Privacy Policy

1. Introduction

KlypDesk (“we”, “our”, “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our platform.

2. Information We Collect

Account Information

• Name and email address
• Google account information (if you sign up via Google authentication)
• Business name and subdomain preferences
• Profile and branding settings

Payment Data

• Payment information is processed by Stripe - we do not store your full card details
• Billing address and subscription status

Content

• Photos, videos, and documents you upload
• Gallery settings, client lists, and booking data
• Contracts and invoice information

Usage Data

• Browser type and device information
• Pages visited and features used
• IP address and approximate location

3. How We Use Your Information

• Providing and improving the Service
• Processing payments and managing subscriptions
• Communicating with you about your account, updates, and support
• Delivering your content to your clients (galleries, bookings, cinemas)
• Ensuring security and preventing abuse
• Complying with legal obligations

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:

• Contract performance - processing necessary to provide the Service you signed up for, including account management, file storage, gallery and cinema delivery, booking, and payment processing.
• Legitimate interest - processing necessary for security, fraud prevention, service improvement, and error monitoring, where our interests do not override your fundamental rights.
• Consent - processing that requires your explicit opt-in, such as analytics tracking via cookies. You may withdraw consent at any time through the cookie preferences on our website.
• Legal obligation - processing required to comply with applicable laws, such as financial record-keeping.

5. Third-Party Services

We share data with the following categories of third parties:

• Stripe - payment processing
• Amazon Web Services (S3) - file storage
• Google - authentication (if using Google sign-in)
• Dropbox / Google Drive - cloud import (only when you initiate an import)
• Plausible Analytics - privacy-focused website analytics on public-facing pages (no cookies, no personal data collected; only activated with your consent)
• Sentry - error monitoring and crash reporting to maintain service reliability (may receive IP addresses and browser metadata when errors occur)

We also operate a lightweight page view tracker on public-facing pages that records page paths and referrer URLs to understand how visitors navigate. This tracker does not use cookies and is only active when you have given analytics consent. Server-side logs may record IP addresses, which are treated as personal data under GDPR.

We do not sell your personal information to third parties.

6. Data Storage and Security

Your data is stored on secure servers. We use encryption in transit (HTTPS/TLS) and implement access controls to protect your information. Uploaded files are stored in Amazon S3 with appropriate security configurations.

While we take reasonable measures to protect your data, no system is 100% secure. You are responsible for keeping your login credentials safe.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will remove your personal information and uploaded content within 30 days, except where retention is required by law (e.g., financial records).

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Request a copy of your data in a portable format (contact us at [email protected] to request a data export)
• Withdraw consent for data processing
• Object to certain uses of your data
• Lodge a complaint with your local data protection supervisory authority

To exercise any of these rights, contact us at [email protected]. We will respond to your request within 30 days.

9. Cookies and Local Storage

We use cookies and browser storage mechanisms as described below. Essential cookies are required for the Service to function. Analytics cookies are only set with your explicit consent.

We do not use third-party advertising cookies. You can manage your analytics consent via the cookie banner on our website, or manage all cookies in your browser settings. Disabling essential cookies may affect functionality.

10. Children's Privacy

KlypDesk is not intended for children under 16. We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will delete it promptly.

11. International Transfers

Your data may be stored and processed in countries outside your own. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Your continued use after changes take effect constitutes acceptance.

13. Contact and Supervisory Authority

For privacy-related questions or requests, contact us at [email protected].

If you are located in the EEA, United Kingdom, or Switzerland and believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local data protection supervisory authority. A list of EEA supervisory authorities is available at edpb.europa.eu.