Privacy Policy

Our privacy policy and how we use your data

Last Updated: August 2025

Welcome to Klavis AI! This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services. Please read this privacy policy carefully.

SOC 2 Type 1 Certification

Security Compliance: Klavis AI is SOC 2 Type 1 certified, demonstrating our commitment to maintaining the highest standards of data security, availability, and confidentiality. This certification validates our controls and processes for protecting your information.

Google User Data Handling

Important Notice Regarding Google Workspace APIs: Klavis AI's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

No AI/ML Model Training: We explicitly affirm that Google Workspace APIs are not used to develop, improve, or train generalized or non-personalized AI and/or ML models.

Limited Data Usage: We do not use Google user data for developing, improving, or training AI and/or ML models, except where such data is used exclusively for personalized features.

Third-Party AI Tools: We do not transfer Google user data to third-party AI tools for the purpose of developing, improving, or training generalized or non-personalized AI/ML models.

1. Information We Collect

Important Notice: By using Klavis AI, you acknowledge and agree that we will, by default, store all your data and all your interactions with our servers, our APIs, and our website. This comprehensive data collection and storage is essential for our service delivery, security monitoring, compliance with our SOC 2 Type 1 certification requirements, and continuous improvement of our platform.

We collect various types of information in connection with the services we provide:

a. Personal Data On Klavis AI: Name, email address, and contact details you provide when registering or interacting with our Service.

b. OAuth Authentication: Authentication tokens from third-party providers like Google or GitHub.

c. Interaction Data: All interactions with our servers, APIs, and website, including but not limited to: API calls, requests and responses, user conversations with AI, website navigation and clicks, feature usage patterns, session data, error logs, and performance metrics.

d. Content and Communications: Any content you create, upload, or share through our services, including documents, code, prompts, and responses.

e. Technical Information: IP addresses, browser type, device information, operating system, access times, and referring URLs.

2. How We Use Your Information

We use your information to provide you with a smooth, efficient, and customized experience:

  • Create and manage your account
  • Provide, operate, maintain, and improve our Service
  • Personalize and expand our Service based on user interactions
  • Develop new products, services, and features
  • Communicate with you for support and marketing
  • Enable and manage your configured integrations
  • Prevent fraud, security breaches, and abuse
  • Comply with legal obligations and enforce policies

3. Sharing Your Information

We may share your information in certain situations:

a. By Law or to Protect Rights: When required by legal process or to protect rights, property, and safety.

b. Third-Party Service Providers: With vendors and consultants who perform services for us, including payment processors and hosting services.

c. Business Transfers: In connection with mergers, acquisitions, or sale of company assets.

d. With Your Consent: For any other purpose with your explicit consent.

4. Data Security & Retention

Security Measures: As a SOC 2 Type 1 certified organization, we implement comprehensive administrative, technical, and physical security measures to protect your personal information. Our security controls are regularly audited and validated by independent third parties. However, no security measures are perfect or impenetrable.

Data Retention: We retain all your data and interactions by default for as long as necessary to provide our services, comply with legal obligations, resolve disputes, enforce our agreements, and maintain audit logs as required by our SOC 2 certification. This includes retaining comprehensive logs of all API interactions, user activities, and system events for security and compliance purposes.

5. Your Data Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information:

a. Right to Know/Access: Request information about data we've collected about you.

b. Right to Correct: Request correction of inaccurate personal information.

c. Right to Delete: Request deletion of your personal information.

d. Right to Opt-Out: Opt-out of sale or sharing of personal information.

e. Right to Data Portability: Receive a copy of your data in a portable format.

f. Right to Non-Discrimination: Not be discriminated against for exercising privacy rights.

California Residents: You have rights under the California Consumer Privacy Act (CCPA) and California's "Shine the Light" law.

EEA and UK Residents: You have rights under the General Data Protection Regulation (GDPR), including the right to lodge complaints.

6. Children's Privacy

Our Service is not intended for children under 13. We do not knowingly collect personal information from children under 13 without parental consent.

7. Service Availability

Our Service is provided "as is" and "as available." We may experience downtime and reserve the right to modify or discontinue the Service.

8. AI Model Disclaimer

Our Service uses AI technologies that are probabilistic and may generate unexpected outputs. You use AI features at your own risk.

9. Policy Changes

We may update this Privacy Policy from time to time. Changes are effective when posted on this page with an updated date.

10. Contact Information

If you have questions or comments about this Privacy Policy, please contact us at contact@klavis.ai.

Disclaimer: This privacy policy provides general information and outlines our practices. It may not cover all specific scenarios and is not a substitute for legal advice. Consult with a qualified legal professional to ensure compliance with all applicable laws.