Privacy Policy

Last updated: 14th January 2026

1. Data Protection Declaration

This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use Our Website and/or Our Service and tells You about Your privacy rights and how the law protects You. We only use Your Personal data on the basis of legal requirements set by the GDPR and UK GDPR to provide and improve Our Products.

By using Our Products, You agree to the collection and use of information in accordance with this Privacy Policy.

2. Interpretation and Definitions

2.1. Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

2.2. Definitions

For the purposes of this Privacy Policy:

  • "Account" means a unique account created for You to access our Service or parts of our Service.
  • "Company" (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) refers to Klaris AI Ltd, Techspace 32 - 38 Leman Street, London, E1 8EW, UK
  • "Country" refers to the United Kingdom.
  • "Cookies" are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.
  • "Tools" means cookies and similar tracking technologies.
  • "Data Controller", for the purposes of the GDPR (General Data Protection Regulation), refers to the Company as the legal person which alone or jointly with others determines the purposes and means of the processing of Personal Data.
  • "Device" means any device that can access the Service such as a computer, a cell phone or a digital tablet.
  • "Personal Data" is any information that relates to an identified or identifiable individual. For the purposes of GDPR, Personal Data means any information relating to You such as a name, an identification number, location data, online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity.
  • "Services" refers to Our software products, including Klaris AI Reviewer and future modules. The services also include any potential concierge services.
  • "Service Provider" means any natural or legal person who processes the data on behalf of the Company. For the purpose of the GDPR, Service Providers are considered Data Processors.
  • "Products" means Our Website and Our Services together.
  • "Usage Data" refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
  • "Website" refers to Our website, accessible from https://klaris.ai.
  • "You" means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable. Under GDPR (General Data Protection Regulation), You can be referred to as the Data Subject or as the User as you are the individual using the Service.

3. Data Processing

3.1. Processing of Your Personal Data when visiting Our Website

3.1.1. Type and extent of data processing

You can visit Our Website without providing any personal information. When you access Our Website, only certain access data are processed automatically generated during the use of the Website or by the Website infrastructure. In particular, the following data are processed in this context:

  • Your Device's Internet Protocol address (i.e. IP address)
  • Type/version of the internet browser used
  • Website pages accessed and time spent on the pages
  • Time and date of Your visit

This information does not allow Us to identify You personally; however, IP addresses are considered Personal Data within the meaning of the GDPR.

3.1.1.1. Processing of Your Personal Data when contacting Us via Our contact form

When contacting Us via Our contact form on Our website, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:

  • First name and last name
  • Email address

The data processing involved is necessary to issue a response in respect of Your interest and request in Our Services, as We would otherwise not be able to contact You. Details whose indication is mandatory are marked with a *-symbol; certain additional information may be provided voluntarily.

3.1.2. Legal basis and purpose

The purpose of this Processing of Your Personal Data is to establish and maintain technical security with regards to our Website, monitor and improve the quality of Our Website. We may use Your Personal Data specified for purposes such as data analysis, identifying usage trends, and contacting You.

The processing is based on Our legitimate interest (GDPR, Art 6 para 1 lit f) in achieving the mentioned purposes.

3.2. Processing of Your Personal Data when using Our Service

3.2.1. Type and extent of data processing

Every time You use Our Services, We collect the access data that Your browser automatically transmits to enable You the access to Our Services as described in section 3.1.1.

Additionally, We process the following personally identifiable information necessary to give You access to Our Services:

  • First name and last name
  • Email address
  • Associated Organisation
  • Optionally, other information necessary to identify you within Your Organisation

3.2.2. Legal basis and purpose

The processing of Your Personal Data is necessary to enable the access to Our Services, in particular visits to Our web application, to ensure the long-term functionality and security of Our systems, and to generally maintain Our Services in terms of administration. Your Personal Data is also stored in internal log files for the purposes previously described, in order to find the cause and take action against it in the event of repeated or criminal access attempts that endanger the stability and security of Our Services.

The legal basis for the Processing of Your Personal Data is GDPR, Art 6 para 1 lit b: Our Services are accessed for the purpose of initiating or executing a contract.

4. Cookies

We use Cookies and similar tracking technologies to track the activity on Our Service and store certain information. Tracking technologies used are beacons, tags, and scripts to collect and track information and to improve and analyze Our Service. The technologies We use may include:

  • Cookies or Browser Cookies. A cookie is a small file placed on Your Device. You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if You do not accept Cookies, You may not be able to use some parts of our Service.
  • Web Beacons. Certain sections of our Service and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics.

Cookies can be "Persistent" or "Session" Cookies. Persistent Cookies remain on Your personal computer or mobile device when You go offline, while Session Cookies are deleted as soon as You close Your web browser.

