Klaxo ("we", "us", "our") takes your privacy seriously. This Privacy Policy explains what information we collect, how we use it, and your rights, including rights under the California Consumer Privacy Act (CCPA).
1. Information we collect
1.1 Information you provide
- Business information: Business name, industry, city, services offered
- Contact information: Phone number, email address
- Payment information: Handled entirely by Stripe — we never see, store, or have access to your credit card details
- Subscription and billing records: For Care Plan customers, we store Stripe customer and subscription identifiers and your billing status (trialing, active, or cancelled). We never store card numbers.
- Communication content: Text messages, emails, and call audio you share with us during the sales process
1.2 Information we gather
- Publicly available business data: Phone numbers and business names found via public search engines and business directories
- Call records: Date, duration, and outcome of outbound and inbound calls made through our Twilio system
- SMS records: Date and content of text messages sent and received
- Website analytics: Basic visitor information when you browse klaxo.online (page views, browser type, referrer)
2. How we use your information
We use your information to:
- Contact you about our web design services
- Build, deliver, and host your website
- Process payments and manage your Care Plan subscription through Stripe
- Respond to your questions and support requests
- Improve our services
- Comply with legal obligations
3. Third-party services we use
We share necessary information with the following service providers to operate Klaxo:
| Service | What they receive | Why |
|---|
| Stripe | Business name, email, and subscription/billing identifiers | Payment processing and Care Plan subscriptions |
| Twilio | Phone number, call audio, SMS content | Calling and texting |
| Anthropic (Claude) | Call and SMS content for AI response | Conversational AI |
| Cloudflare | Business name, address | Domain registration |
| Vercel | Your website files | Website hosting |
| Resend | Email address, message content | Transactional and business email |
| Supabase | Business and customer records (contact details, project status, subscription identifiers) | Secure data storage |
Each provider has their own privacy policy. We only share what is necessary for each service to function.
4. How long we keep your information
- Lead data (uncontacted or unconverted leads): 12 months
- Client data (paying customers): Duration of service plus 5 years for tax and legal compliance
- Call records: 5 years (required by TCPA regulations)
- SMS records: 12 months
- Do Not Call requests: Permanently retained to honor opt-outs
5. Your privacy rights
If you are a California resident, the CCPA gives you the right to:
- Know what personal information we have about you
- Delete your personal information (with some exceptions for legal compliance)
- Correct inaccurate personal information
- Opt out of the sale or sharing of your personal information (we do not sell personal information)
- Not face discrimination for exercising these rights
If you are not a California resident, you may have similar rights under your local privacy laws — you can make the same requests and we will honor them where applicable. To exercise any of these rights, email contact@klaxo.online. We will respond within 45 days.
6. Opt-out of communications
You can opt out of Klaxo communications at any time:
- Phone calls: Press 9 during any call or ask the agent to remove you
- Text messages: Reply STOP to any text message from us
- Email: Use the unsubscribe link in any email, or reply asking to be removed
Opt-out requests are honored immediately and permanently.
7. Security
We take reasonable security measures to protect your information:
- All payment data is handled by Stripe under PCI-DSS compliance
- All websites we build use SSL encryption (HTTPS)
- Business and customer records are stored with our database provider (Supabase), with access limited to authorized Klaxo personnel
- Sensitive credentials are stored in encrypted environment variables
No system is 100% secure. If we discover a data breach affecting your information, we will notify you within 72 hours.
8. Children's privacy
Klaxo's services are intended for businesses and adults. We do not knowingly collect information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.
9. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated to active clients by email. The "Last updated" date at the top of this page reflects the most recent revision.
10. Contact us
For privacy questions, data requests, or concerns, contact:
Klaxo
Email: contact@klaxo.online
Website: klaxo.online