Privacy Policy

Personal Information

We collect the following types of personal information:

Usage Information

Automatically Collected Information

We automatically collect certain information through:

Service Provision

• Account Management: Create and manage your account
• Authentication: Secure login and session management
• Salesforce Integration: Connect and interact with your Salesforce instance
• AI Processing: Provide AI-powered chat assistance through OpenAI
• Feature Delivery: Enable core platform functionality

Communication

• Service Communications: Send transactional emails and notifications
• Support: Respond to inquiries and provide customer support
• Updates: Notify you of service changes, updates, and new features
• Marketing: Send promotional communications (with consent)

Improvement and Analytics

• Service Improvement: Analyze usage patterns to enhance the Service
• Performance Monitoring: Monitor system performance and reliability
• Error Detection: Identify and resolve technical issues
• Security: Detect and prevent fraud and unauthorized access

Legal and Business

• Compliance: Meet legal and regulatory requirements
• Billing: Process payments and manage subscriptions
• Business Operations: Conduct internal business operations
• Legal Protection: Protect our rights and interests

Third-Party Service Providers

We share your information with trusted third-party service providers:

Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes or government requests
• Protect our rights, property, or safety
• Prevent fraud or security threats
• Enforce our Terms of Service or other agreements

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction. We will notify you of any such change in ownership or control.

Security Measures

We implement appropriate technical and organizational measures to protect your information:

• Encryption: Data encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Role-based access and multi-factor authentication
• Regular Audits: Security assessments and vulnerability testing
• Employee Training: Privacy and security awareness programs
• Incident Response: Procedures for security incident handling

Data Breach Procedures

In the event of a data breach, we will notify affected users and relevant authorities as required by law. We will take immediate steps to contain and remediate any security incident.

Retention Periods

We retain your information for the following periods:

• Account Data: While your account is active and for 30 days after deletion
• Chat Conversations: Indefinitely while your account is active
• Billing Records: 7 years for tax and accounting purposes
• Logs and Analytics: 12 months for security and performance monitoring
• Marketing Communications: Until you unsubscribe or withdraw consent

Data Deletion

You can request deletion of your account and associated data at any time. We will process deletion requests within 30 days, subject to legal retention requirements.

Access and Control

You have the following rights regarding your personal information:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Export your data in a machine-readable format
• Objection: Object to certain processing activities
• Restriction: Limit how we process your information

Marketing Preferences

You can control marketing communications by updating your preferences in your account settings or using the unsubscribe link in any marketing email.

Exercising Your Rights

To exercise your rights, contact us at legal@kleverdev.com. We will respond to your request within 30 days, subject to verification of your identity.

Cross-Border Transfers

Your information may be transferred to and processed in countries other than New Zealand, including:

• United States: OpenAI, Stripe, Sentry, and other service providers
• European Union: Some analytics and monitoring services
• Global: Cloud infrastructure and CDN services

Safeguards

We ensure appropriate safeguards for international transfers through:

• Standard contractual clauses approved by data protection authorities
• Adequacy decisions for transfers to approved countries
• Certification schemes and codes of conduct
• Contractual obligations with service providers

Updates and Notifications

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending email notifications to registered users
• Displaying in-app notifications for significant changes

Continued Use

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

If you have questions about this Privacy Policy or our data practices, please contact us:

KleverDev Limited
145 Nelson St, Auckland 1010, New Zealand
Email: legal@kleverdev.com

Data Protection Officer

For privacy-related inquiries or to exercise your data rights, contact our data protection team at legal@kleverdev.com.

Regulatory Authorities

You have the right to lodge a complaint with:

• New Zealand: Privacy Commissioner (privacy.org.nz)
• European Union: Your local data protection authority
• California: California Attorney General