Privacy Policy

01 Overview

Klonr ("we," "us," or "our") operates an AI-powered content creation platform that enables users to generate virtual influencer personas, images, and video content using artificial intelligence. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

By using our Service, you consent to the data practices described in this Privacy Policy. If you do not agree with the practices described herein, please do not use the Platform.

02 Information We Collect

2.1 Information You Provide Directly

Account Information: Name, email address, username, password (hashed), and profile information.
Payment Information: Credit/debit card details, billing address, and transaction history. Payment processing is handled by third-party processors (e.g., Stripe). We do not store full credit card numbers on our servers.
User Content: Images you upload (including selfies, reference photos, or character references), text prompts, character configurations, and content preferences.
Communications: Messages you send to our support team, feedback, and survey responses.
Identity Verification: If required, government-issued ID or age verification documents.

2.2 Information Collected Automatically

Device Information: IP address, browser type and version, operating system, device identifiers, and screen resolution.
Usage Data: Pages visited, features used, generation history, click patterns, session duration, referring URLs, and interaction timestamps.
Log Data: Server logs including access times, error logs, and API request data.
Location Data: Approximate geographic location derived from your IP address.

2.3 Information from Third Parties

Social Login Providers: If you sign in via Google, Apple, or other OAuth providers, we receive your name, email, and profile picture as permitted by your settings.
Payment Processors: Transaction confirmations, payment status, and fraud prevention data from Stripe or other payment providers.
Analytics Providers: Aggregated and anonymized usage analytics from services such as Google Analytics.

03 How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Platform and its features.
Process your AI content generation requests by transmitting prompts and images to third-party AI APIs.
Process payments and manage your subscription.
Send transactional communications (receipts, account alerts, security notices).
Send marketing communications (only with your consent; you may opt out at any time).
Detect, prevent, and address fraud, abuse, security incidents, and technical issues.
Enforce our Terms of Service and Acceptable Use Policy.
Monitor for prohibited content generation (CSAM, NCII, etc.) and comply with legal obligations.
Analyze usage patterns to improve user experience and develop new features.
Respond to your inquiries and provide customer support.
Comply with legal obligations, court orders, and law enforcement requests.

04 AI Processing & Data Handling

Important: When you use our AI generation features, your prompts, uploaded images, and configuration data are transmitted to third-party AI service providers for processing.

Specifically:

Prompts & Text Inputs: Your text prompts are sent to AI model APIs to generate content. These prompts may be temporarily processed and logged by the AI provider in accordance with their own data policies.
Uploaded Images: Reference images you upload are transmitted to AI APIs for processing. We recommend not uploading images containing sensitive personal information beyond what is necessary for the intended generation.
Generated Outputs: AI-generated images and videos are stored on our servers and/or cloud storage providers to enable you to access, download, and manage your generated content.
Content Moderation: We may use automated tools and/or manual review to scan generated content for violations of our Acceptable Use Policy, including CSAM detection.

We contractually require our AI providers to process data in accordance with applicable data protection laws, but we cannot guarantee how third-party providers handle data once it is transmitted to their systems. Please review the privacy policies of our AI providers for more information.

05 Information Sharing & Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

AI Service Providers: Prompts, images, and configuration data are shared with third-party AI APIs (Google, Kuaishou, ByteDance) to process your generation requests.
Payment Processors: Payment information is shared with Stripe or other payment processors to facilitate transactions.
Cloud Infrastructure: Data is stored on cloud hosting providers (e.g., AWS, Google Cloud, or similar) under data processing agreements.
Analytics Providers: Anonymized usage data may be shared with analytics services to improve the Platform.
Legal Compliance: We may disclose information if required by law, regulation, legal process, or governmental request.
Safety & Enforcement: We may share information to protect the rights, property, or safety of Klonr, our users, or the public, including to detect and prevent fraud, CSAM, and other prohibited activities.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

06 Third-Party AI Providers & Data

Our Platform relies on the following third-party AI providers. Each has its own privacy and data handling practices:

Google (Gemini / Imagen): Data sent to Google's API is processed under Google's Privacy Policy and Gemini API Terms. Google may process data for service improvement unless opted out via API data settings.
Kuaishou (Kling AI): Data sent to Kling's API is processed under Kuaishou's applicable privacy policies. Note that Kuaishou is a Chinese company and data may be processed in China.
ByteDance (Seedream): Data sent to ByteDance's API is processed under ByteDance/BytePlus privacy policies. Note that ByteDance is a Chinese company and data may be processed in China or Singapore.

