Privacy Policy

1. Introduction

Welcome to Klory.ai. We are committed to protecting your privacy and ensuring you have a positive experience when using our services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at https://klory.ai and use our learning platform.

Klory.ai is a web application that allows users to paste YouTube video links and generate structured learning materials such as summaries, notes, flashcards, quizzes, and mind maps. Our platform also includes a Content Assistant that can answer questions about the content.

This policy complies with the General Data Protection Regulation (GDPR), German privacy law (BDSG), and other applicable data protection regulations.

2. Data Controller

The data controller responsible for your personal data is:

3. Personal Data We Collect

We collect and process the following categories of personal data:

3.1 Account Information

• Email address
• Name (if provided)
• Profile information from third-party login providers (Google, etc.)
• Account preferences and settings

3.2 Usage Data

• YouTube video URLs you submit for processing
• Generated content (summaries, flashcards, quizzes, notes, mind maps)
• Chat messages with our Content Assistant
• Features used and interactions with the platform
• Timestamps of activities

3.3 Technical Data

• IP address
• Browser type and version
• Device type and operating system
• Referring website
• Pages visited and navigation paths
• Time zone and language preferences

3.4 Payment Information

• Billing name and address
• Payment method details (processed securely by Stripe)
• Transaction history
• Subscription status

Note: We do not store complete credit card numbers. All payment processing is handled securely by our payment provider, Stripe.

4. How We Use Your Data

We use your personal data for the following purposes:

4.1 Service Delivery

• Process YouTube videos and generate learning materials
• Provide access to summaries, flashcards, quizzes, notes, and mind maps
• Enable the Content Assistant to answer your questions
• Manage your account and preferences

4.2 Billing and Payments

• Process subscription payments and credit purchases
• Send invoices and payment confirmations
• Manage refunds when applicable

4.3 Product Improvement

• Analyze usage patterns to improve our services
• Develop new features based on user needs
• Optimize AI model performance

4.4 Communication

• Respond to your inquiries and support requests
• Send important service updates and notifications
• Provide technical support

4.5 Security and Fraud Prevention

• Detect and prevent fraudulent activities
• Protect against unauthorized access
• Ensure platform security and stability

5. Legal Basis for Processing (GDPR Article 6)

We process your personal data based on the following legal grounds:

6. Third-Party Services

We work with trusted third-party service providers to deliver our services. These providers may process your data on our behalf:

All third-party providers are contractually bound to process data only according to our instructions and in compliance with applicable data protection laws.

7. Cookies

Cookies are small text files stored on your device when you visit our website. We use different types of cookies:

For detailed information about the cookies we use, please visit our Cookie Policy.

8. Cookie Consent

When you first visit our website, you will see a cookie consent banner. You can:

• Accept All: Enable all cookies including analytics and functionality cookies
• Accept Essential Only: Only use strictly necessary cookies
• Manage Preferences: Choose which cookie categories to enable

You can change your cookie preferences at any time by clicking the cookie settings link in our footer or by clearing your browser cookies and revisiting our site.

9. Data Retention

We retain your personal data only for as long as necessary:

10. Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights:

11. International Data Transfers

Some of our service providers may process your data outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place:

• Adequacy Decisions: Data transfers to countries recognized by the EU as providing adequate protection
• Standard Contractual Clauses (SCCs): EU-approved contract terms that protect your data
• Data Processing Agreements: Contractual commitments to protect your data according to GDPR standards

12. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (HTTPS/TLS) and at rest
• Secure authentication mechanisms
• Regular security assessments and updates
• Access controls and monitoring
• Secure data backup procedures
• Employee training on data protection

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but will notify you and relevant authorities of any data breach as required by law.

13. Children's Privacy

Our services are not intended for children under the age of 16 (or 13 in some jurisdictions). We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at [email protected], and we will delete such information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make changes:

• We will update the "Last updated" date at the top of this policy
• For significant changes, we will notify you via email or a prominent notice on our website
• We encourage you to review this policy periodically

15. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: