Privacy Policy

Table of Contents

1. Introduction
2. Data Protection Officer
3. How we collect and use your personal information
4. Use of the kleva.co website
5. Cookies and tracking technologies
6. Voice playground and audio data
7. Sharing information with third parties
8. International data transfers
9. Your data subject rights
10. Security of your information
11. Data storage and retention
12. Children's data
13. Questions, concerns, or complaints

1. Introduction

Kleva, Inc. ("Kleva", "we", "us", or "our") is a Delaware corporation that provides AI-powered voice agents for debt collection, primarily serving lenders and collections teams in Latin America.

We understand that you care about your personal privacy, and we take that seriously. This Privacy Policy describes Kleva's policies and practices regarding the collection and use of your personal data in connection with our website at kleva.co (the "Site"), and sets forth your privacy rights. We recognize that information privacy is an ongoing responsibility, so we will update this Privacy Policy from time to time as we adopt new practices or as the law requires.

2. Data Protection Officer

Kleva is incorporated in the State of Delaware, United States, and operates from Mexico City, Mexico. We have appointed an internal data protection contact for you to reach out to if you have any questions or concerns about Kleva's personal data policies or practices. If you would like to exercise your privacy rights, please direct your query to:

3. How we collect and use your personal information

Kleva collects personal information about visitors to our website and prospective customers who contact us. With limited exceptions, this information is generally limited to:

• Name
• Work email address
• Work phone number
• Company name and a short description of your business
• Indicative monthly collections budget (from our contact form)

We use this information to respond to inquiries, qualify potential customers, schedule introductory calls, and provide information about our services. We do not sell personal information to anyone and only share it with third parties who are facilitating the delivery of our services (for example, our customer relationship management, email, and scheduling tools).

From time to time, Kleva also receives professional contact information about individuals from third-party data sources (for example, business networking sites). Information collected from such third parties is generally limited to publicly available professional details about your employer, role, or industry.

4. Use of the kleva.co website

As is true of most other websites, kleva.co collects certain information automatically and stores it in log files. This information may include internet protocol (IP) addresses, the general region or country where your device is accessing the internet, browser type, operating system, referring website, and information about the pages you view on the Site.

We use this information to help us design our Site to better serve our users' needs, diagnose technical problems, understand traffic patterns, identify visitor preferences, and measure the effectiveness of our marketing efforts. Kleva has a legitimate interest in understanding how visitors, prospects, and customers use its website so we can improve our products and communicate effectively.

5. Cookies and tracking technologies

Kleva uses cookies and similar technologies on the Site for analytics, advertising measurement, and visitor identification. The Site does not currently display a separate cookie consent banner. The technologies we use today include:

• Strictly necessary: Local storage entries that remember your preferred language (e.g. preferredLang) so we can present the right version of the Site.
• Analytics: Google Analytics 4 (measurement ID G-D5MZJ979RV) to understand how visitors use the Site.
• Advertising and conversion measurement: Google Tag Manager (GTM-WZXWK8GH) and Google Ads (conversion ID AW-16725800715), used to measure the performance of our advertising.
• Visitor identification: reb2b (W6Z57HQEMWOX), which helps us identify the organizations browsing the Site for sales outreach.
• Internal product analytics: A first-party tracking script (/ai-tracking.js) used for internal analytics on how visitors engage with the Site.

You can control cookies through your browser settings and can opt out of Google Analytics by installing the Google Analytics opt-out browser add-on. Disabling cookies may affect certain functionality of the Site.

6. Voice playground and audio data

Our Site includes an interactive voice "playground" at /playground where visitors can hold a live conversation with one of Kleva's AI voice agents. When you use the playground:

• We capture the audio of your conversation with the agent through your browser's microphone, and a transcription of that audio, in order to operate the demo.
• We use third-party voice infrastructure providers under data processing agreements to process the audio in real time.
• We may retain a sample of playground sessions in aggregated or anonymized form to evaluate the quality of our AI agents. We do not use playground audio to make real collection calls or for any other purpose unrelated to operating and improving the demo.

If you do not wish to provide audio data, please do not use the playground feature.

