Privacy Policy

Ikiga ("we", "our", or "us") is a lead management and qualification platform designed for tattoo studio owners. This Privacy Policy explains how we collect, use, store, and protect information when you use our application, including our Instagram and WhatsApp-integrated chatbot and lead inbox features.

By using Ikiga, you agree to the practices described in this policy. If you do not agree, please discontinue use of the application.

We use the information we collect for the following purposes:

• To operate and deliver the Ikiga service — including running the qualification chatbot, displaying the lead inbox, and generating lead summaries and intent scores
• To respond to leads on behalf of studios within the free messaging windows permitted by Meta's platforms
• To generate lead intelligence — including intent scoring based on conversation signals
• To send studio owners notifications and reminders about their leads
• To improve and develop our product based on aggregate usage patterns
• To comply with applicable legal obligations

We do not sell your data or leads' data to third parties. We do not use lead conversation data for advertising purposes.

Ikiga integrates with Meta's Instagram Graph API and WhatsApp Business API. As a result:

• We access messaging data only with explicit permission granted by the studio owner through Meta's OAuth and permissions framework
• We use this data solely to provide the lead qualification and management service described in this policy
• We do not share Meta platform data with third parties except as required to operate our service (e.g., cloud hosting providers under strict data processing agreements)
• We comply with Meta's Platform Terms, Developer Policies, and any applicable data use restrictions
• Studio owners are responsible for ensuring their use of Ikiga complies with applicable laws when collecting and processing messages from their leads

We do not sell, rent, or trade your personal information. We may share data only in the following limited circumstances:

• Service providers — trusted third-party vendors who help us operate our infrastructure (e.g., cloud hosting, analytics), bound by confidentiality and data processing agreements
• Legal compliance — if required by law, court order, or government authority
• Business transfers — in the event of a merger, acquisition, or sale of assets, data may be transferred to the successor entity with notice to affected users
• With your consent — for any other sharing not described here, we will ask for your explicit consent

We retain data for as long as necessary to provide our service and comply with legal obligations:

• Studio account data — retained for the duration of the subscription and up to 12 months after account closure
• Lead conversation data — retained for up to 12 months from the date of the conversation
• Billing records — retained for up to 7 years as required by applicable financial regulations

After the applicable retention period, data is securely deleted or anonymised.

You have the right to request deletion of your data at any time. To do so:

• Studio owners: Send an email to r@ikiga.co with the subject line “Data Deletion Request” and include your registered business name and email address. We will process your request within 30 days.
• Leads (end users): If you are a consumer who interacted with a studio's chatbot and wish to have your data deleted, please contact us at r@ikiga.co. Include your Instagram username or the approximate date of your conversation. We will process your request within 30 days.

Please note that deletion of certain data may limit our ability to provide the service to studio owners.

We take the security of your data seriously and implement the following measures:

• Encryption of data in transit using TLS/HTTPS
• Encryption of sensitive data at rest
• Access controls — only authorised personnel can access personal data
• Regular security reviews and monitoring

While we take reasonable precautions, no system is completely secure. In the event of a data breach, we will notify affected users and relevant authorities as required by applicable law.

Ikiga is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately at r@ikiga.co and we will delete it promptly.

Depending on your location, you may have the following rights regarding your personal data:

• Right to access — request a copy of the data we hold about you
• Right to correction — request that we correct inaccurate or incomplete data
• Right to deletion — request that we delete your data (see Section 7)
• Right to restriction — request that we limit how we use your data
• Right to portability — request your data in a machine-readable format

To exercise any of these rights, contact us at r@ikiga.co. We will respond within 30 days.

We use cookies and similar technologies to manage user sessions, remember preferences, and analyse usage patterns. You can control cookie preferences through your browser settings. Note that disabling cookies may affect the functionality of our platform.

Our platform integrates with third-party services including Instagram and WhatsApp (owned by Meta Platforms, Inc.). This Privacy Policy applies only to Ikiga. We are not responsible for the privacy practices of third-party services. We encourage you to review Meta's Privacy Policy and WhatsApp's Privacy Policy separately.

We may update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date at the top of this document and notify registered studio owners via email or in-app notification. Continued use of Ikiga after changes are posted constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:

We are committed to resolving privacy concerns promptly and transparently.