We collect information in three ways: directly from you, automatically through your use of the Service, and through authorized third parties.

A. Information You Provide Directly

• Account Information: When you register, we collect your full name, work email address, and a securely hashed password. If you register via Google Authentication, we receive your verified email address, display name, and avatar URL.
• Business Profile Data: During onboarding and workspace setup, you provide information regarding your business name, industry category, core offer descriptions, ideal customer persona (ICP) demographics, and operational bottleneck challenges. This information grounds the Klayr AI engine.
• Submitted Media URLs: When you use the core execution engine, you submit public video and media links (from YouTube, TikTok, Instagram). We store these URLs. At your request, our servers open the public page or media to read it. Downloaded media is held only while it is being processed and is then deleted; we do not keep original videos or images as a media library. We keep the text we extract (title, caption, transcript and notes) so the same link does not have to be processed twice. We do not use third-party content for any other commercial purpose or redistribute it.
• Interactive AI Conversations and Drafts: Your messages to the Klayr AI assistant are sent to our servers and to Google Gemini to produce each reply. We do not save a copy of the conversation on our servers, other than a reply you choose to report (see below). Content Klayr writes for an action step, and anything you save to a step, is stored with your account.
• Payment and Subscription Data: If you subscribe to Pro, payment is handled by Stripe. We receive your plan, billing status, renewal date and invoice records. We never see or store your full card number.
• Reports You Send: If you report a Klayr reply, we store the reply, the message that prompted it, the reason, any note you add, and your email address, so that we can review it. Our team is notified by email.
• Calendar Files: When you add an action or step to your calendar, we create a calendar file from its title and notes. We do not read your calendar.
• Product Usage Events: Basic events such as actions created or completed, linked to your account, which we use to understand how the product is used. We do not use third-party analytics or advertising trackers.

B. Information Collected Automatically

• Device and Connection Data: Browser user-agent string, operating system type, IP address, timestamps, and network connectivity state.
• Local Browser Storage: We use browser localStorage and sessionStorage to store your active session token (`getdone_token`), offline queue items, and workspace view settings. We do not use intrusive third-party tracking cookies or ad networks.

We process your personal data on legitimate legal bases, including contractual necessity, legitimate business interests, and user consent:

• Delivering Core Service Functionality: To parse submitted video URLs, extract actionable step-by-step blueprints, calculate priority timelines, and track completion progress.
• Personalizing Klayr AI: To ground our artificial intelligence models in your specific business profile so drafts, scripts, and advice reflect your company's actual customer base and offer.
• Offline Synchronization: To queue your changes locally on your device when offline and synchronize them securely with our cloud database upon reconnection.
• Account Security and Authentication: To verify your identity, protect your workspace against brute-force attacks, and manage user sessions.
• Push Notifications: To deliver operational deadline reminders and execution alerts when explicitly authorized by you through your browser settings.

We do not sell, rent, or trade your personal data to data brokers or advertising networks. We share information only with trusted third-party infrastructure providers that comply with strict confidentiality and data protection standards:

• Neon Inc.: Serverless PostgreSQL cloud database infrastructure with end-to-end encryption in transit (TLS 1.3) and storage encryption at rest.
• Google LLC / Gemini API: Large language model service used to read submitted links, extract action steps, and power the Klayr AI assistant. We use the paid Gemini API. Under Google's terms for paid services, Google does not use prompts or responses to improve its products, and keeps logs for a limited period to detect abuse and meet legal requirements.
• Google Firebase Authentication: Cloud identity verification used to facilitate secure OAuth single sign-on with Google accounts.
• Cloudflare Inc.: Edge network tunneling, Distributed Denial of Service (DDoS) mitigation, and web application firewall security.
• Stripe, Inc.: Payment processing and subscription billing. Card details are entered with Stripe and do not pass through our servers.
• Resend: Sends account emails such as verification codes, password resets, and notices about reports.
• Application hosting provider: Runs the servers that process your requests.

We retain your personal data only for as long as your account is active and as necessary to fulfill the operational purposes described in this policy.

In-App Account Deletion:

You have full control over your data. You may delete your account at any time by navigating to Account > Delete Account in the app. When you confirm deletion:

• Your personal credentials, name, email address, password hash, and private business profile are permanently and irreversibly purged from our database.
• Custom manual actions and checklist items created solely by you are permanently deleted.
• Non-personally identifiable extracted URL action blueprints and generic strategy outlines are decoupled from your identity and retained in anonymized format to preserve global caching performance.
• Reports you sent about Klayr replies are deleted with your account.
• An active Pro subscription is cancelled when you delete your account. Stripe may keep payment and invoice records for as long as tax and financial law requires.

If you cannot sign in:

Email support@getklayr.com from the address registered to your account and ask us to delete it. We will check that the account is yours and normally complete the request within 30 days.

