Last updated: August 10, 2026

Section 1. What is the Purpose of this Policy?

Inhibikase Therapeutics, Inc. (“Inhibikase”, “we”, “our”, or “us”) takes your privacy seriously. Legal and regulatory standards for privacy and data protection are continually evolving and can vary among the states, countries, and regions in which Inhibikase conducts its business activities. Inhibikase is committed to complying with applicable laws and regulations.

This Privacy Policy (“Policy”) explains how Inhibikase collects, uses, discloses, shares and otherwise processes Personal Data in connection with the use of this website, www.inhibikase.com (the “Site”) and the rights you have regarding that Personal Data.

Please review this Privacy Policy carefully. By using this Site, you accept the terms in this Privacy Policy and consent to our collection, use, disclosure and sharing of your Personal Data as described in this Privacy Policy.

Section 2. What is Personal Data?

“Personal Data” means information that relates to an individual or information that can be used to identify a specific individual, directly or indirectly. For example, Personal Data may include information such as a name, email address, physical address, telephone number, location data, identification number, internet protocol address, health information, or demographic information. Some laws and regulations may refer to this information as “Personal Information”. We use Personal Data as the overarching term in this Policy for simplicity and clarity.

Section 3. What Personal Data is Collected?

Inhibikase collects two broad categories of information that may be considered Personal Data through the Site: information that you provide directly, and information collected automatically when you visit the Site. In most instances, use of our Site does not require that you provide any Personal Data. However, if you contact us through the Contact form on the Site, sign up for email alerts on the Site, apply for a job through our Site, or request information from us by sending an email to info@inhibikase.com, you may be required to provide us with certain Personal Data.

(a) Information You Provide to Us

  • Name and contact information: your first and last name, email address, and other contact information you voluntarily provide.
  • Resume information: any information contained in the cover letter or resume/CV you upload.
  • Content information: the content of your message whether it is submitted through the Contact form on our Site, emailed to us, or submitted through the Careers section of our Site, as long as it contains Personal Data.
  • Email alerts sign-up: your first and last name, email address, contact type (for example, individual investor, analyst, broker/investment advisor, portfolio manager, banker/financing source, press/media, consultant, employee, customer/client, or student), and your notification preferences (for example, press releases or SEC filings).

If you choose to disclose health information or another special category of Personal Data in a free-text field, such as the message field of the Contact form, or in an email directed to info@inhibikase.com, we process that information as described in Section 4 below. We do not solicit special category data through the Site.

(b) Information Collected Automatically

  • Technical and usage data: when you visit the Site, we automatically collect information through server logs and analytics tools, including your IP address, geographic location, browser type, device and operating system, referring URL, pages visited, and the date and time of your visit.
  • Bot-detection technology: we use hCaptcha on our forms to help distinguish human visitors from automated bots. hCaptcha may collect device and behavioral signals for this purpose.
  • Cookies and similar technologies: for details of the cookies and similar technologies we use, please see Section 9 below.

Section 4. How is Personal Data Used?

We only process Personal Data where we have a valid purpose to do so including the purposes below. For residents of the EEA, UK, and Switzerland, we only process Personal Data under a valid legal basis for the purposes of:

  • Responding to your inquiries: to respond to your questions or requests. Legal basis: our legitimate interest in handling and responding to correspondence effectively (Art. 6(1)(f)).
  • Evaluating job applications: to assess your candidacy, communicate with you about the role, and administer our recruitment process. Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b)).
  • Sending the alerts you requested: to send you the specific press release, SEC filing, or event updates you asked to receive. Legal basis: your consent (Art. 6(1)(a)), which you may withdraw at any time by unsubscribing or contacting us, without affecting the lawfulness of processing carried out before withdrawal.
  • Operating, securing and improving the Site: to ensure the Site functions properly and to protect it against bots, fraud, and misuse of Site forms. Legal basis: our legitimate interest in the security and proper functioning of a publicly accessible website (Art. 6(1)(f)).
  • Compliance with legal obligations and protecting our rights: to respond to lawful requests from courts or authorities, and to establish, exercise, or defend legal claims. Legal basis: compliance with a legal obligation (Art. 6(1)(c)) and/or our legitimate interest (Art. 6(1)(f)).
  • Special category data you voluntarily disclose: where you voluntarily include health information or another special category of data in a message to us. Legal basis: your explicit consent, inferred from your voluntary and unprompted disclosure (Art. 9(2)(a)).

