Privacy Policy

1. What we collect

• Account details — your name, email, and workspace settings.
• Workspace content — the business data you enter: clients, invoices and payments, expenses and receipts, files, and team records.
• Usage data — basic, mostly aggregated events about how the app is used, to keep it reliable and improve it.
• Payment data — handled by our Merchant of Record (see below). We receive your plan and billing status, never your full card number.

2. How we use it

To provide and secure the service, process your subscription, respond to support requests, understand and improve how Klerky is used, and meet legal obligations. We do not sell your personal data, and we don’t use your workspace content for advertising.

3. Receipt scanning (AI)

When you use receipt scanning, the receipt image is sent to a third-party AI provider (Anthropic) solely to extract fields such as the amount, date, and vendor. It is used only to provide that feature and is not used to train models. Automated extraction can be imperfect — always check the figures before relying on them.

4. Who we share it with

We share data only with service providers that help us run Klerky, under contracts that require them to protect it:

• Supabase — Database, authentication, and file storage hosting
• Vercel — Application hosting and content delivery
• Creem — Payment processing and Merchant of Record (billing, receipts, tax)
• Resend — Transactional email (sign-up, invites, account notices)
• PostHog — Privacy-conscious product analytics
• Anthropic — AI extraction of fields from receipts you upload

We may also disclose data if required by law, or as part of a merger or acquisition (with notice).

5. International transfers

Klerky and its providers may process data in countries other than yours. Where required, we rely on appropriate safeguards for those transfers.

6. Retention

We keep your data while your account is active. After you close your account, we delete or anonymize your workspace content within a reasonable period, except where we must keep records (for example, billing records) to meet legal obligations.

7. Security

Data is encrypted in transit, access is restricted, and each workspace’s data is isolated at the database level (row-level security) so one workspace can’t read another’s. No system is perfectly secure, but we take protecting your data seriously.

8. Your rights

You can access, correct, export, or delete your data — most of it directly in the app, or by emailing [email protected]. Depending on where you live, you may have additional rights under laws such as the GDPR.

9. Cookies

We use essential cookies to keep you signed in, and limited analytics to understand product usage. We don’t use advertising or cross-site tracking cookies.

10. Children

Klerky is for business use and isn’t intended for anyone under 18.

11. Changes and contact

We’ll update this policy as the product evolves and revise the date above. For any privacy question, contact [email protected]. See also our Terms of Service.