We implement industry-standard technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction:

• All network traffic is encrypted using Transport Layer Security (TLS 1.3 / HTTPS).
• User passwords are never stored in plaintext; they are hashed using salted PBKDF2 with SHA-256 key derivation.
• Database queries utilize parameterized SQL and Object-Relational Mapping (ORM) to protect against injection vulnerabilities.
• Strict authorization checks ensure users can only access actions, deliverables, and profiles belonging to their authenticated workspace.

Depending on your jurisdiction, you may have specific rights under data protection laws, including the European Union General Data Protection Regulation (GDPR), UK GDPR, and the California Consumer Privacy Act (CCPA):

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to correct inaccurate or incomplete profile data directly via the in-app Knowledge Base.
• Right to Erasure ("Right to be Forgotten"): You have the right to permanently delete your personal account and associated data directly within the application.
• Right to Data Portability: You have the right to request your action items and business profile in a structured, machine-readable format.
• Right to Object and Restrict Processing: You have the right to object to specific processing activities based on legitimate interests.
• Non-Discrimination: We will not discriminate against you in pricing, service quality, or access for exercising any of your statutory privacy rights.

To exercise any rights not directly manageable through your account settings, please contact our Data Protection Team at support@getklayr.com.

Your information may be transferred to, stored, and processed in cloud data centers located in the European Union, the United States, and other jurisdictions where our cloud infrastructure providers operate. Where required by law, we implement standard contractual clauses and appropriate safeguards to ensure your data receives adequate protection.

The Service is intended exclusively for business professionals and individuals aged 18 and older. We do not knowingly solicit or collect personal information from children under the age of 18. If we become aware that a child has provided us with personal information, we will take immediate steps to delete such data.

We may update this Privacy Policy from time to time to reflect improvements in our service or changes in applicable legal requirements. The updated date at the top of this document indicates when changes become effective. We encourage you to review this policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us:

Klayr Privacy & Data Protection

Email: support@getklayr.com

Klayr is an AI-powered execution and business productivity platform. The Service enables users to submit public third-party video and media URLs (including YouTube, TikTok, and Instagram), extract underlying strategy concepts, organize prioritized step-by-step action plans, generate business deliverables, and interact with a personalized business AI assistant known as "Klayr".

To access the Service, you must be at least eighteen (18) years of age and possess the legal capacity to enter into a binding contract. By registering, you warrant that:

• All registration information you submit is accurate, current, and complete.
• You are accessing the Service for legitimate business, professional, or personal productivity purposes.
• You are responsible for maintaining the confidentiality of your login credentials and for all activities that occur under your account.
• You will notify us immediately of any unauthorized use or security compromise of your account.

A core capability of Klayr involves processing publicly available third-party video links provided by you. With respect to any URL you submit:

• User Warranty: You represent and warrant that you have the lawful right to view, reference, and process the third-party media content accessible via the URL.
• No Ownership of Third-Party Media: Klayr does not claim ownership of, and does not host original copies of, third-party video or audio files. Klayr acts solely as an automated analytical and summary tool at your direction.
• Transformative Use: The structured action steps, checklists, and deliverables generated by the Service are original transformative summaries designed to assist operational execution.
• Compliance with Platform Rules: You agree not to submit URLs that violate the applicable Terms of Service of YouTube, TikTok, Meta (Instagram), or other source platforms.
• Indemnity for Submissions: You agree to defend, indemnify, and hold harmless Klayr and its officers, directors, and employees against any third-party claims, damages, or legal actions alleging that your submission of a URL violates intellectual property rights, trade secrets, privacy, or source platform policies.

The Service utilizes automated artificial intelligence and machine learning models (including Google Gemini and proprietary algorithms) to parse transcripts, generate priorities, and compose drafts via the "Klayr" assistant.

• Not Professional Advice: All outputs, drafts, action steps, schedules, and recommendations provided by the Service are for informational and operational productivity purposes only. They DO NOT constitute legal, financial, tax, investment, medical, or other professional business advice.
• Verification Required: You acknowledge that AI models may occasionally generate inaccurate, incomplete, or outdated information. You are solely responsible for reviewing, verifying, and approving any action item, customer communication, marketing asset, or business strategy before putting it into practice.
• No Guarantee of Results: Klayr makes no guarantees regarding business growth, revenue generation, operational efficiency, or customer acquisition resulting from the use of the Service.
• Reporting a Reply: If a reply from Klayr is wrong, harmful or inappropriate, use the Report button on that reply. We review reports and may use them to make the Service safer.

Your Data: You retain all ownership rights in your proprietary business profile, confidential business information, and customized manual action items.

Caching and System License: By submitting URLs to the Service, you grant Klayr a perpetual, irrevocable, royalty-free, worldwide license to store, analyze, cache, and index the resulting non-personally identifiable action structures, generic category classifications, and operational step summaries. This allows the Service to maintain indexing performance and deliver cached responses to all authorized users.

Klayr Property: The software, user interface design, logo, branding, algorithms, styling, and code are the exclusive intellectual property of Klayr and its licensors. You may not copy, reverse engineer, decompile, or create derivative works from the Service.

