Privacy Policy

Overview

Klinically ("we", "us", "our") is operated by Craftlabs Solutions, a company registered in India. We operate the Klinically platform at klinically.net and related services. This policy describes how we collect, use, store, and disclose personal information when you use our website and services.

Data we collect

We collect:

• Account information: name, email address, business name, and billing details.
• Business profile data: trading name, address, service area, business type, Google Business Profile location ID, social media handles, and any other details you enter to configure content generation.
• Usage data: content generated, posts published, features accessed, and timestamps of platform activity.
• Technical data: IP address, browser type, device information, and session identifiers.
• Review page analytics: anonymous QR scan counts and click-through events. No personally identifiable information is captured from users who scan a QR code.

How we use your data

We use your data to:

• Provide and operate the Klinically platform and all its features.
• Generate, schedule, and publish AI-assisted content on your behalf.
• Process subscription payments via Lemon Squeezy.
• Send transactional emails (e.g. receipts, onboarding, critical alerts).
• Send product-related communications (e.g. new features, usage summaries) — you may opt out of marketing emails at any time.
• Improve and develop the platform, including training internal ranking and recommendation models on aggregated, de-identified data.
• Enforce our Terms of Service and comply with legal obligations.

We do not use your data to train general-purpose AI models for third parties.

Legal basis

We collect and process personal information as necessary to provide the services you have requested. We process your data based on contract performance, your consent where required by applicable law, and our legitimate business interests (e.g. security, platform improvement, and fraud prevention).

Depending on your location, you may have rights to access, correct, delete, or port your data. We comply with applicable privacy laws in all jurisdictions we operate in.

Sharing and disclosure

We may share data with:

• Payment processor — payment processing, subscription billing, and merchant-of-record services.
• Supabase / AWS — database hosting and storage infrastructure.
• Vercel — application hosting and edge delivery.
• Google / OpenAI / fal.ai — AI inference for content generation; only the minimum necessary data is sent (business profile context).
• Resend — transactional and marketing email delivery.
• Google — Google Business Profile API for publishing and rank tracking.
• Meta — Meta Graph API for social publishing.

We do not sell your personal information to any third party.

We may disclose information if required by law, a court order, or a government authority, or to protect the rights, property, or safety of Klinically, our users, or the public.

Retention

We retain account and usage data for as long as your subscription is active and for 90 days after cancellation to support billing disputes and account recovery. After that period, we delete or irreversibly anonymise personal data.

Anonymous analytics data (QR tap counts, aggregate content performance) may be retained indefinitely in aggregated form.

Security

We protect your data with:

• TLS encryption for all data in transit.
• Row-level access controls in the database (each subscriber can only access their own data).
• Service-role API keys never exposed to the browser.
• Secure, httpOnly session cookies.

No system is completely secure. We encourage you to use a strong, unique password and to report any suspected security issue to support@mail.klinically.net immediately.

Your rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your data (subject to legal retention obligations).
• Object to or restrict certain processing of your data.
• Lodge a complaint with the relevant data protection authority in your jurisdiction.

To exercise any of these rights, email us at support@mail.klinically.net. We will respond within 30 days.

Cookies and tracking

We use an essential session cookie (klinically_session) to authenticate logged-in users. This cookie is httpOnly, Secure, and expires with the browser session or after 7 days.

We do not currently use third-party advertising cookies or cross-site tracking pixels. If we introduce optional analytics, we will update this policy and provide a mechanism to opt out.

Changes to this policy

We may update this policy from time to time. We will post the updated version on this page with a revised "Last updated" date. For material changes, we will notify you by email or in-app notice at least 14 days before the change takes effect. Continued use of the platform after that date constitutes acceptance of the updated policy.