Klu.ai Platform Agreement

Privacy Policy

About Us

We are Klu (Klu, Inc.) – a leading LLM App Platform business incorporated in the United States. We are headquartered at 548 Market Street San Francisco 94104 USA, and store all data in Europe. We believe in the highest levels of privacy and security, and therefore we only collect data to make our products and services better for customers like you.

If you would like to contact us with a question about how we use your data, the quickest way to do this is by contacting our Data Protection Officer, Stephen M. Walker II, via email at privacy at klu dot ai. This notice provides our privacy policy for all users, for citizens of the EU, and also explains how California residents can exercise their rights under the CCPA to request that we:

  1. Provide certain personal information that we have collected about them during the past 12 months, along with related information described below.
  2. Delete certain personal information that we have collected from them.

No matter your location on Earth, as a customer, we provide you the same transparency and data options standards available to customers located in California and Europe.

Why do we collect data?

To facilitate the account creation and logon process we collect your name and email address. We collect this in order to take steps to enter into a contract with you and allow us to provide our services, including to fulfil your orders and requests, and to facilitate payments. This includes monitoring payments and purchases for fraud.

An unfortunate truth of the internet is that there are many bad actors continually probing and attempting to exploit weaknesses in systems. For example, in the first week of service, our fraud detection systems blocked payments from a bad actor attempting to use a stolen credit card when purchasing an Enterprise plan.

When you contact us either by phone, email, this website or via social media, we will usually collect your name, social media handle and contact details, because it's in our legitimate interest to make sure we can properly respond to your query.

We use essential cookies to facilitate the operation of our website and may use the information collected from these cookies to enforce our terms and conditions and policies, protect our rights and interests, or those of all our other users or third parties, including to detect any malicious, deceptive, fraudulent, or illegal activity, and prosecute those responsible for that activity and detect and fix errors and security incidents.

When you use our website and consent to our use of non-essential cookies we will collect information about how you use our website including your device type, operating system, browser type, browser settings, IP address, language settings, dates and times of connecting, browsing behaviour and links clicked. We use this information to improve our website and to better understand how people use it. More detail on the information we collect and how we do this is set out in our Cookie Policy below.

When you sign up to receive our news, offers, events or other initiatives regarding our service or other services that may be of interest to you, we will collect your name and email address to provide you with our updates in line with any preferences you have told us about. You can unsubscribe from our updates at any time by responding to any email you receive from us to tell us you wish to unsubscribe or by emailing privacy at klu dot ai.

It is against our terms of service and privacy policy to scrape, or otherwise collect information from, our site through automated means. Unauthorized scraping or data collection activities are strictly prohibited and may result in legal action.

If you are a business recipient we may send you our updates because we believe that you will be interested in our services and it is in our legitimate interests to promote our business to interested parties.

If you are a consumer we may send you our updates either when (i) you are an existing customer as it is in our legitimate interests to promote our other offerings you may be interested in; or (ii) if you are not an existing customer, when you have opted in to receive our updates, in this case we rely on your consent to contact you.

If our business is sold we may process your personal information for this purpose because we have a legitimate interest to ensure our business can be continued by the buyer. If you object to our use of your personal information in this way, the buyer of our business may not be able to provide services to you.

Where is your data stored and how long do we keep it?

We store your data in Europe. All data is encrypted at transit and at rest using industry-leading encryption. When working with third parties we may need to transfer your personal data to other countries. Whenever we transfer your personal information outside of the EU, we ensure it receives additional protection as required by law. To keep this privacy policy as short and easy to understand as possible, we haven't set out the specific circumstances when each of these protection measures are used. You can contact us at privacy at klu dot ai for more detail on this.

We will only retain your personal information for as long as we need it. We consider the nature, sensitivity, and purpose we collected your data for when deciding when it's time to delete it. We will in some cases keep your data for longer periods of time than necessary for the original purpose we collected it for if we need to do this to meet our legal, accounting or regulatory requirements.

We also carefully anonymize your personal data so that it can no longer be associated with you, and because this information is anonymized, we can use it indefinitely without notifying you. We use this anonymized information to improve our business, and we also never sell any anonymous or personal information to other businesses, even to help keep our service as low priced as possible.

What are my rights?

