This Privacy Policy explains how XRG Consulting Private Limited (“XRG”, “we”, “us” or “our”), the company that owns and operates the KLYKX product, collects, uses, discloses and safeguards personal information when you visit klykx.ai, use the platform at app.klykx.ai, or otherwise interact with our services (the “Service”). It should be read together with our Terms & Conditions.
1. Our role
For personal information relating to your KLYKX account and your use of the Service, we act as the data controller. For the data you put inside the applications you build on KLYKX (“Customer Data”), we generally act as a data processor on your behalf—you determine what is collected and why, and you are responsible for having a lawful basis and appropriate notices for your own end users.
2. Information we collect
Information you provide
- Account & profile: name, email address, company/organisation, phone number, password (stored only as a secure hash), and profile image.
- Communications: messages you send us, support requests, and contact-form or demo-request submissions.
- Customer Data: the data models, records, files, documents and configurations you create or upload when building and running applications.
Information collected automatically
- Usage & device data: pages viewed, features used, actions taken, IP address, browser and device type, and timestamps.
- Cookies & session tokens: including an authentication session cookie set on the
.klykx.aidomain to keep you signed in across our website and platform (see Cookies).
3. Social sign-in data
If you choose to sign in or register using a third-party identity provider, we receive a limited set of profile information from that provider in order to create and secure your account—typically your name, email address and a unique account identifier. We do not receive your password for those services. Supported providers include:
- Google, Microsoft, Apple, LinkedIn and GitHub.
When you use Sign in with Apple, you may choose Apple’s “Hide My Email” feature; in that case we receive a private relay email address rather than your personal one. Your use of each provider is also subject to that provider’s own privacy policy. We use this information only to authenticate you and operate your account.
4. How we use information
- to create, authenticate and secure your account, and to provide and operate the Service;
- to generate, customise and run the applications you build (including AI-assisted features);
- to respond to your requests and provide customer support;
- to send service, security and transactional communications (for example verification and password-reset emails);
- to monitor, maintain, troubleshoot and improve the Service and its performance and security;
- to detect, prevent and address fraud, abuse and violations of our Terms; and
- to comply with legal obligations and enforce our agreements.
We do not sell your personal information.
5. Legal bases
Where applicable law requires a legal basis, we rely on: performance of our contract with you (to provide the Service); your consent (for example certain communications, or optional features); our legitimate interests (to secure and improve the Service and prevent abuse); and compliance with legal obligations.
6. Cookies & similar technologies
We use cookies and similar technologies to operate and secure the Service, including:
- Essential / authentication — a session cookie (scoped to
.klykx.ai) that keeps you signed in and enables single sign-on between our website and platform. The Service cannot function without these. - Security — bot-protection and abuse-prevention (for example Cloudflare Turnstile on our sign-in forms).
- Analytics — to understand aggregate usage and improve the Service.
You can control non-essential cookies through your browser settings; disabling essential cookies may prevent you from signing in.
7. How we share information
We share personal information only as needed to run the Service and as described here: with service providers acting on our behalf (see below); with identity and authentication providers you choose to use; to comply with law, legal process or lawful requests; to protect the rights, safety and security of KLYKX, our users or the public; and in connection with a merger, acquisition or sale of assets (with continued protection of your information).
8. Service providers
We engage trusted third parties to help us deliver the Service. Categories include:
| Purpose | Examples |
|---|---|
| Cloud hosting & storage | Amazon Web Services (AWS) |
| Authentication / social sign-in | Google, Microsoft, Apple, LinkedIn, GitHub |
| Email delivery | Google (Gmail / Workspace) |
| Bot protection | Cloudflare (Turnstile) |
| AI model providers | Google (Gemini), Anthropic (Claude) |
| Maps & geocoding | Google Maps / OpenStreetMap |
These providers are permitted to use your information only to perform services for us and are bound by appropriate confidentiality and data-protection obligations.
9. AI processing
Certain features send prompts and related context to AI model providers to generate application configurations, content and suggestions. We do not intentionally send more information than needed for the requested feature. AI output may be inaccurate and should be reviewed before use. You should avoid entering sensitive personal information into AI-assisted prompts unless necessary for your intended purpose.
10. Data retention
We retain personal information for as long as your account is active and as needed to provide the Service, then for a reasonable period afterwards to comply with legal obligations, resolve disputes and enforce our agreements. Customer Data is retained per your configuration and may be deleted after a reasonable period following account termination. You may request deletion as described below.
11. Security
We use technical and organisational measures designed to protect personal information, including encryption in transit, hashed passwords, access controls and restricted administrative access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please help protect your account by using a strong, unique password and safeguarding your credentials.
12. International transfers
We and our service providers may process and store information in countries other than yours, including where our cloud infrastructure and providers operate. Where required, we take appropriate steps to ensure such transfers are subject to adequate safeguards.
13. Your rights
Subject to applicable law, you may have the right to access, correct, update or delete your personal information, to withdraw consent, to object to or restrict certain processing, and to data portability. To exercise these rights, contact us using the details below; we may need to verify your identity. If your personal information sits within an application operated by another KLYKX customer, please contact that customer (the controller of that data), and we will assist them as their processor.
14. Children
The Service is not directed to children and is intended for use by individuals aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will take appropriate steps to delete it.
15. Changes to this Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy.
16. Contact & grievances
For questions, requests or complaints about this Policy or your personal information, contact our privacy team:
- Entity: XRG Consulting Private Limited (owner of the KLYKX product)
- Email: Info@klykx.ai
- Address: 2nd Floor, Plot 302, No.705, Road No. 36, Jubilee Hills, Hyderabad, Telangana 500033
If you are in India, you may contact our Grievance Officer at the email above regarding the processing of your personal data under the Digital Personal Data Protection Act, 2023. We will acknowledge and address grievances within the timelines required by applicable law.