any processing of health or biometric data is governed exclusively by the applicable Order Form agreed at the time of purchase. We will only process such data where we have a valid lawful basis and, where required by law, your explicit consent.

4. How We Use Your Information

We process your personal information only for the purposes and on the lawful bases set out below.

We will not use your personal information for purposes materially different from those above without prior notice and, where required, renewed consent.

5. Disclosure of Your Information

We do not sell your personal information to third parties.

We may disclose your personal information to the following categories of recipients only:

• Service Providers / Data Processors: Third-party vendors who process data strictly on our behalf and under our instructions (e.g., cloud hosting, email delivery, payment processing, customer support tools, analytics platforms). All vendors are bound by written data processing agreements and appropriate security obligations. Categories of our current service providers are available upon request at privacy@ixana.ai.
• Professional Advisors: Lawyers, auditors, and insurers, subject to binding confidentiality obligations.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or governmental authority.
• Business Transfers: In connection with merger, acquisition, financing due diligence, or sale of all or part of our business assets. Affected users will be notified, and any successor entity will be required to honor this policy or provide advance notice of changes.
• With Your Consent: To any other third party where you have given us specific, prior written consent.

We do not share your personal information with unaffiliated third parties for their own marketing purposes.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our website. Cookies fall into the following categories:

• Necessary: Required for the website to function (e.g., session management, security tokens). These cannot be disabled without affecting core functionality.
• Analytics: Help us understand how visitors use our site. These are placed only with your consent where required by applicable law.
• Marketing / Advertising: These cookies help us promote our services and measure the effectiveness of our marketing efforts. They may be used to track visits to our website, understand which pages are of interest, and improve our communications and outreach. These cookies are only used with your consent where required by applicable law.

You can manage your cookie preferences at any time through the cookie preference centre accessible via the banner on our website, or by adjusting your browser settings. Withdrawing consent for non-essential cookies does not affect the operation of strictly necessary cookies and does not affect the lawfulness of any prior consent-based processing.

For full details on cookie names, durations, and third-party providers, see our Cookie Policy at: ixana.ai/legal/privacy-policy

7. Data Retention

We retain personal information only as long as necessary to fulfil the purposes in this policy, unless a longer retention period is required or permitted by law.

When data is no longer required, we securely delete or anonymize it. Where immediate deletion is technically infeasible (e.g., encrypted backup archives), we isolate the data from further processing until deletion is possible.

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction, including:

• Encryption in transit (TLS) and at rest where applicable
• Role-based access controls and least-privilege principles
• Contractual security obligations for all vendors
• Regular internal security reviews

No method of electronic transmission or storage is completely secure. In the event of a personal data breach that is likely to result in risk to your rights and freedoms, we will notify affected individuals and applicable regulatory authorities in accordance with applicable law, including within GDPR-required timeframes where applicable, and as required under India's DPDP Act and Rules.

9. International Data Transfers

Quasistatics Inc. is headquartered in the United States. If you are located outside the US, your personal information may be transferred to, stored, and processed in the US or other countries where our service providers operate.

10. Your Privacy Rights

Depending on your location, you may have the following rights:

How to exercise your rights:

Submit a request to privacy@ixana.ai with your name, email address, and a clear description of your request. We will verify your identity before processing and will respond within the following timeframes:

• GDPR / UK GDPR: Within one calendar month of receipt, extendable by a further two months for complex or numerous requests. We will notify you within the first month if an extension is required.
• CCPA / CPRA (California): Within 45 days, with one possible 45-day extension where reasonably necessary (with prior written notice).
• All other requests: Within 30 days.

We do not charge a fee for reasonable, non-repetitive requests.

Complaints:

If you are dissatisfied with our response, you have the right to lodge a complaint with your local supervisory authority:

• EU/EEA residents: Your national supervisory authority (e.g., CNIL – France, BfDI – Germany, DPC – Ireland). Full list at edpb.europa.eu.
• UK residents: Information Commissioner's Office (ICO) - ico.org.uk
• India residents: Data Protection Board of India (once fully operational under the DPDP Act)
• California residents: California Privacy Protection Agency (CPPA) - cppa.ca.gov

11. EEA & UK Residents - Additional GDPR Rights

In addition to Section 10, EEA and UK residents may:

• Request the categories of third parties to whom we have disclosed your data.
• Object to automated decision-making or profiling that produces legal or similarly significant effects. We do not currently engage in such automated decision-making. We will update this section if that changes.
• Contact us at privacy@ixana.ai for any GDPR-specific enquiries while our EU/UK representative appointments are being finalized.

We do not currently meet the threshold requiring a mandatory Data Protection Officer (DPO) under Article 37 GDPR. We will keep this under review as our data processing activities evolve, particularly as product-level data processing scales.

12. California Residents: CCPA / CPRA

If you are a California resident, you have the following additional rights under the CCPA as amended by the CPRA:

• Right to Know: Categories and specific pieces of personal information collected, the purposes for collection, and categories of third parties we share with.
• Right to Delete: Deletion of personal information, subject to certain exceptions.
• Right to Correct: Correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: We do not sell personal information, nor do we share it for cross-context behavioral advertising as defined under the CPRA. If this changes, we will update this policy and provide a “Do Not Sell or Share My Personal Information” link.
• Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information for purposes beyond those permitted by the CPRA without your consent.
• Authorized Agents: You may designate an authorized agent to submit a rights request on your behalf. We will require written proof of authorization and may verify your identity directly.
• Right to Non-Discrimination: We will not deny services, charge different prices, or provide a lower quality of service because you exercised any of these rights.

To exercise California rights, contact: privacy@ixana.ai

13. Children's Privacy

Our website and general services are not directed at children under the age of 13 (or under 16 for EEA/UK residents, subject to the applicable Member State digital consent age). We do not knowingly collect personal information from children below these thresholds. If you believe we have inadvertently collected such data, please contact privacy@ixana.ai immediately and we will promptly delete it.

If future product lines are designed for or likely to be used by minors, we will conduct a specific Children's Privacy Assessment and update this policy and the relevant Order Form terms accordingly.

14. Third-Party Links

Our website may contain links to third-party websites, plugins, or services. Clicking those links may allow third parties to collect data about you. We do not control these third-party sites and are not responsible for their privacy practices. We encourage you to review the privacy policy of any site you visit before providing personal information.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the “Last Updated” date at the top of this page
• Notify registered users and newsletter subscribers by email where appropriate
• Where required by applicable law, obtain renewed consent

We encourage you to review this page periodically. The most current version of this policy is always available at ixana.ai/legal/privacy-policy.