Privacy Policy

1. Who We Are / Data Controller

Moka Bio, Inc. is a corporation organized under the laws of the State of Delaware, United States of America ("Moka Bio", "we", "us", "our"). Moka Bio is the data controller responsible for the personal information described in this Policy.

For any privacy inquiry or request, contact us at: info@moka.bio

2. Information We Collect

Information you provide directly

Our contact form prepares an email in your own email application. We only receive the information if you send that email. It may include:

• Your name
• Your company or organization
• Your email address
• Your phone number (optional)
• The type of inquiry (platform demo, R&D service, or other)
• The content of your message

We also receive any information you include when you write to us directly by email.

Information collected automatically (only with your consent)

If you accept analytics cookies, we use Google Analytics 4 to collect technical and usage data, including:

• Pages visited and navigation path
• Time spent on each page
• Device type, browser, and operating system
• Approximate geographic location (country and city level)
• Referral source (how you arrived at the Site)

If you reject analytics cookies, Google Analytics is not loaded and none of this data is collected. According to Google, Google Analytics 4 does not log or store IP addresses. We do not combine analytics data with the information you send us by email.

Information we do not collect

We do not request sensitive personal data such as health information, financial data, biometric data, racial or ethnic origin, political opinions, religious beliefs, or trade union membership through this Site. Please do not include such data in your messages.

3. Purposes and Legal Bases

• Responding to your inquiry — to answer your message, schedule a demo, or prepare a proposal for a service you request. Legal basis under the GDPR: steps taken at your request prior to entering into a contract (Art. 6(1)(b)) and our legitimate interest in responding to business inquiries (Art. 6(1)(f)). Under the LGPD, the equivalent bases are Art. 7, V and IX.
• Website analytics — to understand how visitors use the Site and improve its content. Legal basis: your consent (Art. 6(1)(a) GDPR; Art. 7, I LGPD), which you can withdraw at any time through the "Cookie settings" link in the footer.
• Legal obligations — to comply with applicable laws and respond to lawful requests from authorities (Art. 6(1)(c) GDPR; Art. 7, II LGPD).

We do not sell your personal data, use it for behavioral advertising, or make automated decisions about you. We will not send you marketing communications unless you ask us to.

4. Data Retention

Inquiry data is retained for up to 36 months from the date of your last communication, or for as long as necessary to maintain a business relationship with you, whichever is longer. It is then deleted unless a legal obligation requires longer retention.

Analytics data is retained in Google Analytics for the retention period configured in our account, which does not exceed 14 months, after which Google deletes it automatically.

5. Data Sharing

We do not sell, rent, or trade your personal information. We only share it in the following cases:

• Google LLC — as an analytics provider, only if you accept analytics cookies, under Google's Privacy Policy and Google's data processing terms.
• Email and productivity providers — which process correspondence on our behalf as data processors, bound by contractual data protection obligations.
• Legal authorities — when required by applicable law, court order, or governmental authority, or when necessary to protect the rights, property, or safety of Moka Bio, its clients, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of all or substantially all of Moka Bio's assets, subject to equivalent privacy protections.

6. International Data Transfers

Moka Bio is incorporated in the United States. Your data may be stored and processed on servers located in the United States or in other countries outside your country of residence.

For transfers from the European Economic Area, the United Kingdom, Brazil, or other jurisdictions that require it, we rely on appropriate safeguards, such as the Standard Contractual Clauses approved by the European Commission or equivalent mechanisms. You may request information about these safeguards at info@moka.bio.

7. Cookies and Your Choice

When you first visit the Site, we ask whether you accept analytics cookies. Google Analytics cookies are only set if you accept. We do not use advertising, remarketing, or social media cookies.

You can change your choice at any time using the "Cookie settings" link in the footer. You can also delete cookies through your browser settings.

8. Your Rights — EEA and UK (GDPR / UK GDPR)

If you are located in the European Economic Area or the United Kingdom, you have the right to:

• Access the personal data we hold about you (Art. 15).
• Rectify inaccurate or incomplete data (Art. 16).
• Erase your data, subject to legal retention obligations (Art. 17).
• Restrict processing in certain circumstances (Art. 18).
• Data portability in a structured, machine-readable format (Art. 20).
• Object to processing based on legitimate interests (Art. 21).
• Withdraw consent at any time, without affecting prior processing.
• Lodge a complaint with your national data protection authority or, in the UK, the Information Commissioner's Office (ico.org.uk).

We will respond within one month, extendable by two further months for complex requests.

9. Your Rights — California (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know the categories and specific pieces of personal information we collect, use, and disclose.
• Delete personal information we have collected from you, subject to certain exceptions.
• Correct inaccurate personal information.
• Opt out of sale or sharing — we do not sell or share personal information for cross-context behavioral advertising.
• Non-discrimination for exercising your privacy rights.

We will respond within 45 days, extendable to 90 days where necessary.

10. Your Rights — Mexico (LFPDPPP)

Under the Federal Law on the Protection of Personal Data Held by Private Parties (published March 20, 2025), you may exercise your rights of Access, Rectification, Cancellation, and Opposition (ARCO), and revoke your consent, by writing to info@moka.bio with your name, the right you wish to exercise, and a description of the data concerned.

We will communicate our decision within 20 business days of receiving your request and, if it is granted, make it effective within the following 15 business days. The competent authority is the Secretaría Anticorrupción y Buen Gobierno.

11. Your Rights — Brazil (LGPD)

Under the Brazilian General Data Protection Law (Law No. 13,709/2018), you have the right to:

• Confirmation that we process your data, and access to it.
• Correction of incomplete, inaccurate, or outdated data.
• Anonymization, blocking, or deletion of unnecessary or excessive data, or data processed in breach of the LGPD.
• Portability of your data to another provider.
• Deletion of data processed with your consent, and revocation of that consent.
• Information about the entities with which we share your data, and about the possibility of not giving consent and its consequences.

Our channel for data subject requests is info@moka.bio. We will respond to requests for confirmation or access within 15 days. You may also file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD).

12. Your Rights — Argentina (Law 25,326)

You may request access to your personal data free of charge at intervals of no less than six months, unless a legitimate interest is demonstrated. We will respond to access requests within 10 business days, and to requests for rectification, updating, or deletion within 5 business days, by writing to info@moka.bio.

The Agencia de Acceso a la Información Pública, as the control authority of Law No. 25,326, is empowered to handle complaints and claims filed by those whose rights are affected by non-compliance with personal data protection rules.

13. Other Jurisdictions

Depending on where you live, local law may grant you additional rights. Where mandatory local law grants rights broader than those described here, those rights apply. To exercise any of them, contact info@moka.bio.

14. Data Security

We apply reasonable technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including access controls and encryption in transit.

No method of transmission over the internet is completely secure, so we cannot guarantee absolute security. If a security incident is likely to affect your rights, we will notify the competent authorities and, where required, the affected individuals, as required by applicable law.

15. Minors

The Site is intended for business professionals and is not directed at individuals under 16 years of age (or the age of digital consent in your jurisdiction). We do not knowingly collect data from minors. If you believe we have received such data, contact us and we will delete it.

16. Changes to This Policy

We may update this Policy to reflect changes in our practices, technology, or legal requirements. We will update the "Last updated" date at the top of this page and, for material changes, display a notice on the Site.

17. Contact

Moka Bio, Inc.
Delaware, United States of America
info@moka.bio