We use three types of Cookies, all encrypted and exclusively processed by Us:

  1. Session Cookies: for login authentication. These cookies are essential to provide You with services available through Our web application and/or Our website.
  2. Preference Cookies: to store temporary user settings, such as filters or list sorting.
  3. Toast Cookies: to display important notifications directly in the website or web application.

5. Tracking Technologies

Details on the technologies enumerated in this section, as well as a full list of our sub-processors can be found in Klaris Trust Centre.

5.1. Marketing and Sales Tools

We use the following Tools and platforms to carry out marketing and sales activities. They help to optimize Our communication with prospects and customers, support Our sales efforts, and analyse marketing measures:

  • Tally, for processing Our contact form accessible from Our Website
  • Google Workspace (Google Suite), for processing emails, calendar entries, and documents stored in Google Drive

By using these tools, We ensure that Your Personal Data is processed in compliance with applicable data protection laws, and appropriate technical and organisational measures are taken to protect Your Personal Data.

The legal basis for Marketing and Sales Tools is Your consent under Art. 6 para 1 lit a GDPR unless otherwise specified. For further instructions on how to exercise your rights under the GDPR see "Your Rights under the GDPR" section.

5.2. Analytics Tools

To improve Our Website and Services, We use the following Tools to statistically collect and analyse general usage behaviour based on access data:

  • Google Analytics (Provided by Google) for processing aggregated usage statistics and analytics patterns

The legal basis for Analytics Tools is Your consent under Art. 6 para 1 lit a GDPR unless otherwise specified. For further instructions on how to exercise your rights under the GDPR see "Your Rights under the GDPR" in section 9.

6. Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of Our Service, or We are legally obligated to retain this data for longer time periods.

7. Transfer of Your Personal Data

We will only transfer Your Personal Data collected by Us or make them available to third-parties if:

  • You have given Your express consent to do so in accordance with Art 6 para 1 lit a GDPR
  • This is legally permissible and, in accordance with Art 6 para 1 lit b GDPR, is necessary for the processing of contractual relationships with You
  • We are legally obliged to transfer Your Personal Data in accordance with Art 6 para 1 lit c GDPR
  • The disclosure is necessary for business transactions
  • The disclosure is necessary to assert, exercise or defend legal claims in accordance with Art 6 para 1 lit f GDPR

7.1. Transfer of Your Personal Data outside of EU or UK

Your information, including Personal Data, is processed by Us at the Company's operating offices and by Our Service Providers under Our strict supervision. The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organisation or a country outside the EU or UK jurisdiction, unless there are adequate controls in place including the strict security and privacy of Your data and other personal information.

8. Security of Your Personal Data

The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

9. Your Rights under the GDPR

You have the right under this Privacy Policy, and by law if You are within the EU, to:

  • Request access to Your Personal Data. The right to access, update or delete the information We have on You. Whenever made possible, you can access, update or request deletion of Your Personal Data directly within Your account settings section. If you are unable to perform these actions yourself, please contact Us to assist You. This also enables You to receive a copy of the Personal Data We hold about You.
  • Request correction of the Personal Data that We hold about You. You have the right to have any incomplete or inaccurate information We hold about You corrected.
  • Object to processing of Your Personal Data. This right exists where We are relying on a legitimate interest as the legal basis for Our processing and there is something about Your particular situation, which makes You want to object to our processing of Your Personal Data on this ground. You also have the right to object where We are processing Your Personal Data for direct marketing purposes.
  • Request erasure of Your Personal Data. You have the right to ask Us to delete or remove Personal Data when there is no good reason for Us to continue processing it.
  • Request the transfer of Your Personal Data. We will provide to You, or to a third-party You have chosen, Your Personal Data in a structured, commonly used, machine-readable format. Please note that this right only applies to automated information which You initially provided consent for Us to use or where We used the information to perform a contract with You.
  • Withdraw Your consent. You have the right to withdraw Your consent on using your Personal Data. If You withdraw Your consent, We may not be able to provide You with access to certain specific functionalities of the Service.

10. Children's Privacy

Our Products do not address anyone under the age of 18. We do not knowingly collect personally identifiable information from anyone under the age of 18.

If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 18 without verification of parental consent, We take steps to remove that information from Our servers.

If We need to rely on consent as a legal basis for processing Your information and Your country requires consent from a parent, We may require Your parent's consent before We collect and use that information.

11. Links to Other Websites

Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

12. Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page. We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

13. Data Controller and Contact Details

For the purposes of the GDPR (Art 4 item 7), the Company is the Data Controller:

Klaris AI Ltd

Techspace 32 - 38 Leman Street
London
E1 8EW
United Kingdom

If you have any questions about this Privacy Policy, You can contact us:

We aim to respond to verified data-subject requests within thirty (30) days, or longer where permitted under applicable law, in which case we will notify you of the delay and reason. If you believe your inquiry has not been satisfactorily resolved, you may lodge a complaint with your local supervisory authority.