Privacy Policy

1. Information We Collect

We collect information you provide directly to us and information generated through your use of Klaio.

Account information: When you create an account, we collect your name, email address, and password (stored as a bcrypt hash). If you sign in with Google, we receive your name and email from Google.

Documents and content: We store the files you upload (PDFs, Word documents, text files, etc.) and pages you import from Notion in order to provide the document Q&A service.

Usage data: We collect information about how you interact with Klaio — pages visited, features used, and queries submitted — to improve the service.

Billing information: Payment details are processed by Stripe. We do not store your full credit card number on our servers.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Klaio service
• Process your documents and generate AI responses
• Send transactional emails (account confirmation, password reset, billing receipts)
• Respond to your support requests
• Enforce our Terms of Service and protect against abuse
• Comply with legal obligations

We do not use your documents to train AI models. Your content is processed solely to provide answers within your account.

3. Data Storage and Security

Your data is stored on servers located in the United States. We use industry-standard encryption:

• In transit: All connections use TLS 1.2 or higher
• At rest: Documents and database data are encrypted using AES-256
• Passwords: Hashed using bcrypt with a cost factor of 12

We retain your data for as long as your account is active. If you delete your account, we delete your data within 30 days, except where required by law.

4. Third-Party Services

Klaio uses the following third-party services:

• Stripe — payment processing (Stripe Privacy Policy)
• Google OAuth — optional sign-in (Google Privacy Policy)
• Notion API — optional integration for importing pages
• AI provider — document content is sent to our AI provider to generate responses. The provider processes data only to fulfill the request and does not retain or train on it.

5. Sharing Your Information

We do not sell, rent, or share your personal information with third parties for their marketing purposes. We may share your data only in the following circumstances:

• With service providers who help us operate Klaio (under strict data processing agreements)
• When required by law, regulation, or valid legal process
• To protect the rights, property, or safety of Klaio, our users, or the public
• In connection with a merger or acquisition (you will be notified in advance)

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request corrections to inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request your data in a machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdrawal of consent: Where processing is based on consent

To exercise these rights, contact us at privacy@klaio.app.

7. Cookies

Klaio uses only essential cookies required for authentication (session tokens stored in localStorage) and does not use advertising or tracking cookies.

8. Children's Privacy

Klaio is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with their data, contact us at privacy@klaio.app.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a notice in the app at least 14 days before the change takes effect. Continued use of Klaio after that date constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy, please contact us:

• Email: privacy@klaio.app
• Or use our contact form