Data Transfer Notice: Some of our AI providers are based in jurisdictions outside the EEA/UK/US. By using our Service, you acknowledge that your data (including prompts and uploaded images) may be transferred to and processed in these jurisdictions, which may have different data protection standards.

07 Cookies & Tracking Technologies

We use cookies and similar tracking technologies. For detailed information, please see our Cookie Policy.

08 Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

Encryption of data in transit (TLS 1.2+) and at rest (AES-256).
Hashing of passwords using bcrypt or equivalent algorithms.
Regular security audits and vulnerability assessments.
Access controls limiting employee access to personal data on a need-to-know basis.
Secure API key management and environment variable protection.
DDoS protection and firewall configurations.

However, no method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

09 Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this Policy. Specifically:

Account Data: Retained for the duration of your account plus 30 days after deletion request.
Generated Content: Stored for the duration of your active subscription. Upon account deletion, generated content is deleted within 90 days.
Payment Records: Retained for 7 years to comply with tax and financial regulations.
Server Logs: Retained for up to 12 months for security and debugging purposes.
Content Moderation Logs: Records of flagged or removed content may be retained indefinitely for legal compliance and platform safety.

For more details, see our Data Retention Policy.

10 Your Privacy Rights

Depending on your jurisdiction, you may have the following rights:

Access: Request a copy of the personal information we hold about you.
Rectification: Request correction of inaccurate or incomplete personal data.
Deletion: Request deletion of your personal data (subject to legal retention obligations).
Portability: Request a machine-readable copy of your data.
Restriction: Request that we restrict processing of your data in certain circumstances.
Objection: Object to processing of your data based on legitimate interests or for direct marketing.
Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time.

To exercise any of these rights, contact us at klonraihelp@gmail.com. We will respond to your request within 30 days (or as required by applicable law).

11 GDPR Rights (EEA/UK Users)

If you are located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) and UK GDPR apply to our processing of your personal data. Our lawful bases for processing include:

Contract Performance: Processing necessary to provide the Service you have requested (Article 6(1)(b)).
Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention, security, and product improvement (Article 6(1)(f)).
Consent: Processing based on your explicit consent, such as marketing communications (Article 6(1)(a)).
Legal Obligation: Processing necessary to comply with applicable laws (Article 6(1)(c)).

You have the right to lodge a complaint with your local Data Protection Authority if you believe we have violated your data protection rights.

12 CCPA Rights (California Users)

If you are a California resident, the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA) provides you with specific rights:

Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you.
Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
Right to Opt-Out of Sale: We do not sell personal information. If this changes, you will have the right to opt out.
Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
Right to Correct: You may request correction of inaccurate personal information.
Right to Limit Use of Sensitive Personal Information: You may limit our use of sensitive personal information to that which is necessary to perform the Service.

To exercise your CCPA rights, contact us at klonraihelp@gmail.com or use the "Do Not Sell My Personal Information" link on our website (if applicable).

13 International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, China, and Singapore (where our AI providers operate). We take steps to ensure that your data receives an adequate level of protection in the jurisdictions in which we process it, including:

Standard Contractual Clauses (SCCs) approved by the European Commission, where applicable.
Data processing agreements with all third-party service providers.
Compliance with applicable data transfer frameworks.

14 Children's Privacy

Our Platform is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information as quickly as possible. If you believe a child under 18 has provided us with personal information, please contact us immediately at klonraihelp@gmail.com.

15 Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For material changes, we will also send an email notification to the address associated with your account. We encourage you to review this Privacy Policy periodically.

16 Contact Us

For privacy-related questions or to exercise your data rights:

Data Protection Contact
Klonr
Email: klonraihelp@gmail.com
We operate as an online-only business.

If you are in the EEA and have concerns about our data processing practices, you have the right to lodge a complaint with your local supervisory authority.