Last updated: September 3, 2026
Version: 1.2.
Effective date: August 13th, 2026
Controller: KleverDeck Inc., registered in Florida, United States, Florida Document No. P26000037848 (“KleverDeck”, “we”, “us”). Contact: connect@kleverdeck.ai.
This Privacy Policy explains how we collect, use, share and protect personal information when you visit our website (kleverdeck.ai), request pilot access, obtain a trial or paid license key, create or use a KleverDeck account, or communicate with us. It does not cover the content you process inside the KleverDeck software: the Software is local-first, and your indexed documents, datasets, chats and generated files remain on your own hardware and are not transmitted to us, as described in Section 5 of the KleverDeck End User License Agreement and Terms of Use (the “EULA”).
2.1. Pilot application data. When you request pilot access we collect: your full name, email address, phone number (optional), country, organization name, industry, your main reason for requesting access, a description of the problem you want to solve, the sensitivity level of the data you intend to process, your preferred start timeline, and whether you are willing to provide feedback during the pilot. We ask for a general sensitivity category only; please do not submit actual documents, confidential details, health information, financial account data, government identifiers, or personal data about other people through the pilot form.
2.2. Account data. When you create an account we collect your first and last name, country, email address and a password. Passwords are stored only in salted, hashed form; we cannot read them. If you register or sign in with Google, we receive your name, email address, Google account identifier, and basic profile information from Google, depending on your Google account settings and the permissions you approve. We never receive your Google password. Google sign-in is provided by Google and is subject to Google’s own terms and privacy policy. We use Google sign-in only for authentication and account creation and do not use Google account information for advertising or to train AI models.
2.3. Purchase and billing data. If you purchase a paid license, checkout and payment are handled by the third-party payment provider identified during checkout. We do not receive or store your full card number or payment credentials. We receive order confirmation, the product and plan purchased, billing name and email, invoice details, and the resulting license entitlement, which we retain as billing records for as long as tax and accounting law requires.
2.4. Communications. When you email us or request support, we collect the correspondence and any information you choose to include, such as logs or diagnostics you decide to share with us.
2.5. Marketing preferences. We record whether you have opted in to receive product updates and announcements. You can unsubscribe at any time using the link in each email or by contacting us.
3.1. Server logs. Our hosting and infrastructure service providers may record standard technical logs — such as IP address, browser type and version, pages requested, referring page and timestamps — for security, abuse prevention and operational purposes.
The website uses no third-party analytics, advertising or cross-site tracking cookies, and no third-party analytics service. Strictly necessary technical storage is used to keep you signed in to your account and to remember your privacy choice.
We keep our own first-party record of website visits on our own infrastructure. Every visit may be counted; what we retain about it depends on the choice you make in the privacy banner. These records set no additional cookies, are not combined with data from other websites, are not sold or shared with third parties, and are retained for up to twelve (12) months.
The minimal records kept for “Decline” and “No choice made yet” contain no browser, device or network identifiers we could use to recognize you, though we do not claim they are irreversibly anonymized.
These first-party visit records are separate from the technical server logs described in 3.1. Those logs are created by our hosting provider for security and operations whenever any request reaches the site, and they exist regardless of your privacy choice; they are not part of our optional visit statistics.
Declining has no effect on your use of the website. You can change or withdraw your choice at any time using the Cookie preferences link in the website footer, which reopens the privacy banner; changing your choice does not sign you out or affect your account.
The website loads font files from Google Fonts; when a page loads, your IP address is transmitted to Google to deliver the fonts.
3.3. License and activation data. When you activate a license key, trial key, pilot key, or other access credential, we may receive the license or access-key identifier, a hashed machine-binding identifier, activation and deactivation events, and license tier or status. The installed Software also periodically confirms the current time and license status with our website while online (a “trusted clock” check used to enforce trial and license periods). We use this data to operate access control, license enforcement, fraud prevention, and account administration as described in the EULA.
Your Workspace content — indexed documents, datasets, chats and generated files — is processed locally on your hardware and is not transmitted to us. The Software does not send telemetry to us by default. We do not use your personal information or your Workspace content to train AI models.
