Kloy.ai collects business contact details only when you provide them. Limited network and session records protect the website. The public application does not sell personal information or use it for cross-context behavioral advertising.
Scope, operator, and contact
This notice applies to the public Kloy.ai website, its Contact Us form, and related correspondence. Kloy.ai is the website-facing operator and contact point for this processing. A customer engagement may identify a formal contracting entity and separate controller or processor responsibilities in its signed documents.
Privacy questions and verified rights requests may be sent to official@kloy.ai. Do not include sensitive vulnerability material in the request. This notice does not cover websites or services controlled by third parties.
Notice at collection
When you submit the contact form, Kloy.ai collects identifiers and professional information: full name, business email, company, job position, country, the high-level question you enter, submission time, and the versions of the notices you acknowledged. These details are used to review, respond to, secure, and document the inquiry.
Kloy.ai does not sell or share these categories for cross-context behavioral advertising. The form is not consent to marketing, and it does not request sensitive personal information as that term is defined by applicable privacy laws.
Information the website processes
Name, business email, company, job position, country, high-level question, submission time, and notice versions.
A random session identifier, CSRF state, expiry metadata, and a short rate-limit record derived from the network address. The original IP address is not written into the inquiry JSON file.
Web-server and security logs may contain IP address, request time, path, status, user-agent, and referrer data supplied with a request.
Information you choose to provide in email, meetings, or business discussions after the initial inquiry.
Kloy.ai does not intentionally collect payment-card data, government identifiers, passwords, precise geolocation, biometric data, health data, or special-category personal data through this public form. Do not submit those categories.
Information comes directly from you when you submit or correspond, automatically from the browser and network systems that handle a request, and, during later business discussions, from authorized colleagues or representatives who include you in the exchange. Kloy.ai does not purchase contact-form profiles from data brokers.
Purposes and processing grounds
- Review and respond to the business inquiry and assess whether a properly scoped discussion is appropriate.
- Operate the requested contact workflow and preserve the submitter's selected country and form state when validation fails.
- Prevent forged requests, excessive submissions, abuse, fraud, operational faults, and security threats.
- Maintain necessary business records, establish or defend legal claims, and comply with applicable obligations.
Depending on applicable law and the relationship, processing may be necessary to take steps you request before a possible contract, to perform a contract, to comply with law, or for legitimate interests in responding to business inquiries, preventing abuse, maintaining proportionate records, and securing the service. Those interests are assessed against the nature of the information and the submitter's rights. Where consent is legally required for a separate activity, Kloy.ai will request it separately. Reading this notice is not treated as blanket consent.
The public application does not use contact-form data for solely automated decisions that produce legal or similarly significant effects.
What is optional and what the form requires
You may read ordinary public pages without providing the contact fields. Using the Contact Us form is voluntary, but every labelled field and the required acknowledgements are necessary for the application to validate, protect, and route that inquiry. If required information is omitted, malformed, outside the permitted length, or cannot be processed safely, the application will not publish an inquiry record.
Do not use the free-text field for sensitive personal data or attack-enabling technical material. You may instead send only a high-level request for an approved channel. The public form is not used to subscribe you to marketing, and any future direct-marketing activity that requires consent or an opt-out will use a separate, clear choice.
Disclosure, service providers, and transfers
Information is limited to people who need it to review the inquiry, operate or secure infrastructure, provide communications or professional services, comply with law, or support a legitimate corporate transaction. Hosting, network, security, communications, and professional-service providers may process limited information on Kloy.ai's behalf under appropriate terms.
Kloy.ai may disclose information when reasonably necessary to comply with a lawful request, protect rights or safety, investigate abuse, or establish and defend legal claims. It does not sell personal information and does not share it for cross-context behavioral advertising.
Infrastructure or recipients may be located outside your country. Where cross-border transfer safeguards are required, Kloy.ai will use an applicable legal mechanism and supplementary protections appropriate to the transfer. Contact Kloy.ai for information relevant to your request.
Retention and security
Server logs and later correspondence follow operational, security, legal, and dispute-retention schedules rather than the inquiry-file schedule. Retention is limited using the amount, nature, sensitivity, purpose, legal requirements, and risk of harm as criteria. Records may be preserved longer when required for an active relationship, legal hold, fraud review, security incident, or exercise or defense of claims.
The application uses access restrictions, protected transport, request validation, anti-forgery controls, restricted server-side storage, and data minimization. No system can be guaranteed completely secure. Sensitive vulnerability material must use a separately approved channel. If a personal-data incident requires notice under applicable law, Kloy.ai will follow the legally required regulator and individual notification process for the affected processing.
Your choices and privacy rights
Depending on applicable law, you may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent, and may complain to a competent privacy or data-protection authority. California residents may also request information about categories, sources, purposes, and disclosures and may have rights to correct or delete data and to receive equal service when exercising a right. Because Kloy.ai does not sell or share data for cross-context behavioral advertising, there is no such sale or sharing to opt out of in the public application.
Send a request to official@kloy.ai. Include enough non-sensitive information to locate the interaction. Kloy.ai may request proportionate verification, may retain a minimal record of the request, and may apply lawful exceptions. An authorized agent may be asked to show authority to act.
Kloy.ai will respond within the period required by the law applicable to the verified request. If that law permits an extension, fee, refusal, or partial response, Kloy.ai will provide the required explanation and available review or complaint route. You may complain to the competent authority where you live, work, or believe an infringement occurred, subject to that authority's jurisdiction.
Cookies, children, changes, and conflicts
The Cookies Policy describes the application's strictly necessary session cookie. Public pages are directed to business and security professionals, not children, and Kloy.ai does not knowingly solicit children's personal information through the form.
Kloy.ai may update this notice when processing, technology, service providers, or legal requirements change. The effective date and version identify the current notice. Where required, notice will be provided before using previously collected information for a materially different purpose. If a signed agreement contains a more specific privacy term for customer data, that term governs the covered processing to the extent of a conflict.