Under GDPR

  • Access your personal data (also known as a “subject access request”)
  • Correct incomplete or inaccurate data we hold about you
  • Ask us to erase the personal data we hold about you
  • Ask us to restrict our handling of your personal data
  • Ask us to transfer your personal data to a third party
  • Object to how we are using your personal data
  • Withdraw your consent to us handling your personal data

Under CCPA

  • The categories of personal information we collected about you
  • The categories of sources for the personal information we collected about you
  • Our business or commercial purpose for using your personal information
  • The categories of third parties with whom we share that personal information
  • The specific pieces of personal information that we hold about you

In the event of an acquisition or merger, which results in the sale of personal data, we will make sure that you receive two separate lists where we disclose:

  • Sales, identifying the personal information categories that each category of recipient purchased
  • Disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained

The disclosure described above will be limited to the personal information collected or used over the past 12 months.

If we deliver our answer electronically, the information enclosed will be "portable", i.e. delivered in an easy usable format in order to enable you to transmit the information to another entity without hindrance, provided that this is technically feasible.

You have the right to request that we delete any of your personal information, subject to the following exceptions: If we need your personal information to complete the transaction for which we collected the personal information, provide a good or service that you requested, or otherwise perform our agreement with you. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities. Debug products to identify and repair errors that impair existing intended functionality of https://klu.ai. Exercise free speech or exercise another right provided for by law. Comply with any legal obligation that lies with us. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest. Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us. Make any other internal and lawful uses of your personal information in such a fashion that is compatible with the context in which you provided it. If none of the exceptions above applies, as a result of the exercise of your right, we will delete your personal information and direct any of our service providers to do so.

To exercise the rights described above, you need to submit your verifiable request to us by: writing us an email at the contact details provided in this document, or, if it is the case, follow the specific instructions provided on https://klu.ai

For us to respond to your request, it's necessary that we know who you are. Therefore, you can only exercise the above rights by making a verifiable request which must: provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative. Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. We will not respond to any request if we are not able to verify your identity and confirm the personal information in our possession actually relates to you.

If you cannot personally submit a verifiable request, you can authorize a person registered with the California Secretary of State to act on your behalf. If you are an adult, you can make a verifiable request on behalf of a minor under your parental authority.

For CCPA requests, you can submit a maximum number of 2 requests over a period of 12 months.

Sale of Personal Information

We have not sold personal information that is subject to the CCPA's sale limitations. The CCPA defines a “sale” as the disclosure of personal information for monetary or other valuable consideration.

Who do we share your data with?

Business partners, suppliers and subcontractors for the performance of the contract we enter into with them or you.

Delivery providers and logistics companies for the performance of the contract we enter into with you to deliver the products you order.

Promotional events and marketing organizations, we do not sell data for marketing purposes, but may share your data with an event organiser or collaboration brand including where we run workshops with co-presenters and offer a promotion alongside a partner brand. We will always tell you before (usually on the event registration form) and you will be given the chance to opt-out before we do this.

Regulators/ Authorities/ Enforcement Agencies if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect the rights, property, or safety of our clients or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection.

Prospective buyers of our business or if our business is sold, we will transfer the personal information we hold about you to the buyer of our business. We do this because we have a legitimate interest to ensure that our business can be continued by the buyer.

What are cookies and how do we use them?

A cookie is a small file of letters and numbers that we store on your browser or in your device's storage. We primarily use cookies in service of providing great services by saving your session information in your browser. This enables your personalized settings and a faster product experience. We are not interested in cookies for targeting purposes.

Essential Cookies

We use essential cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you use our website. We are permitted to place these cookies without your prior consent, but you can block all cookies, including essential cookies by changing your browser settings. Please note if you block all cookies, you might not be able to see or access all parts of our website.

Non-Essential Cookies

The other types of cookies we use are non-essential cookies. We use these to help us making improvements to our products and services. We have listed all non-essential cookies we might use and that we might allow our partners to use in the table below. We only use (and store) non-essential cookies if you provide your consent.

Your Choices

If you do not like cookies, we recommend you change your browser settings, use a blocker, or delete them. Doing so will not impact your service experience, but may log you out.

External Cookies

CookiePurposeDurationMore Information
ClearbitData enrichmentUp to 12 monthshttps://clearbit.com/privacy
CloudflareService security and performanceUp to 12 monthshttps://cloudflare.com/en-us/privacypolicy/
SegmentDebug issuesUp to 12 monthshttps://segment.com/product/privacy-portal/

Questions, Comments, or More details

We worked hard to create a clear and easy to read notice – but if you feel that we have overlooked an important perspective or used language which you think we could improve, please let us know by email at privacy at klu dot ai. Your feedback and suggestions on this notice are welcome.

Last updated: November 1, 2023