Privacy Policy

1Overview

Kalens.io ("Kalens", "the service", "we", "us") is an online tool that produces AI-powered brand strategy reports, operated by an independent developer. We care about your privacy. This policy explains what information we collect, how we use and protect it, and the rights you have. By using the service you confirm you have read and understood this policy.

2Information we collect

• Account information: the email address you use to sign up.
• Report inputs: the brand and product details you enter to generate a report (category, product description, target market, open-ended notes, and similar).

Your payment is processed by our payment provider, Creem. We do not collect, see, or store your card number, CVV, or other card details, which are handled directly by Creem. We only receive the transaction result from Creem (such as a transaction ID, payment status, amount and currency, and buyer region).

To keep the service running and secure, we may record access times, approximate geographic region (used for things like localized pricing), device and browser type, and IP address (used for security and abuse prevention). We also use Cloudflare Turnstile to tell humans from bots, and PostHog to understand how the service is used so we can improve it.

3How we use your information

We use your information on the following legal bases (under the GDPR where it applies):

• To perform our contract: generate the report you request, manage your account, process payment, and deliver the report.
• Legitimate interests: keep the service secure, prevent abuse and fraud, and improve the service.
• Your consent: where you have agreed, to send you product updates (you can withdraw this at any time).

4AI generation notice

Reports on this service are generated automatically by artificial intelligence. The brand information you enter is sent to an AI provider to generate your report. This processing does not involve "solely automated decision-making" that produces legal or similarly significant effects on you (within the meaning of GDPR Article 22): a report is a content output, not a rating, approval, or rejection of you as a person. You are always free to decide whether to act on the report's suggestions.

5Third parties and sharing

To provide the service, your data flows to the following carefully selected providers (sub-processors), and only to deliver this service:

We do not sell, rent, or disclose your personal data to any third party for purposes beyond these providers delivering the service.

6International transfers

These providers' servers may be located outside your country or region, for example in the United States. This means your data may be transferred and processed abroad. For transfers involving EU or UK users, providers typically offer protection through Standard Contractual Clauses (SCCs) or an equivalent mechanism. By using the service you understand and agree to such cross-border transfers.

7Data retention

• Account and report data: kept for as long as your account exists, so you can access your reports at any time.
• You can ask us to delete your account and related data (see Section 9).
• Transaction records: some records may be retained for the period required by law for tax, accounting, and compliance purposes (usually handled by Creem in accordance with law).

8Data security

We take reasonable technical and organizational measures to protect your data, including encrypted transmission (HTTPS), access controls (row-level security so you can only access your own data), and backend key storage. Please note that no method of transmission or storage over the internet can be guaranteed to be 100% secure.

9Your rights

Depending on the laws that apply to you (such as the EU GDPR, UK GDPR, or California CCPA/CPRA), you may have the following rights:

• Access: obtain a copy of the personal data we hold about you.
• Rectification: correct inaccurate data.
• Erasure ("right to be forgotten"): request deletion of your personal data.
• Portability: receive your data in a structured, common format.
• Object and restrict: object to or restrict certain processing.
• Withdraw consent: withdraw consent you previously gave, at any time.
• Complain: lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at hello@kalens.io. We will respond within the period required by applicable law.

10Cookies

We use essential cookies to keep you signed in and to run basic features, and analytics cookies to understand and improve the service. See our Cookie Policy for details.

11Children's privacy

The service is intended for adult business operators and is not directed to anyone under 18 (or the age of majority in your region). We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us to delete it.

12Changes

We may update this policy from time to time. For material changes we will update the "Last updated" date at the top of this page, and notify you by other means where appropriate. Continued use of the service means you accept the updated policy.

13Contact us

If you have any questions about this Privacy Policy or wish to exercise your rights, contact us at hello@kalens.io.