Privacy & cookies
How Klef collects, uses, and protects your information. Last updated September 2026.
Scope
This policy explains how Klef (“Klef”, “we”, “us”) handles personal information when you visit our website or use the Klef service. It does not cover the third-party systems you connect to Klef, which are governed by their own policies.
Our role
For account and website information, we are the controller. For worker data and other information your organization brings into Klef, we act as a processor (or service provider) on your organization's behalf and use it only to provide the service under our agreement with them. Workers should direct requests about their data to their employer.
Information we collect
Account information: your name, email address, workspace, role, and billing contact. Worker data: names, work and personal email addresses and phone numbers, job title, department, manager, work location, employment dates and status, custom fields, and the accounts each worker holds in connected systems. Connection credentials: the API keys and authorization tokens you provide to connect your systems. Technical information: the IP address and browser user agent recorded with each action in your workspace's audit log and in our server logs, and usage data described under Cookies and analytics. We do not collect Social Security numbers, dates of birth, or similar government identifiers.
How we use information
We use information to provide the service, including creating, updating, and deactivating accounts according to your policies; to secure and audit activity; to bill you; to send service and account emails; to provide support; and to improve Klef. Where the GDPR applies, we rely on performance of our contract, our legitimate interests in operating and securing the service, and your consent for analytics cookies. We do not sell or share personal information for targeted advertising.
Connected systems
Klef reads from and writes to the systems you connect only as needed to carry out your policies. Credentials are encrypted at rest, and deleting a connection deletes its stored credentials. You can also revoke Klef's access from the connected system at any time. Each connector's documentation lists the fields and permissions it uses.
AI assistant
When you use the Klef assistant, your messages and the workspace information it needs to respond are sent to Anthropic to generate its responses. An invoice you choose to upload on the Licenses page is sent to Anthropic in the same way to read its line items. Anthropic does not use this information to train its models.
Cookies and analytics
We use cookies that are necessary to keep you signed in and to remember your cookie choice. We use Google Analytics to understand how the site and product are used. Where consent is required, analytics cookies are set only after you accept them, and you can change your choice at any time from the Cookie settings link in the footer.
Service providers
We share information with service providers that process it on our behalf and only to provide their services: Stripe (payments), Resend (email delivery), Anthropic (AI assistant), Google (analytics), and Cloudflare (network delivery and encrypted backup storage). We may also disclose information when required by law, to protect our rights or users, or as part of a merger or acquisition.
Retention
We keep account and workspace information for as long as your workspace is active. When a workspace is deleted, it is locked and permanently purged after 14 days, and backups containing it expire within 35 days. Audit log entries are kept for the retention period your workspace sets. Server logs are kept for 30 days.
Security
We encrypt information in transit and at rest. Connection credentials are additionally encrypted with keys held in a dedicated key management service, and access to production systems is restricted to authorized personnel.
International transfers
We host Klef in the United States. If you use Klef from outside the United States, your information is transferred to and processed there, using safeguards such as the Standard Contractual Clauses where required.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal information, to object to or restrict its processing, to withdraw consent, and to complain to your data protection authority. We will not discriminate against you for exercising these rights. To make a request, email support@klef.ai.
Children
Klef is a business service and is not directed to children under 16, and we do not knowingly collect personal information from them. Worker data your organization brings into Klef may include minors employed by your organization; we process it on your behalf as described in Our role.
Changes
We may update this policy. We will post the new version here with its date, and notify you of material changes by email or in the product.
Contact
Questions about this policy can be sent to support@klef.ai or through our contact page.