Privacy Policy

This Policy explains how the operator of KleemAI processes personal data when you visit our website, create an account, use coding-agent services, join a waitlist, contact support, or interact with our provisioning systems.

For questions or privacy requests, email hello@kleemai.now. Where Indian data-protection law applies, this address also serves as the initial contact for grievances about personal data.

• Account and profile data, such as name, email address, password hash, profile image, authentication provider, session, and security records.
• Plan and provisioning data, including selected provider and plan, authorized email allocations, invitations, resets, swaps, cooldowns, entitlements, order state, and offboarding records.
• Workspace content, including prompts, messages, repositories, files, code, uploads, generated output, previews, project metadata, session state, and user feedback.
• Operational and security data, including tool calls, commands, approvals, audit events, errors, IP-related request data, timestamps, browser/device information, usage counters, and diagnostic logs.
• Payment and transaction metadata when checkout is enabled. Payment credentials are ordinarily processed by the payment provider rather than stored by KleemAI.
• Communications and waitlist information you send to us.

We process information to perform our contract with you, pursue legitimate interests such as security and reliability, comply with legal obligations, and obtain consent where required. KleemAI does not use your private workspace content to train its own general-purpose AI models unless we clearly ask and you opt in.

• Create and secure accounts, authenticate sessions, and prevent fraud or abuse.
• Provision Codex or Claude workspace access and operate invitation, reset, swap, and removal workflows.
• Run coding-agent tasks, sandboxes, commands, previews, exports, and connected integrations at your direction.
• Track entitlements and usage, process transactions, provide support, and communicate service or security notices.
• Debug failures, measure reliability, enforce policies, comply with law, and improve product safety and usability.

When you choose a model or connected feature, relevant prompts, files, instructions, and metadata may be sent to that provider. Providers may include OpenAI/Codex, Anthropic/Claude, GitHub, cloud hosting, databases, sandbox infrastructure, monitoring, email, and payment services.

Those providers process data under their own terms, privacy notices, configurations, and retention rules. Account administrators may also control workspace settings. Review the provider’s policies before submitting sensitive information.

We do not sell personal information. We may disclose information to service providers acting for us; connected providers you select; workspace administrators; professional advisers; a successor in a corporate transaction; or authorities when required by law or reasonably necessary to protect rights, safety, and service integrity.

We limit access according to role and purpose and require appropriate confidentiality or data-protection commitments where applicable.

KleemAI and its providers may process data in India and other countries where infrastructure or personnel are located. Those places may have different data-protection laws. Where required, we use contractual and organizational safeguards for cross-border processing.

We keep personal data only as long as reasonably necessary for the service, security, dispute resolution, legal compliance, and legitimate business records. Retention varies by category: active account and workspace records generally remain while the account is active; security and transaction records may be kept longer; temporary files and expired sessions may be deleted sooner.

Deleting or replacing a provisioned email from a third-party workspace does not automatically erase KleemAI’s order, audit, security, or transaction record. You may request deletion, but we may retain limited information where law, fraud prevention, security, or legal claims require it.

We use technical and organizational safeguards designed to protect data, including password hashing, encrypted secrets, access controls, owner-scoped records, approval controls, audit logs, and isolated execution environments where configured. No system is perfectly secure, so keep credentials private and notify us promptly of suspected compromise.

Depending on applicable law, you may ask to access, correct, update, erase, or receive information about your personal data; withdraw consent; object to certain processing; or raise a grievance. We may verify identity and authority before acting and may deny or limit a request where law permits.

You can manage some information in your account, disconnect integrations, stop submitting content, cancel future renewals when payments are enabled, or close your account. Withdrawing consent does not invalidate earlier lawful processing.

We use essential cookies and similar storage for authentication, preferences, security, and core functionality. Any optional analytics or marketing technologies will be described and controlled as required by law.

KleemAI is not directed to people under 18. We may update this Policy as the product and law evolve. Material changes will be communicated through the service or another reasonable channel.