Privacy Policy

This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

• Company ("We", "Us", "Our") refers to iolokis SAS, 60 Rue François 1er, 75008 Paris.
• Service refers to the websites operated by the Company, including https://iolokis.com and https://app.iolokis.com, and related products and services.
• Personal Data is any information that relates to an identified or identifiable individual.
• Usage Data refers to data collected automatically, generated by the use of the Service or its infrastructure.
• Country refers to: France.

Personal Data: email, first and last name, phone number, address, and usage data.

Usage Data: IP address, browser type, pages visited, time spent, device identifiers and diagnostic data.

We use Cookies and similar tracking technologies for essential authentication, preference storage and basic analytics. You can configure your browser to refuse cookies; some features may stop working.

• To provide, maintain and improve the Service.
• To manage Your account and respond to Your requests.
• To contact You about updates, security and service communications.
• For analytics, fraud prevention and product improvement.

• Performance of a contract — to provide and operate the Service.
• Legal obligation — to comply with applicable laws and regulations.
• Legitimate interests — to improve, secure and analyze the Service.
• Consent — where required, particularly for marketing and optional features.

Where processing is based on consent, You may withdraw Your consent at any time.

• Right to access Your Personal Data.
• Right to rectification of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten").
• Right to restrict processing.
• Right to data portability.
• Right to object to processing based on legitimate interests.
• Right to withdraw consent at any time.

To exercise these rights, contact privacy@iolokis.com.

When the Service is used with Protected Health Information (PHI), Iolokis operates as a Business Associate. We sign Business Associate Agreements (BAAs) with eligible healthcare customers and implement administrative, physical and technical safeguards aligned with HIPAA — including encryption in transit and at rest, role-based access control, audit logging, least-privilege access for staff, and breach notification procedures. PHI is never used to train third-party models without explicit contractual authorization.

The Service includes AI-assisted features. The Service does not provide medical advice and does not replace professional judgment. Users remain solely responsible for decisions, actions and outcomes resulting from the use of the Service, including in clinical contexts.

We retain Personal Data only for as long as necessary for the purposes set out in this Policy, to comply with legal obligations, resolve disputes and enforce our agreements.

When Personal Data is transferred outside the EEA, the Company implements appropriate safeguards, including Standard Contractual Clauses approved by the European Commission.

You have the right to lodge a complaint with the French supervisory authority — Commission Nationale de l'Informatique et des Libertés (CNIL).

We strive to use commercially acceptable means to protect Your Personal Data. No transmission over the Internet or method of electronic storage is 100% secure.

Our Service does not address anyone under the age of 18. We do not knowingly collect personally identifiable information from anyone under the age of 18.

Questions about this Privacy Policy? Email privacy@iolokis.com.