Klynt AG - Privacy Policy

1. Introduction

This Privacy Policy explains how Klynt AG (Klynt SA) ("we", "our", "us") collects, uses, stores, and protects your personal data when you use our website https://klynt.ai.

We are committed to safeguarding your privacy and ensuring compliance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

2. Data We Collect

We may collect the following types of personal data:

• Identity and Contact Data - name, email address, phone number, company name, and similar identifiers.
• Technical Data - IP address, browser type, operating system, and browsing behavior.
• Usage Data - pages visited, time spent on the site, interactions, and preferences.
• Communication Data - information you provide when contacting us via email or through our forms.

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your enquiries or requests;
• To improve our website's functionality, performance, and security;
• To comply with our legal and regulatory obligations;
• To maintain business relationships with clients, partners, and suppliers;
• To perform analytics that help us enhance user experience.

4. Legal Basis for Processing

Our processing of your personal data is based on:

• Your consent (e.g., when you contact us);
• Our legitimate interests (e.g., website maintenance, analytics, and security);
• Legal obligations (e.g., compliance with Swiss or EU regulations).

5. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described above, or as required by law (typically up to 10 years for contractual or tax-related data).

6. Data Sharing

We may share your data with:

• Service providers assisting us with website hosting, analytics, or communications;
• Legal, accounting, or tax advisors when necessary;
• Authorities or regulators when required by law.

We do not sell or rent personal data to any third party.

7. Third-Party Cloud Storage Integrations (Google Drive, Microsoft OneDrive / SharePoint, Dropbox)

Klynt lets you connect your own cloud storage accounts to import deal documents into your private workspace. When you authorize such a connection via OAuth, we access: (i) file and folder names and metadata, so you can browse and select the items to import, and (ii) the contents of the files you explicitly select, which are copied to your workspace. Access is read-only: Klynt never creates, modifies, shares, or deletes content in your cloud storage account.

We use this data solely to provide the document-import and synchronization features you request. OAuth refresh tokens are stored encrypted (AES-256) and are used only to re-synchronize the folders you selected. Imported files are stored in your customer-isolated environment as described in the Security section of this policy. We do not use this data for advertising, do not sell it, and do not share it with third parties except the hosting subprocessors listed in this policy. Our staff does not read your files except with your explicit consent for support purposes. You can disconnect a cloud storage source at any time, which invalidates the stored token; you may also revoke Klynt's access from your provider's security settings (Google Account, Microsoft account, or Dropbox settings).

Klynt's use and transfer to any other application of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

8. International Transfers

If data is transferred outside Switzerland or the European Economic Area, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or transfers to jurisdictions recognized as providing an adequate level of protection.

9. Your Rights

Under applicable law, you may have the following rights:

• Access your personal data;
• Request correction of inaccurate information;
• Request deletion ("right to be forgotten");
• Object to or restrict processing;
• Withdraw consent (where processing is based on consent).

Requests can be sent to info@klynt.ai. We will respond within 30 days in accordance with legal requirements.

10. Security

We use appropriate technical and organizational measures to protect personal data from unauthorized access, loss, or alteration. These include encryption, access controls, and secure hosting environments.

11. Cookies

Our website may use cookies and similar technologies for analytical and functional purposes. You can manage or disable cookies through your browser settings, but some parts of the site may not function properly without them.

12. Updates to this Policy

We may update this Privacy Policy from time to time. The latest version will always be available at https://klynt.ai/privacy and will include the date of the last update.

13. Contact