Privacy Policy

1. Introduction

Klairo ("we," "us," or "our") operates the Klairo platform, a marketing intelligence service for direct-to-consumer brands. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

2. Information We Collect

We collect information in the following ways:

• Account Information: When you register, we collect your name, email address, and password (stored in hashed form).
• Platform Data: When you connect third-party platforms (such as Shopify, Meta Ads, Google Ads, TikTok Ads, Amazon Seller Central, Klaviyo, or Postscript), we access marketing and sales data from those platforms on your behalf using OAuth tokens or API keys you provide.
• Usage Data: We collect information about how you interact with our service, including pages visited, features used, and chat interactions.
• Device & Log Data: We may collect browser type, IP address, and access timestamps for security and analytics purposes.

3. How We Use Your Information

• To provide, operate, and maintain the Klairo platform.
• To aggregate and display your marketing performance data across connected platforms.
• To generate AI-powered insights, recommendations, and chat responses about your marketing data.
• To improve and personalize your experience.
• To communicate with you about your account and service updates.
• To detect and prevent fraud or unauthorized access.

4. Third-Party Platform Data

When you connect a third-party platform, we access only the data necessary to provide our service. We use read-only access where possible. We do not modify your campaigns, ads, products, or settings on any connected platform. Your OAuth tokens and API keys are encrypted at rest and used solely to fetch data on your behalf.

5. Data Sharing & Disclosure

We do not sell your personal information. We may share data only in these circumstances:

• Service Providers: With trusted third-party services that help us operate (e.g., database hosting, AI processing). These providers are bound by confidentiality obligations.
• Legal Requirements: If required by law, regulation, or legal process.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to you.

6. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest, secure password hashing, and access controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide our services. You may request deletion of your account and associated data at any time by contacting us. Upon account deletion, we will remove your personal data and disconnect all platform integrations within 30 days.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing activities.
• Export your data in a portable format.
• Withdraw consent at any time by disconnecting platform integrations.

9. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies.

10. Children's Privacy

Klairo is not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at hello@klairo.com.