This policy explains how Klasyo collects, uses, shares, and protects your personal data.
1Data Controller
2What Data We Collect
- Registration: email (required); name (optional); registration date; user role (buyer/creator).
- Creator Profile: photo, bio, description; social links; KYC documents (if needed).
- Transactions & Orders: purchase/sales history; MonCash payment proof (ID, amount, date); order status.
- Usage: pages/courses viewed, progress, ratings & comments; limited technical data for security (browser, device; IP may be logged temporarily in security logs).
3Legal Basis
- Contract Performance (create account, buy/sell, access, support).
- Consent (newsletter, marketing coms, non-essential cookies).
- Legitimate Interest (security, anti-fraud, anonymous stats, improvement).
- Legal Obligation (accounting, KYC for creators).
4How We Use Data
- Service: account management, purchase & access, content moderation.
- Communication: email/WhatsApp confirmations, receipts, support, updates.
- Security: identity verification, fraud/abuse detection, security monitoring, legal compliance.
- Improvement: performance analysis, new features, anonymous stats.
MonCash Payment: We do not store payment methods. We receive Transaction ID, amount, status to confirm order. During beta, verification may be manual with ID.
5Security & Storage
- TLS/HTTPS for all connections; limited access rights ("need to know").
- Data stored securely in cloud-based databases and storage units; site on Vercel; security monitoring measures.
- International transfer possible (US/EU) depending on providers; we apply contractual & technical measures to protect data.
6Technical Sub-processors (Limited Sharing)
Database/Auth, Cloud Storage, Vercel (hosting), Umami (anonymous audience), email/msg services for notifications.
We sign confidentiality/security agreements; they cannot use data for their own interests.
7Data Sharing
We do not sell your personal data. We share only as necessary for service or required by law.
You have rights: access, correct, delete, limit, object, portability, and withdraw consent.
8Your Rights & How to Exercise
Email admin@klasyo.com (we may ask for ID proof). We reply within 30 days. You can initiate via WhatsApp, but we finalize via secure email.
9Cookies & Tracking
- Essential: for session & security.
- Analytics (Umami): anonymous, not used for ads, respects Do Not Track.
- No ad cookies or cross-site tracking.
- You will find a preferences panel to manage non-essential cookies.
10Data Retention
- Active Account: as long as account is active.
- After Deletion: 12 months (minimum security logs).
- Purchase/Sales History: 7 years (accounting).
- Creator KYC: 5 years after account closure.
- Technical & Security Logs: 12 months.
- Support Tickets: 24 months.
- Anonymous Collective Stats: unlimited (100% anonymous).
11Security Incidents
If an incident affects your data, we will notify you rapidly, with protection recommendations and corrective measures.
12Changes to Policy
We may update this policy; current version date is at top of page; for major changes we send important notification.
13Privacy Contact
Have questions about this page?
If you need more clarification, contact Klasyo or visit the Support Center.