Privacy Policy

1. Anonymity of the service

KLAIVER does not require registration and does not create user accounts. We do not ask for an email address, and we do not store your browser's IP address or any equivalent identifier. The only internal reference for your session is a random technical identifier (UUID v4) generated at the time of payment. That identifier is not linked to your billing data or to any other personal data within the session system.

2. Separation between billing and the session

Payment is processed through Stripe, which handles the minimum billing data required to issue an invoice (name, address, tax ID where applicable). That data stays exclusively within Stripe's billing system and the operator's, and is kept for as long as applicable tax law requires (typically six years in Spain).

KLAIVER's session system never receives that billing data. The only link between the payment and the session lives in the metadata of the Stripe Checkout Session, and it cannot be reconstructed from within the application.

3. Data we handle during the session

So that KLAIVER can work with you, the initial form collects: the name you'd like to be called, your age, family situation, geographic region, professional situation, and the decision or dilemma you want to work on. During the session, your answers to the initial questionnaire and the turns of the conversation are also recorded.

This information is used only during the active session and to generate the final report. It is never cross-referenced with any other system, never used to train models, and never shared with third parties — except for the external language-model provider engaged by the operator to power the service, which processes each message under a confidentiality agreement and does not retain the content after processing.

When you finish the session, you can optionally request that we email you the report. If you do, your address travels to the operator's contracted email provider together with the attached report and is not stored on our servers: we only keep an anonymous technical marker to prevent the same session from being re-sent multiple times. If you leave that field blank, we don't collect any contact data.

If you run into a persistent problem during the session (KLAIVER errors, dropped connections, etc.) you can optionally open a support ticket from within the interface itself. Doing so sends the operator an email containing your session's technical identifier, the phase you were in, and the message you write, with your email set as the reply address. That address is not stored on our servers: it only travels as the Reply-To field of the email sent to the operator.

4. Retention and deletion

When the session is closed — manually, or automatically ten minutes after the report is downloaded — the session data moves to a closed state and is deleted during the next nightly cleanup window (between 3:00 and 5:00, server local time). Deletion is permanent: no recoverable copy exists.

If you start a session and don't complete it, your data is automatically deleted 48 hours after creation. During that window, the link containing the technical identifier lets you resume the session from any device — useful if your connection drops or you close the tab by mistake. Once the 48 hours have passed, the link stops working and the data is deleted. The operator may adjust this window within a 12-to-168-hour range without affecting the anonymity model.

5. Cookies

KLAIVER does not use advertising or analytics cookies, nor any third-party tracking cookies. The app uses two strictly technical cookies: one holds your session's technical identifier and is deleted when you close the browser tab; the other remembers the language you've chosen (Spanish or English) and is kept for up to a year so you don't have to select it again on every visit. Neither is used for advertising, analytics, or tracking, which is why no consent banner is shown.

6. Data controller and legal basis

The data controller is Total Profit Journey, S.L., a company incorporated in Spain (Spanish tax ID / NIF: B19344555). The legal basis for processing is the performance of the service you contracted (Art. 6(1)(b) of the General Data Protection Regulation, GDPR). Billing data is additionally processed to comply with a legal obligation (Art. 6(1)(c) GDPR) for invoicing purposes.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing, and portability over your billing data by contacting the operator through the channels listed below. Because of the session system's anonymous design, the data generated during the session itself cannot be linked back to your identity once it has been deleted — so in practice, your rights over that data are exercised by closing the session (or by letting the 48-hour window elapse if it's abandoned).

You can also lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es), the supervisory authority for the data controller, if you believe the processing does not comply with the regulation. If you live in another EU/EEA country, the GDPR also lets you lodge a complaint with the data protection authority of your own country of residence.

8. Contact

For any question about this policy or about how your data is processed, write to info@klaiver.app.