Privacy Policy

1. Who this applies to, and an important note on the data chain

Klexo is used by Agencies to generate performance reports for their own clients ("End Clients"). This means we sometimes process data in two layers:

• Account data — information about you, the Agency, as our customer (your name, email, billing details, login credentials).
• End Client data — advertising performance data belonging to your clients, which you connect to Klexo via Meta, Google, and other ad platform integrations, so that we can generate reports on your behalf.

When you connect an End Client's ad accounts to Klexo, you act as the data controller for that End Client's data, and Klexo acts as a data processor on your behalf. You are responsible for having the appropriate permission or agreement with your End Clients to share their advertising data with a third-party tool like Klexo. We process that data solely to generate the reports you've requested, and for no other purpose.

2. What we collect

From you directly:

• Name, email address, password (encrypted)
• Billing information (processed by Stripe — we do not store your card details ourselves)
• Agency branding details you provide (logo, brand colors, voice/tone preferences)

From connected ad platforms (Meta, Google Ads, Google Analytics, and any future integrations), on your behalf and with your authorization:

• Advertising performance metrics: spend, impressions, clicks, conversions, and similar campaign-level data
• We request read-only access wherever the platform allows it. We do not modify, pause, or create advertising campaigns on your behalf.

Automatically, as you use the product:

• Login activity and basic usage data (e.g. which features you use), for the purpose of improving the product and providing support
• Standard technical data (IP address, browser type) for security and fraud prevention

We do not collect more advertising data than is needed to generate the reports you've configured, and we do not sell, rent, or share this data with third parties for advertising or marketing purposes.

3. How we use this data

• To generate the automated performance reports that are the core function of Klexo
• To operate your account, process billing, and provide customer support
• To send you product updates and service-related communications (you can opt out of non-essential communications at any time)
• To improve the product, including improving the quality and accuracy of generated report narratives
• To meet legal and security obligations

On AI processing specifically: report narratives are generated using Anthropic's Claude API. The advertising performance data needed to write a given report is sent to this third-party API for that purpose. We do not use your data, or your End Clients' data, to train any AI models — ours or any third party's.

4. Who we share data with

We share data only with the service providers necessary to operate Klexo, under contracts that require them to protect your data:

• Anthropic (Claude API) — to generate report narratives
• Stripe — to process payments
• Railway — to host the application and database
• Resend — to deliver reports and account emails
• Meta and Google — solely through their official advertising APIs, to retrieve the performance data you've authorized us to access

We do not sell your data, or your End Clients' data, to anyone, for any reason.

5. Data retention and deletion

• Generated reports and the underlying performance data are retained for the duration of your subscription, according to your plan's history window (90 days, 12 months, or 24 months).
• If you cancel your subscription, your account data and generated reports remain available for 30 days, during which you can export everything. After 30 days, your data is permanently deleted from our systems, except where we are required to retain limited records for legal or accounting purposes.
• You may request deletion of your data at any time by contacting info@klexo.com; we will action this within a reasonable timeframe, subject to the exceptions above.

6. Your rights

Depending on where you live, you may have some or all of the following rights:

If you are in the EU/EEA or UK (GDPR):

• Right to access the personal data we hold about you
• Right to correct inaccurate data
• Right to request deletion ("right to be forgotten")
• Right to data portability (export your data in a usable format)
• Right to object to or restrict certain processing
• Right to lodge a complaint with your local data protection authority

If you are a California resident (CCPA/CPRA):

• Right to know what personal information we collect and how it's used
• Right to request deletion of your personal information
• Right to opt out of the sale or sharing of personal information (we do not sell personal information)
• Right to non-discrimination for exercising these rights

To exercise any of these rights, contact us at info@klexo.com. We will respond within the timeframe required by applicable law.

7. International data transfers

Klexo's infrastructure and service providers may process data outside your country of residence, including in the United States. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) to ensure your data receives an adequate level of protection regardless of where it is processed.

8. Security

We take reasonable technical and organizational measures to protect your data, including encryption of sensitive data at rest and in transit, and access controls limiting who can view account information. No system is perfectly secure, and we cannot guarantee absolute security, but we are committed to addressing vulnerabilities promptly if they arise.

9. Cookies

We use a small number of cookies that are strictly necessary for Klexo to function:

• Session/authentication cookies — to keep you logged in securely between visits
• Payment processing cookies — set by Stripe during checkout, to securely process your subscription

These cookies don't require consent under applicable law because they're essential to the service working at all, and we don't use them for advertising or cross-site tracking. We don't currently use analytics or marketing cookies. If that changes in the future, we'll update this policy and add a consent mechanism where required.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email or via a notice within the product before the changes take effect.

11. Contact us

For any questions about this policy or your data, contact us at:

info@klexo.com