Privacy Policy

1. Information We Collect

1.1 Information You Provide

We collect information you voluntarily provide when using our Services:

• Account Information: Name, email address, company name, job title, and password when you create an account.
• Billing Information: Payment method details and billing address for paid subscriptions. Payment processing is handled by third-party processors; we do not store complete credit card numbers.
• Communications: Information you provide when contacting support, submitting feedback, or participating in surveys.
• Customer Data: Data, prompts, AI model outputs, logs, and other content you submit through the Services for compliance monitoring and policy enforcement.

1.2 Information Collected Automatically

When you access our Services, we automatically collect certain information:

• Usage Data: API calls, feature usage, error logs, and performance metrics.
• Device Information: Browser type, operating system, device identifiers, and IP address.
• Log Data: Access times, pages viewed, referring URLs, and actions taken within the Platform.

1.3 Information from Third Parties

We may receive information from third parties, including identity verification services, payment processors, and analytics providers. If you access our Services through a third-party integration, we may receive information from that service in accordance with your settings.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve the Services, including processing your Customer Data through our guardrails and compliance features.
• Account Management: To create and manage your account, process transactions, and send service-related communications.
• Customer Support: To respond to your inquiries, troubleshoot issues, and provide technical assistance.
• Analytics and Improvement: To analyze usage patterns, monitor performance, and develop new features.
• Security: To detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activities.
• Communications: To send you product updates, newsletters, and marketing communications (with your consent where required).
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.
• Aggregate Insights: To generate anonymized, aggregated data for industry benchmarking and research.

3. AI Model Training and Customer Data

4. Legal Bases for Processing (GDPR)

For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we process personal data based on the following legal grounds:

• Contract Performance: Processing necessary to fulfill our contractual obligations to you.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our Services, preventing fraud, and ensuring security.
• Consent: Processing based on your explicit consent, which you may withdraw at any time.
• Legal Obligations: Processing necessary to comply with applicable laws and regulations.

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

5.1 Service Providers

We engage third-party service providers to perform functions on our behalf, such as hosting, payment processing, analytics, and customer support. These providers have access to your information only as necessary to perform their services and are contractually obligated to protect your data.

5.2 Business Transfers

In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change and any choices you may have.

5.3 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5.4 With Your Consent

We may share your information with third parties when you have given us your explicit consent to do so.

5.5 Aggregated Data

We may share aggregated, anonymized data that cannot identify you for research, industry benchmarking, and analytical purposes.

6. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption in transit using TLS 1.2 or higher
• Encryption at rest using AES-256
• Access controls and authentication mechanisms
• Regular security assessments and vulnerability testing
• Employee training on data protection practices

While we strive to protect your information, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to provide the Services and fulfill the purposes described in this Privacy Policy. Specific retention periods include:

• Account Data: Retained for the duration of your account plus a reasonable period for backup and legal purposes.
• Customer Data: Retained for the duration of your subscription. Upon termination, you may request deletion, which we will complete within thirty (30) days, except as required by law.
• Usage Data: Retained for up to twenty-four (24) months for analytics and service improvement.
• Legal Records: Retained as required by applicable law or for legitimate legal purposes.

8. Your Privacy Rights

8.1 General Rights

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Portability: Request a copy of your data in a structured, machine-readable format.
• Opt-Out: Opt out of marketing communications at any time.

8.2 GDPR Rights (EEA, UK, Switzerland)

If you are in the European Economic Area, United Kingdom, or Switzerland, you also have the right to:

• Restrict processing of your personal information
• Object to processing based on legitimate interests
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with your local data protection authority

8.3 CCPA Rights (California Residents)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale of personal information (note: we do not sell personal information)
• Non-discrimination for exercising your privacy rights

8.4 Exercising Your Rights

To exercise any of these rights, please contact Klira through the contact information provided in Section 13. We will respond to your request within the timeframes required by applicable law. We may need to verify your identity before processing your request.

9. International Data Transfers

Klira is based in the United States. If you access our Services from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

For transfers from the EEA, UK, or Switzerland to countries not deemed adequate by the European Commission, we rely on appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, or your explicit consent where applicable.

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your browsing activities and to distinguish you from other users.

10.1 Types of Cookies We Use

10.2 Managing Cookies

You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of our Services. Most browsers allow you to refuse cookies or alert you when cookies are being sent.

10.3 Do Not Track

Our Services do not currently respond to "Do Not Track" browser signals. However, you can manage your tracking preferences through your browser settings and our cookie preferences.

11. Third-Party Links and Services

Our Services may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through our Services.

12. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete such information. If you believe we have collected information from a child, please contact us.

13. Contact Information

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact Klira:

For GDPR-related inquiries, you may also contact your local data protection authority.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of material changes by posting the updated policy on our website and updating the "Effective Date" at the top of this policy. For significant changes, we may also provide notice through email or the Platform.

Your continued use of the Services after any changes become effective constitutes your acceptance of the revised Privacy Policy.