Privacy Policy
Last updated: May 1, 2026 · Effective: May 1, 2026
Pointerflow LLC ("KlyoChat", "we", "our", or "us") operates the KlyoChat platform available at klyochat.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
1. Information we collect
1.1 Account information
When you create an account, we collect your name, email address, and password. If you connect social accounts (Instagram, Facebook, etc.), we receive the permissions you grant during OAuth.
1.2 Usage data
We collect information about how you use KlyoChat: pages visited, features used, flows created, messages sent, and timestamps. This data helps us improve the product.
1.3 Contact data
When you import or collect subscribers through KlyoChat, we store contact data (names, social IDs, custom fields) on your behalf. You are the data controller for your subscribers.
1.4 Payment information
Payments are processed by Stripe. We do not store full card numbers. We receive confirmation of payment status and basic billing information (last 4 digits, billing address) from Stripe.
2. How we use your information
- Provide, operate, and maintain the KlyoChat platform
- Process transactions and send related notifications
- Send product updates, security alerts, and support messages
- Improve and personalize the service
- Monitor usage patterns to prevent abuse and fraud
- Comply with legal obligations
3. Data sharing and disclosure
We do not sell your personal information. We share data only in these circumstances:
- Service providers: Stripe (payments), AWS (infrastructure), Postmark (email), OpenAI (AI features)
- Legal requirements: If required by law, court order, or governmental authority
- Business transfers: In connection with a merger, acquisition, or sale of assets
- With your consent: For any other purpose with your explicit consent
4. Data retention
We retain account data for as long as your account is active. After account deletion, we remove personal data within 30 days, except where we are legally required to retain it longer.
5. Your rights (GDPR/CCPA)
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate personal data
- Request deletion of your personal data
- Object to or restrict processing
- Data portability (receive your data in a machine-readable format)
- Withdraw consent at any time
To exercise these rights, email us at privacy@klyochat.com.
6. Cookies
We use cookies for authentication, preferences, and analytics. See our Cookie Policy for details. You can control cookies in your browser settings or through our cookie consent banner.
7. Security
We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, and regular security audits. No system is 100% secure; we cannot guarantee absolute security.
8. Children's privacy
KlyoChat is not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us immediately.
9. International transfers
We operate in the United States. If you are located outside the US, your information is transferred to and processed in the US. For EU residents, we rely on Standard Contractual Clauses for cross-border transfers.
10. Contact us
Pointerflow LLC
Email: privacy@klyochat.com
For EU data protection inquiries: dpo@klyochat.com