Klayr
Terms of Service App
Privacy Notice

Privacy Policy

Last Updated: November 11, 2026 • Effective Date: November 11, 2026

At Klayr ("Klayr", "we", "us", or "our"), we respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, how we use and disclose it, and the choices and rights you have regarding your data when you use the Klayr platform, web application, mobile interface, or related services (collectively, the "Service").

1. Information We Collect

We collect information in three ways: directly from you, automatically through your use of the Service, and through authorized third parties.

A. Information You Provide Directly

  • Account Information: When you register, we collect your full name, work email address, and a securely hashed password. If you register via Google Authentication, we receive your verified email address, display name, and avatar URL.
  • Business Profile Data: During onboarding and workspace setup, you provide information regarding your business name, industry category, core offer descriptions, ideal customer persona (ICP) demographics, and operational bottleneck challenges. This information grounds the Klayr AI engine.
  • Submitted Media URLs: When you use the core execution engine, you submit public video and media links (from YouTube, TikTok, Instagram). We store these URLs. At your request, our servers open the public page or media to read it. Downloaded media is held only while it is being processed and is then deleted; we do not keep original videos or images as a media library. We keep the text we extract (title, caption, transcript and notes) so the same link does not have to be processed twice. We do not use third-party content for any other commercial purpose or redistribute it.
  • Interactive AI Conversations and Drafts: Your messages to the Klayr AI assistant are sent to our servers and to Google Gemini to produce each reply. We do not save a copy of the conversation on our servers, other than a reply you choose to report (see below). Content Klayr writes for an action step, and anything you save to a step, is stored with your account.
  • Payment and Subscription Data: If you subscribe to Pro, payment is handled by Stripe. We receive your plan, billing status, renewal date and invoice records. We never see or store your full card number.
  • Reports You Send: If you report a Klayr reply, we store the reply, the message that prompted it, the reason, any note you add, and your email address, so that we can review it. Our team is notified by email.
  • Calendar Files: When you add an action or step to your calendar, we create a calendar file from its title and notes. We do not read your calendar.
  • Product Usage Events: Basic events such as actions created or completed, linked to your account, which we use to understand how the product is used. We do not use third-party analytics or advertising trackers.

B. Information Collected Automatically

  • Device and Connection Data: Browser user-agent string, operating system type, IP address, timestamps, and network connectivity state.
  • Local Browser Storage: We use browser localStorage and sessionStorage to store your active session token (`getdone_token`), offline queue items, and workspace view settings. We do not use intrusive third-party tracking cookies or ad networks.

2. How We Use Your Information

We process your personal data on legitimate legal bases, including contractual necessity, legitimate business interests, and user consent:

  • Delivering Core Service Functionality: To parse submitted video URLs, extract actionable step-by-step blueprints, calculate priority timelines, and track completion progress.
  • Personalizing Klayr AI: To ground our artificial intelligence models in your specific business profile so drafts, scripts, and advice reflect your company's actual customer base and offer.
  • Offline Synchronization: To queue your changes locally on your device when offline and synchronize them securely with our cloud database upon reconnection.
  • Account Security and Authentication: To verify your identity, protect your workspace against brute-force attacks, and manage user sessions.
  • Push Notifications: To deliver operational deadline reminders and execution alerts when explicitly authorized by you through your browser settings.

3. Third-Party Service Providers and Subprocessors

We do not sell, rent, or trade your personal data to data brokers or advertising networks. We share information only with trusted third-party infrastructure providers that comply with strict confidentiality and data protection standards:

  • Neon Inc.: Serverless PostgreSQL cloud database infrastructure with end-to-end encryption in transit (TLS 1.3) and storage encryption at rest.
  • Google LLC / Gemini API: Large language model service used to read submitted links, extract action steps, and power the Klayr AI assistant. We use the paid Gemini API. Under Google's terms for paid services, Google does not use prompts or responses to improve its products, and keeps logs for a limited period to detect abuse and meet legal requirements.
  • Google Firebase Authentication: Cloud identity verification used to facilitate secure OAuth single sign-on with Google accounts.
  • Cloudflare Inc.: Edge network tunneling, Distributed Denial of Service (DDoS) mitigation, and web application firewall security.
  • Stripe, Inc.: Payment processing and subscription billing. Card details are entered with Stripe and do not pass through our servers.
  • Resend: Sends account emails such as verification codes, password resets, and notices about reports.
  • Application hosting provider: Runs the servers that process your requests.

4. Data Retention and the Right to Be Forgotten

We retain your personal data only for as long as your account is active and as necessary to fulfill the operational purposes described in this policy.

In-App Account Deletion:

You have full control over your data. You may delete your account at any time by navigating to Account > Delete Account in the app. When you confirm deletion:

  • Your personal credentials, name, email address, password hash, and private business profile are permanently and irreversibly purged from our database.
  • Custom manual actions and checklist items created solely by you are permanently deleted.
  • Non-personally identifiable extracted URL action blueprints and generic strategy outlines are decoupled from your identity and retained in anonymized format to preserve global caching performance.
  • Reports you sent about Klayr replies are deleted with your account.
  • An active Pro subscription is cancelled when you delete your account. Stripe may keep payment and invoice records for as long as tax and financial law requires.

If you cannot sign in:

Email support@getklayr.com from the address registered to your account and ask us to delete it. We will check that the account is yours and normally complete the request within 30 days.

5. Data Security Measures

We implement industry-standard technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction:

  • All network traffic is encrypted using Transport Layer Security (TLS 1.3 / HTTPS).
  • User passwords are never stored in plaintext; they are hashed using salted PBKDF2 with SHA-256 key derivation.
  • Database queries utilize parameterized SQL and Object-Relational Mapping (ORM) to protect against injection vulnerabilities.
  • Strict authorization checks ensure users can only access actions, deliverables, and profiles belonging to their authenticated workspace.

6. Your Privacy Rights (GDPR, UK GDPR, and CCPA/CPRA)

Depending on your jurisdiction, you may have specific rights under data protection laws, including the European Union General Data Protection Regulation (GDPR), UK GDPR, and the California Consumer Privacy Act (CCPA):

  • Right of Access: You have the right to request a copy of the personal data we hold about you.
  • Right to Rectification: You have the right to correct inaccurate or incomplete profile data directly via the in-app Knowledge Base.
  • Right to Erasure ("Right to be Forgotten"): You have the right to permanently delete your personal account and associated data directly within the application.
  • Right to Data Portability: You have the right to request your action items and business profile in a structured, machine-readable format.
  • Right to Object and Restrict Processing: You have the right to object to specific processing activities based on legitimate interests.
  • Non-Discrimination: We will not discriminate against you in pricing, service quality, or access for exercising any of your statutory privacy rights.

To exercise any rights not directly manageable through your account settings, please contact our Data Protection Team at support@getklayr.com.

7. International Data Transfers

Your information may be transferred to, stored, and processed in cloud data centers located in the European Union, the United States, and other jurisdictions where our cloud infrastructure providers operate. Where required by law, we implement standard contractual clauses and appropriate safeguards to ensure your data receives adequate protection.

8. Children's Privacy

The Service is intended exclusively for business professionals and individuals aged 18 and older. We do not knowingly solicit or collect personal information from children under the age of 18. If we become aware that a child has provided us with personal information, we will take immediate steps to delete such data.

9. Updates to This Policy

We may update this Privacy Policy from time to time to reflect improvements in our service or changes in applicable legal requirements. The updated date at the top of this document indicates when changes become effective. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us:

Klayr Privacy & Data Protection

Email: support@getklayr.com