Privacy Policy

Introduction

Kleva Technologies, Inc. ("Kleva", "we", "us", or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and protect information when you use our AI automation platform and services, including our website, applications, and related services (collectively, the "Services").

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

1. Information We Collect

1.1 Information You Provide

We collect information you provide directly to us, including:

• Account registration information (name, email, company details)
• Payment and billing information
• Communications with our support team
• Content you upload or create using our Services
• Feedback, reviews, and survey responses
• Information provided through demos or consultations

1.2 Information from Business Clients

We process data on behalf of our business clients, which may include:

• Customer data for automation workflows
• Business process information
• Integration data from connected systems
• Analytics and performance metrics

1.3 Automatically Collected Information

We automatically collect certain information when you use our Services:

• Device information (IP address, browser type, operating system)
• Usage data (pages viewed, features used, interaction patterns)
• Log data (access times, referring URLs, search terms)
• Cookies and similar tracking technologies
• Performance metrics and error reports

2. How We Use Information

We use the information we collect to:

• Provide, maintain, and improve our Services
• Process transactions and send related information
• Personalize your experience and deliver customized content
• Respond to your requests, comments, and questions
• Send you technical notices, updates, and support messages
• Communicate about products, services, offers, and events
• Monitor and analyze trends, usage, and activities
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our policies
• Develop new features and services

3. Legal Basis for Processing

We process personal data based on:

• Legitimate interests: Operating our business and providing services
• Contract performance: Fulfilling our agreements with clients
• Legal obligations: Complying with applicable laws
• Consent: Where explicitly provided

4. Data Sharing and Disclosure

We may share information with:

• Our clients: Financial institutions using our Service
• Service providers: Third parties helping us operate the Service
• Legal authorities: When required by law or court order
• Business transfers: In case of merger or acquisition

We do not sell personal information to third parties.

5. International Data Transfers

Our servers are located in the United States. By using our Service, you consent to the transfer of your information to the United States. We implement appropriate safeguards for international transfers in compliance with applicable laws.

6. Data Security

We implement comprehensive security measures including:

• End-to-end encryption for data transmission
• Encryption at rest for stored data
• Regular security audits and penetration testing
• Access controls and authentication
• Employee training on data protection
• Incident response procedures

7. Data Retention

We retain personal data for as long as necessary to provide our Service and comply with legal obligations. Specific retention periods:

• Account information: Active account period plus 3 years
• Transaction data: 7 years for tax and legal compliance
• Usage analytics: 2 years
• Marketing communications data: Until opt-out plus 1 year
• Support tickets: 3 years

8. Your Rights

Depending on your location, you may have the right to:

• Access: Request copies of your personal data
• Rectification: Correct inaccurate information
• Erasure: Request deletion of your data
• Restriction: Limit processing of your data
• Portability: Receive your data in a portable format
• Object: Oppose certain processing activities
• Withdraw consent: Where processing is based on consent

To exercise these rights, contact us at privacy@kleva.co

9. International Privacy Rights

European Union (GDPR)

For EU residents, we comply with the General Data Protection Regulation, including:

• Lawful basis for processing
• Data minimization principles
• Privacy by design and default
• Data protection impact assessments where required

California (CCPA/CPRA)

California residents have additional rights under state privacy laws, including:

• Right to know about personal information collected
• Right to delete personal information
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising privacy rights

10. Children's Privacy

Our Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.

11. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain user sessions
• Remember preferences
• Analyze platform usage
• Improve Service performance

You can control cookies through your browser settings.

12. AI and Machine Learning

We use artificial intelligence and machine learning technologies to:

• Improve automation workflows and efficiency
• Provide intelligent recommendations and insights
• Detect anomalies and prevent security threats
• Enhance user experience through personalization
• Optimize system performance and reliability

We implement appropriate safeguards for AI systems, including human oversight where appropriate, and you may request information about automated processing that significantly affects you.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or platform notification. Continued use after changes constitutes acceptance.

14. Contact Information

For privacy-related questions or concerns:

You may also contact your local data protection authority if you believe your privacy rights have been violated.