We use personal information for the following purposes and legal bases where the GDPR or UK GDPR applies: (a) to review pilot applications and manage pilot participation — steps taken at your request before entering into a contract and/or performance of a contract, GDPR Art. 6(1)(b); (b) to create and administer accounts, issue trial and paid license keys, activate licenses, process purchases, and provide our services — performance of a contract, Art. 6(1)(b); (c) to send product updates, announcements, newsletters, or marketing communications you have opted in to receive, and to compile consent-based first-party visit statistics where you have accepted them — consent, Art. 6(1)(a); (d) to operate license enforcement, secure our website and services, prevent fraud, detect abuse, protect our systems, and maintain minimal, non-identifying counts of website visits as described in Section 3.2 — legitimate interests, Art. 6(1)(f); and (e) to comply with legal obligations, including tax and accounting obligations for purchases — Art. 6(1)(c).
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
We share personal information only with: (a) hosting, infrastructure, domain/DNS, e-mail and related technical service providers acting on our behalf; (b) Google, if you choose to register or sign in using Google sign-in, and Google Fonts when font files are loaded to deliver the website fonts; (c) the payment provider identified at checkout, if you make a purchase, to process your payment; (d) professional advisers, such as lawyers, accountants, and insurers, where necessary; (e) courts, regulators, or law enforcement where required by law; and (f) a successor entity or other transaction participant in connection with a merger, acquisition, financing, restructuring, or sale of assets, in which case this Policy continues to apply unless you are notified otherwise, and we will notify you of any change of controller.
KleverDeck is based in the United States. Personal information that we collect through our website, pilot-access forms, account registration, license administration, purchases, and support channels may be processed and stored in the United States and other countries where we or our service providers operate. Where EU/EEA or UK data-protection law requires an international transfer mechanism, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses for EU/EEA transfers and, where applicable, the UK International Data Transfer Agreement or UK Addendum for UK transfers, together with any supplementary measures required by applicable law.
We keep pilot application data for the duration of the pilot evaluation and pilot program and delete or anonymize it within twelve (12) months after the program ends, your application is rejected, or you ask us to delete it, unless we need to retain it longer for legal, security, fraud-prevention, or dispute-resolution purposes.
We keep account data until you request deletion of your account, or for up to twenty-four (24) months after your account becomes inactive, unless longer retention is necessary for legal, security, fraud-prevention, or dispute-resolution purposes. We keep marketing preference data until you unsubscribe or ask us to delete it. We keep server logs for ninety (90) days, unless longer retention is necessary for security, abuse prevention, legal compliance, or dispute resolution.
We keep license and activation data for the duration of the applicable account, pilot, trial, license, or access period, and for up to twenty-four (24) months afterward, unless longer retention is necessary for legal, security, fraud-prevention, chargeback, audit, or dispute-resolution purposes. We keep purchase and billing records for as long as applicable tax and accounting law requires.
9.1. EU, EEA and United Kingdom. Where the GDPR or UK GDPR applies, you have the right to access, rectify, erase, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time without affecting prior processing. You also have the right to lodge a complaint with your supervisory authority.
9.2. California. To the extent the California Consumer Privacy Act applies to us, California residents may have the right to know what personal information we collect, use, disclose, sell, or share; the right to correct inaccurate personal information; the right to delete personal information; and the right not to be discriminated against for exercising privacy rights. We do not sell personal information or share it for cross-context behavioral advertising.
9.3. Exercising your rights. Email us at connect@kleverdeck.ai. We will verify your request and respond within the period required by applicable law.
9.4. Do Not Track and opt-out signals. The website does not track visitors over time or across third-party sites, so it does not respond to “Do Not Track” or Global Privacy Control signals; because we do not sell or share personal information, such signals would not change how we process it.
We protect personal information with technical and organizational measures, including encryption in transit (TLS), hashed password storage, security confirmation emails for sensitive account changes, and access restricted to personnel who need it. No method of transmission or storage is completely secure; if a breach affects you, we will notify you and the competent authorities as required by law.
Our website, accounts, pilot program, and services are not directed to children or minors. You must be at least eighteen (18) years old, or the age of majority in your jurisdiction, to submit a pilot request, create an account, or participate in the pilot. We do not knowingly collect personal information from children under eighteen (18). If you believe a child has provided us personal information, contact us and we will delete it.
We may update this Policy from time to time. We will post the updated version with a new effective date and, for material changes, notify you on the website or by email before the changes take effect.
KleverDeck Inc. — connect@kleverdeck.ai.
© 2026 KleverDeck Inc. of Florida · EULA & Terms of Use · Privacy Policy · Cookies · Third-Party Notices