Klayr can create a calendar entry for an action or step. When you add one to your calendar, we create a calendar file and your device or calendar app asks where to save it. We do not read or change your calendar.

• Third-Party Services: Your use of Google Calendar, Apple Calendar or any other calendar app is governed by that provider's own terms and privacy policy. Klayr is not responsible for data loss, errors or outages on those services.
• Integrations Not Currently Offered: Synchronization with Notion, Todoist and Linear is not currently available. If we add integrations in the future, additional terms may apply.

Klayr has a Free plan and a paid plan called Pro. What each plan includes is shown on the Plans screen in the app and may change over time.

• Prices and Currency: Prices are set in pounds sterling (GBP). If you pay in another currency, the amount is converted when you check out, and the amount shown at checkout is the amount you pay.
• Payment: Payments are processed by Stripe. We never see or store your full card number.
• Automatic Renewal: Pro renews automatically each month or each year, depending on the plan you choose, until you cancel. We charge the payment method you gave us at the start of each period.
• Cancelling: You can cancel at any time in the app under Account, then Manage subscription. Pro stays active until the end of the period you have paid for, and then your account returns to the Free plan. Cancelling does not delete your data.
• Refunds: Fees are not refundable for a period that has already started, except where the law says otherwise. If you live in the UK or the EU, you may have a legal right to cancel within 14 days of first subscribing. If you cancel within that time, we will refund you as the law requires, less a fair amount for the days you used Pro.
• Price Changes: We may change our prices. We will tell you at least 30 days before a change affects your next renewal, and you can cancel before it takes effect.
• Failed Payments: If a payment fails, we will tell you and Stripe will try again. Pro stays active while retries run. If payment still fails, your subscription ends and your account returns to the Free plan.
• Fair Use: AI features use computing resources that cost us money. We may limit or pause use that is unusually high, automated or abusive.
• App Stores: If you subscribe through an app store such as Google Play, the store handles payment and refunds under its own terms.

You agree that you will NOT:

• Use the Service to scrape, reverse engineer, or compile competing software products or AI models.
• Submit media links depicting illegal, fraudulent, harassing, defamatory, or infringing content.
• Interfere with, bypass security controls, rate-limit mechanisms, or attempt unauthorized access to our servers or databases.
• Deploy automated bots, spiders, or scripts that overload or disrupt system infrastructure.

You may terminate your account at any time using the in-app "Delete Account" feature in your profile. Upon deletion:

• Your personal credentials, name, email, customized notes, and private business profile data are permanently erased from our active database.
• Non-personally identifiable extracted URL action blueprints are retained in anonymized format to preserve global indexing integrity.
• Subscriptions: Any active Pro subscription is cancelled when you delete your account. Fees already paid are not refunded, except where the law says otherwise.
• We reserve the right to suspend or terminate accounts that violate these Terms or engage in abusive platform behavior without prior notice.

THE SERVICE IS PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE. TO THE FULLEST EXTENT PERMISSIBLE UNDER APPLICABLE LAW, KLAYR DISCLAIMS ALL WARRANTIES, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.

WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, SECURE, OR FREE FROM VIRUSES OR DEFECTS, OR THAT ANY DEFECTS WILL BE PROMPTLY CORRECTED.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, IN NO EVENT SHALL KLAYR, ITS AFFILIATES, OFFICERS, DIRECTORS, EMPLOYEES, OR LICENSORS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES (INCLUDING LOSS OF PROFITS, REVENUE, DATA, GOODWILL, OR BUSINESS REPUTATION) ARISING OUT OF OR IN CONNECTION WITH YOUR ACCESS TO OR INABILITY TO USE THE SERVICE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

UNDER NO CIRCUMSTANCES SHALL KLAYR'S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THESE TERMS OR THE SERVICE EXCEED THE GREATER OF ONE HUNDRED US DOLLARS ($100.00 USD) OR THE TOTAL AMOUNT PAID BY YOU TO KLAYR IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.

Informal Resolution: Prior to filing any legal proceeding, you agree to contact us in writing and attempt in good faith to resolve the dispute informally for at least thirty (30) days.

Binding Arbitration: Any dispute, controversy, or claim arising out of or relating to these Terms or the Service shall be settled by binding individual arbitration administered by an established alternative dispute resolution provider, rather than in court.

Class Action Waiver: YOU AND KLAYR AGREE THAT EACH MAY BRING CLAIMS AGAINST THE OTHER ONLY IN YOUR OR ITS INDIVIDUAL CAPACITY, AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS, CONSOLIDATED, OR REPRESENTATIVE PROCEEDING.

We reserve the right to modify these Terms at any time. When we make material changes, we will update the "Last Updated" date at the top of this page. Your continued use of the Service following published updates constitutes acceptance of the revised Terms.

If you have questions regarding these Terms, please contact our legal and support team at:

Klayr Legal Support

Email: support@getklayr.com