7. Sharing information with third parties

The personal information Kleva collects from you is stored in one or more databases hosted by third-party cloud providers located in the United States. These providers do not use or access your personal information for any purpose other than cloud hosting and retrieval. On occasion, Kleva engages third parties to deliver information to you, including information about our products, services, and events.

We use third-party service providers to support the operation of the Site and our business, including for cloud hosting, content management, customer relationship management, email and meeting scheduling, voice infrastructure, analytics, and advertising measurement. Each provider only receives the data necessary to perform its function and is bound by a data processing agreement that restricts how it may use the information.

We do not otherwise reveal your personal data to non-Kleva persons or businesses for their independent use unless: (1) you request or authorize it; (2) the information is provided to comply with the law (for example, to comply with a search warrant, subpoena, or court order), to enforce an agreement we have with you, or to protect our rights, property, or safety, or the rights, property, or safety of our employees or others; (3) the information is provided to our agents, vendors, or service providers who perform functions on our behalf; (4) to address emergencies; or (5) to address disputes, claims, or to persons demonstrating legal authority to act on your behalf.

We may also gather aggregated data about our services and Site visitors and disclose the results of such aggregated (but not personally identifiable) information to our partners, service providers, and other third parties for marketing or analytics purposes.

8. International data transfers

Kleva is incorporated in the United States and operates from Mexico, and we use service providers located primarily in the United States. Personal information we collect about you will therefore be processed in the United States, in Mexico, and potentially in other countries where our service providers operate.

By using the Site or contacting us, you acknowledge that your personal information will be transferred to and processed in jurisdictions outside of your country of residence, which may have different data protection rules than your country. Where required by law (for example, for personal data of individuals in the European Economic Area or the United Kingdom), Kleva relies on appropriate safeguards such as the European Commission's standard contractual clauses to govern such transfers.

For more information or if you have any questions about international transfers, please contact us at hi@kleva.co.

9. Your data subject rights

Depending on where you live, applicable privacy laws — including the European Union's General Data Protection Regulation (GDPR), Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), the California Consumer Privacy Act (CCPA), and others — give you certain rights with respect to your personal data. These rights may include:

• Right to be informed about how your data is used
• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right of data portability
• Right to object to certain processing
• Rights related to automated decision-making, including profiling

If you wish to confirm that Kleva is processing your personal data, have access to the personal data Kleva may have about you, correct inaccurate data, request that we erase or stop processing your data, or exercise any other right, please contact us at hi@kleva.co.

Reasonable access to your personal data will be provided at no cost. If access cannot be provided within a reasonable timeframe, Kleva will provide you with a date by which the information will be provided. If for some reason access is denied, Kleva will provide an explanation as to why access has been denied.

For questions or complaints concerning the processing of your personal data, you can email us at hi@kleva.co. You may also have the right to lodge a complaint with the data protection authority in your country (for example, the European Data Protection Supervisor, the UK Information Commissioner's Office, or Mexico's INAI).

10. Security of your information

Kleva uses commercially reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, disclosure, alteration, and destruction. These include access controls, encryption of data in transit, and contractual safeguards with the service providers that process personal data on our behalf. No method of transmission over the internet or method of electronic storage is 100% secure, however, and we cannot guarantee absolute security.

11. Data storage and retention

Your personal data is stored by Kleva and by the cloud service providers Kleva engages, primarily in the United States. Kleva retains customer data for the duration of the business relationship with the customer and for a period of time thereafter to analyze the data for Kleva's operations and for historical and archival purposes associated with Kleva's services.

Kleva retains prospect data until such time as it no longer has business value and is then purged from Kleva systems. All personal data that Kleva controls may be deleted upon a verified request from the data subject or an authorized agent. For more information on where and how long your personal data is stored, and to exercise your rights of erasure or portability, please contact us at hi@kleva.co.

12. Children's data

Our Site is intended for business users. We do not knowingly attempt to solicit or receive information from children. If you believe a child has provided us with personal information, please contact us at hi@kleva.co and we will take appropriate steps to delete the information.

13. Questions, concerns, or complaints

If you have questions, concerns, complaints, or would like to exercise your rights, please contact us at: