Legal

The formal bits, in plain language.

Privacy Policy

Last updated: October 30, 2026

1. Who we are

Iroh Labs is operated by Celik Enterprises, Inc., a corporation incorporated in the State of Delaware, USA. In this Privacy Policy, "Iroh Labs", "we", "us" and "our" refer to Celik Enterprises, Inc. We are the controller of the personal information described here and are responsible for handling it in line with this policy and applicable data protection laws.

This policy explains what personal information we collect through irohlabs.com (the "Site"), by email and during calls, how we use and share it, and the choices and rights available to you.

2. Information we collect

Information you provide. When you complete one of our forms, we collect the details you enter, which may include your name, role, email address, phone number, company name, website, industry, company size and age, operating status, the systems and data your company holds, data languages, and whether and by whom you were referred.

Meeting bookings. When you schedule a call, our scheduling provider collects your name, email address, chosen time, time zone and any notes you add, and shares them with us.

Correspondence. If you email us or speak with us, we keep a record of that communication.

Technical information. When you visit the Site, our hosting provider automatically processes standard technical data such as IP address, browser type, device information, pages requested and timestamps, for security and to keep the Site running.

We do not intentionally collect sensitive personal information (such as health, biometric or financial account data) through the Site and ask that you do not submit it.

3. How we use your information

• to respond to your enquiry and schedule and hold meetings;
• to assess whether your company's data may be suitable for licensing, and to prepare an offer;
• to negotiate, enter into and perform agreements with you or your company;
• to communicate with you about the opportunity you asked us about;
• to operate, secure, maintain and improve the Site; and
• to comply with legal obligations and to establish, exercise or defend legal claims.

4. Legal bases (EEA and UK visitors)

Where the EU or UK General Data Protection Regulation applies, we rely on: steps prior to a contract at your request, when you enquire about our services; our legitimate interests in running our business, evaluating opportunities and securing the Site; legal obligations; and, where required, your consent, which you may withdraw at any time.

5. How we share information

We do not sell or rent your personal information, and we do not use it for third-party advertising. We share it only with:

• Service providers who host the Site, store data, provide scheduling and email, and support our operations, under contracts that limit their use of the data to providing services to us;
• Prospective data partners, only where needed to pursue an opportunity you have asked us about and, where appropriate, under confidentiality obligations. Company data itself is shared only under a signed agreement and after agreed de-identification;
• Professional advisers such as lawyers and accountants, under duties of confidentiality;
• Authorities, where required by law or to protect our rights, property or safety; and
• A successor entity in connection with a merger, acquisition or sale of assets.

6. International transfers

We are based in the United States, and our service providers may process information in the United States and other countries. Where we transfer personal information from the EEA, UK or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

7. Cookies

We use only cookies and similar storage that are strictly necessary for the Site to function and to keep authorized team members signed in. We do not use advertising or cross-site tracking cookies. Our embedded scheduling tool may set its own cookies, governed by its provider's policy.

8. Data retention

We keep enquiry and correspondence records for as long as needed to evaluate and pursue the opportunity, and generally for no longer than three years after our last contact, unless a longer period is required for an active agreement, legal or tax obligations, or the defense of legal claims. Afterwards, we delete or anonymize the information.

9. Security

We use appropriate technical and organizational measures to protect personal information, including encryption in transit, access controls limited to authorized staff, and reputable infrastructure providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Your rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you and receive a copy;
• correct inaccurate or incomplete information;
• request deletion of your information;
• restrict or object to certain processing, including processing based on legitimate interests;
• receive your information in a portable format; and
• withdraw consent where processing is based on consent.

California residents may also request to know what personal information we collect, use and disclose, and may request deletion or correction. We do not sell or share personal information as those terms are defined under the California Consumer Privacy Act, and we will not discriminate against you for exercising your rights.

To exercise any of these rights, email mert@irohlabs.com. We may need to verify your identity before responding. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

11. Children

The Site is intended for business users and is not directed at children under 16. We do not knowingly collect personal information from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new "Last updated" date. Where changes are significant, we will take reasonable steps to let you know.

13. Contact us

Celik Enterprises, Inc. (Iroh Labs), State of Delaware, USA. For any questions or requests about this policy or your personal information, write to mert@irohlabs.com.