Inhibikase does not collect or maintain Personal Data for resale purposes.

Section 5. How is Personal Data Shared?

We may share Personal Data with:

  • Service Providers or Vendors who support the operation of the Site such as web hosting and infrastructure providers, analytics providers, hCaptcha for bot detection and spam-prevention. These providers and vendors act on our instructions and are contractually required to protect the confidentiality and security of Personal Data.
  • Professional Advisors such as lawyers, auditors and insurers, where necessary for the services they provide.
  • Government Agencies or Official Authorities where required by law or necessary to comply with a legal obligation.
  • A successor entity, in the event of an acquisition, merger, or sale of all or substantially all of Inhibikase’s assets, or any other change of ownership or control.

Section 6. How is Personal Data Secured?

We implement administrative, technical, and organizational measures designed to protect Personal Data against unauthorized access, loss, misuse, alteration, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. Transmission of Personal Data to and from the Site is at your own risk.

Section 7. How Long is Personal Data Retained?

Personal Data is retained for as long as necessary to fulfill the purposes for which it was collected, as described in this Policy, and to comply with applicable legal obligations. Retention periods vary depending on the type of data, the reasons for its collection, and applicable legal requirements.

  • Contact form inquiries: retained for as long as needed to respond to and resolve your inquiry, and for a further period afterward if necessary to establish, exercise, or defend legal claims.
  • Career applications: retained for the duration of the relevant recruitment process. If no employment results, and with your consent, we will retain your application for a limited period to consider you for future opportunities.
  • Email alert subscriptions: retained for as long as you remain subscribed and deleted or anonymized after you unsubscribe.
  • Technical and usage data: server-level information (such as IP address and access logs) is retained only for as long as necessary to maintain the security and proper functioning of the Site. Where this data is collected using cookies or similar technologies, retention varies by cookie.

Section 8. What Rights Do I Have?

Regardless of where you are located, you may ask us what Personal Data we hold about you, request that we correct it, and control cookies through your browser settings or our cookie banner.

Additionally, based on your location, you may have the following rights:

  • Information and Access: You may request details about how your Personal Data is processed and you have a right to obtain a copy of the Personal Data we maintain about you.
  • Correction: You may correct inaccurate or incomplete Personal Data we maintain about you.
  • Deletion: You may request deletion of your Personal Data in certain cases when we are no longer permitted or obligated to legally retain it, such as when it is no longer necessary for the purposes we collected it or when you have a right to withdraw consent. In cases where you withdraw consent, it will not affect the lawfulness of prior processing.
  • Portability: You may request to receive your Personal Data in a commonly used, machine-readable format or request for us to transfer it to another controller where technically feasible. This right is applicable when the processing of your data is carried out by automated means and based on your consent or a contract with Inhibikase.
  • Restriction: You may request that we restrict processing your Personal Data in specific situations, such as during a period where the accuracy of the data is subject to verification.
  • Objection: You may object to certain types of processing based on our declared legitimate interests, such as direct marketing efforts.
  • Withdraw consent: When the processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal. This includes unsubscribing from email alerts.

If you are located in the EEA, Switzerland or the UK, you also have the right to lodge a complaint with your national or regional supervisory authority, as applicable. We would appreciate the opportunity to address your concerns directly first, you can contact us using the details in Section 14.

If you would like to exercise any of these rights, please contact us or our Data Protection Officer using the contact information in Section 14. We will respond without undue delay and in any event within one month of receipt, extendable by a further two months for complex or numerous requests (we will tell you if this applies and explain why). We may ask you for information to verify your identity before responding.

Section 9. Do You Use Cookies or Similar Technologies to Collect Personal Data?

Inhibikase, and third parties on its behalf, may collect information about you and your browsing habits automatically when you visit the Site. This is done by using a variety of technologies that collect Personal Data, some of which are designed to improve your Site experience. The technologies used most often are cookies, pixel tags, and Google Analytics, as well as hCaptcha, which we use on our forms to help distinguish human visitors from automated bots. The information collected most often may include a user ID assigned to you, your IP address, the content you have interacted with, the duration of your visit, and any error messages you encounter. 

