Privacy Policy

The controller responsible for processing is [Company name], [Address], reachable at privacy@klykto.com.

Account data: email, display name, password (stored only as an Argon2 hash), language and timezone.

Usage data: when a smart link is opened we record a click event. IP addresses are never stored in clear text — they are truncated and salted-hashed before storage.

Billing data: if you buy a paid plan, the name and address required on the invoice are stored.

Performance of a contract (Art. 6(1)(b) GDPR) to provide the service, legitimate interest (Art. 6(1)(f)) for security and abuse prevention, and consent (Art. 6(1)(a)) for optional cookies and affiliate tracking.

Strictly necessary cookies keep you signed in. Optional affiliate tracking (Partnero) loads only after you accept it in the cookie banner. You can decline without losing any functionality, and your choice is logged.

We rely on service providers for hosting (Railway), email delivery and payment processing. Each processes data only on our behalf under a data-processing agreement.

Account data is kept while your account exists. Click events are deleted when you delete your account. Invoices are retained for the statutory period.

You can access, export (Settings → data export) and delete (Settings → delete account) your data. You may also object, request rectification, withdraw consent, and lodge a complaint with a supervisory authority.

Questions about privacy: privacy@klykto.com.