Privacy Policy

1. Who We Are / Data Controller

Moka Bio, Inc. is a corporation organized under the laws of the State of Delaware, United States of America ("Moka Bio", "we", "us", "our"). Moka Bio is the data controller responsible for the personal information described in this Policy.

For data protection inquiries, contact us at: info@moka.bio

2. Information We Collect

Information you provide directly

When you submit the contact form on our Site, we collect:

• Your full name
• Your professional email address
• Your phone number (optional)
• Your organization or company (if provided)
• The content of your message

This information is used solely to respond to your inquiry and to evaluate potential business opportunities. We do not use it for any marketing, profiling, or automated decision-making.

Information collected automatically

When you visit the Site, we automatically collect certain technical and usage data through Google Analytics (GA4), including:

• Pages visited and navigation path
• Time spent on each page
• Device type, browser, and operating system
• General geographic location (country and city level)
• Referral source (how you arrived at the Site)

Google Analytics uses IP anonymization by default. No personally identifiable information is transmitted to Google in connection with analytics. We do not combine analytics data with any personal information you provide through forms.

Information we do not collect

We do not collect sensitive personal data such as health information, financial data, biometric data, racial or ethnic origin, political opinions, religious beliefs, or trade union membership through this Site.

3. Legal Bases for Processing (GDPR)

For users in the European Economic Area (EEA) and United Kingdom (UK), we process your personal data under the following legal bases:

• Legitimate Interests (Art. 6(1)(f) GDPR) — Processing contact form submissions to evaluate and respond to business inquiries is necessary for our legitimate interests in operating a business, and does not override your rights and freedoms given the limited and expected nature of such processing.
• Legitimate Interests (Art. 6(1)(f) GDPR) — Collecting anonymized website analytics to understand and improve our Site's content and performance, where the minimal privacy impact does not outweigh our business interests.
• Consent (Art. 6(1)(a) GDPR) — Where we rely on consent (e.g., for any optional communications), you may withdraw it at any time by contacting us at info@moka.bio, without affecting the lawfulness of processing prior to withdrawal.

4. How We Use Your Data

• Contact form submissions — to respond to your message, follow up on your inquiry, and evaluate whether a business relationship may be relevant.
• Analytics data — to understand how visitors interact with the Site, improve content and user experience, and inform our product and marketing strategy. We never sell this data.

We do not use your personal data for automated decision-making, profiling, behavioral advertising, or any purpose incompatible with those stated above.

5. Data Retention

Contact form data is retained for up to 36 months from the date of submission, or for as long as necessary to pursue or maintain a business relationship, whichever is longer. After this period, data is securely deleted unless a legal obligation requires longer retention.

Analytics data is retained in Google Analytics for 14 months in line with Google's default settings, after which it is automatically deleted from Google's systems.

Retention periods may be extended where required by applicable law, regulatory obligation, or the legitimate resolution of a dispute.

6. Data Sharing

We do not sell, rent, or trade your personal information to any third party. We may share data only in the following limited circumstances:

• Google LLC — for analytics services under our agreement with Google, governed by Google's Privacy Policy and Google's Data Processing Amendment.
• Email and productivity infrastructure — we use standard commercial email and productivity services to manage correspondence. These providers act as data processors and are bound by appropriate contractual data protection obligations.
• Legal authorities — where disclosure is required by applicable law, court order, or governmental authority, or where necessary to protect the rights, property, or safety of Moka Bio, its clients, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of all or substantially all of Moka Bio's assets, your data may be transferred to the acquiring entity subject to equivalent privacy protections.

7. International Data Transfers

Moka Bio is incorporated in the United States and may operate across multiple jurisdictions. Personal data submitted through the Site may be stored and processed on servers located in the United States or other countries outside your country of residence.

For transfers of personal data from the EEA or UK to countries not recognized as providing an adequate level of data protection, we apply appropriate safeguards in accordance with GDPR Chapter V, which may include:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• UK International Data Transfer Agreements (IDTAs) where applicable
• Binding Corporate Rules or other approved transfer mechanisms

You may request a copy of the specific safeguards applicable to your data transfer by contacting us at info@moka.bio.

8. Cookies

Our Site uses a minimal set of cookies necessary for analytics. We do not use advertising, tracking, remarketing, or third-party social media cookies.

You can opt out of Google Analytics tracking at any time using the Google Analytics opt-out browser add-on. You can also manage cookies through your browser settings; however, disabling cookies may affect your experience of the Site.

9. Your Rights — EEA and UK Users (GDPR / UK GDPR)

If you are located in the European Economic Area or United Kingdom, you have the following rights under the GDPR and UK GDPR:

• Right of Access (Art. 15) — Request a copy of the personal data we hold about you.
• Right to Rectification (Art. 16) — Request correction of inaccurate or incomplete data.
• Right to Erasure (Art. 17) — Request deletion of your personal data ("right to be forgotten"), subject to legal retention obligations.
• Right to Restriction (Art. 18) — Request that we restrict processing of your data in certain circumstances.
• Right to Data Portability (Art. 20) — Receive your data in a structured, commonly used, machine-readable format.
• Right to Object (Art. 21) — Object to processing based on legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds.
• Right to Withdraw Consent — Where processing is based on consent, withdraw it at any time without affecting prior processing.
• Right to Lodge a Complaint — File a complaint with your competent supervisory authority. In the EEA, you may contact your national data protection authority; in the UK, the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, contact us at info@moka.bio. We will respond within 30 days (extendable to 60 days for complex requests).

10. Your Rights — California Residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you the following rights:

• Right to Know — the categories and specific pieces of personal information we collect, use, disclose, and sell (we do not sell your data).
• Right to Delete — request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Correct — request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing — we do not sell or share your personal information for cross-context behavioral advertising.
• Right to Non-Discrimination — we will not discriminate against you for exercising your privacy rights.

To exercise your CCPA rights, contact us at info@moka.bio. We will respond within 45 days, extendable to 90 days where necessary.

11. Additional Jurisdictional Rights

Depending on your country of residence, additional data protection rights may apply to you under local law. Where mandatory local law grants you rights that are broader than those described in this Policy, those rights will apply to the extent required. To exercise any applicable rights, contact us at info@moka.bio.

12. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include access controls, encryption in transit, and limited personnel access to personal data.

No method of transmission over the internet is completely secure. While we take commercially reasonable steps to protect your data, we cannot guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authorities and, where required, affected individuals, in accordance with applicable law.

13. Children's Privacy

The Site is directed exclusively at business professionals and is not intended for individuals under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately at info@moka.bio and we will take steps to delete it promptly.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we do, we will update the "Last updated" date at the top of this page.

For material changes that significantly affect your rights or how we use your data, we will take reasonable steps to notify you (such as displaying a notice on the Site). Continued use of the Site after changes are posted constitutes your acceptance of the revised Policy.

15. Contact

For questions, requests, or concerns about this Privacy Policy or our data practices, contact us at:

Moka Bio, Inc.
Delaware, United States of America
info@moka.bio

We will acknowledge receipt of your request within 72 hours and respond substantively within the timeframes required by applicable law.