Cookies are small data files stored on your hard drive or in device memory that collect information about your browsing activities and distinguish you from other Site users. They are designed to improve your experience when you browse a Site and allow us to enhance the functionality, increase security, and measure the use and effectiveness of a Site. Cookies generally fall into 4 categories based on their purpose:

  • Essential (Strictly Necessary) cookies that are essential for the Site’s basic functionalities, such as filling out forms, without which the Site may not function properly
  • Functionality cookies that are used to remember user preferences, enable enhanced features, personalization and user experience, such as by storing language or region preferences
  • Performance (Analytics) cookies that allow us to measure and improve site performance
  • Targeting (Advertising) cookies that track your browsing habits and activity to display relevant advertisements tailored to your personal interests.

The specific cookies used within each category, including their names, providers, and duration, are listed in our cookie settings tool, available via the “Storage Preferences” link available in the Site’s cookie banner or the Cookie widget on the bottom right of the webpage.

You may opt out of allowing cookies by rejecting them on the pop-up that is displayed the first time you visit the Site or at any later time using the "Storage Preferences” link available in the Site’s cookie banner or the Cookie widget tool on the bottom right of the webpage. This choice applies to Functional, Performance and Targeting cookies. Essential (Strictly Necessary) cookies do not require your consent and remain active regardless of your choice, since the Site cannot function properly without them. Additionally, you may delete or change your cookie permissions in your browser settings at any time.

A pixel tag (also called a web beacon or clear GIF) is a small, invisible image that is embedded on a Site or in an email to track user activity. For example, this technology could be used to track whether a link in an email is opened or determine whether an email campaign is successful. You consent to these technologies by subscribing to email alerts.

We may also use tools like Google Analytics in limited locations to gather information about Site traffic that we can then use to improve a Site and its functionality. To prevent Google Analytics from collecting your user activity on websites, visit https://tools.google.com/dlpage/gaoptout.

Some internet browsers may allow you to send “Do Not Track” signals to websites you visit. To learn more about Do Not Track, visit: http://www.allaboutdnt.com.

Section 10. Who is Responsible for Third-Party Websites and Applications?

The Site may contain links to websites, mobile applications, or other platforms outside of Inhibikase’s control or ownership. Any such websites, applications or platforms are not endorsed by Inhibikase and are not subject to this Policy. We encourage you to read the privacy notices and/or policies of any website, application, or platform you visit.

You may see Inhibikase content on websites, in mobile applications, or on platforms that are not operated by Inhibikase. We cannot control those third-party websites, applications, or platforms and we are not responsible for their actions.

Section 11. Do You Collect Personal Data from Children?

This Site is not directed at children, and we do not knowingly collect Personal Data from anyone under the age of 13, consistent with the Children’s Online Privacy Protection Act (COPPA) and other applicable children’s privacy laws. If you are a parent or guardian and believe your child has provided us with Personal Data, please contact us using the details in Section 14.

Section 12. Do You Transfer Personal Data Internationally?

Inhibikase is based in the United States, and Personal Data collected through the Site is processed in the United States. If you are located in the EEA, UK, Switzerland, or another country, your use of the Site itself involves a transfer of your Personal Data to the United States. We may also engage service providers located in other countries, which may involve further transfers. If your Personal Data is transferred internationally, it will be handled by Inhibikase in accordance with applicable laws and the transfers will be made subject to appropriate safeguards in contracts with our service providers and vendors to ensure they protect your Personal Data.

Section 13. Can This Policy Change?

Inhibikase may update this Policy from time to time to reflect changes in the Site, the Personal Data we process, or applicable law. We will post the updated Policy on the Site and revise the “Last updated” date above. Please review this Policy periodically for any changes. Changes to this Policy are effective when posted on the Site.

Section 14. How Can I Contact Inhibikase?

If you have general questions or comments about this Policy, or want to request a copy of this Policy in another form, you may contact Inhibikase or Inhibikase’s Data Protection Officer as follows:

Email Address: privacy@inhibikase.com
Mailing Address:
Inhibikase Therapeutics, Inc.
Attn: Legal Department, 1000 N. West Street, Suite 1200, Wilmington, DE 19801, USA

Designated DPO: iliomad Health Data
Email: dpo@inhibikase.com
Mailing Address: 64 avenue Pierre Grenier 92100 Boulogne-Billancourt, Paris, France