klaro

Privacy Policy

How Project91 Advance Technologies Private Limited ("we", "us") handles personal data on Klaro.

Last revised: 2026-05-04

1. Who we are

Klaro is operated by Project91 Advance Technologies Private Limited. We act as the data controller for personal data processed through theklaro.com.

Registered office: India

2. What we collect

  • Account data: name, email (optional for members added by an admin), mobile number with country code, company name, time zone.
  • Workspace content: tasks, comments, calendar blocks, status notes, member-to-manager relationships.
  • WhatsApp routing: messages sent and received through Klaro on your behalf, the Klaro Loop group ID you assign to a member, plus message metadata (timestamps, delivery status). Message content is processed in transit and persisted only when it forms part of a tracked task or audit log.
  • Billing data: handled by Razorpay (India) and Stripe (international). We never store full card numbers or CVCs.
  • Operational logs: IP address, user agent, request paths, error traces. Used for security and reliability.

3. How we use it

  • To provide the Klaro service to your team.
  • To route WhatsApp messages between members, managers, and Klaro.
  • To send transactional emails and WhatsApp notifications.
  • To bill, prevent fraud, and meet tax obligations.
  • To investigate security incidents and abuse.

We do not sell or rent personal data to anyone.

4. Who we share with

  • Payment processors: Razorpay and Stripe for subscription billing and tax handling.
  • WhatsApp connectivity: a licensed WhatsApp Business Solution Provider that delivers messages on our behalf.
  • Email delivery: Resend, for transactional email (sign-up confirmations, password resets, billing alerts).
  • Cloud hosting: industry-standard providers under written data processing terms.
  • Authorities: when compelled by lawful order, with the narrowest scope possible.

5. Where we store and how long

Personal data is stored on servers operated by our cloud provider. Operational data is retained for the life of the account plus 90 days for billing reconciliation and abuse investigation. You can ask us to delete sooner; statutory retention obligations (tax, fraud) may keep limited records longer.

6. Your rights

Subject to applicable law (India's DPDPA, the EU GDPR, the UK GDPR, and others), you have the right to access, correct, port, and erase your personal data, to object to processing, and to withdraw consent. Email privacy@theklaro.com and we'll respond within 30 days.

7. Children

Klaro is for use by people aged 18 and over in a professional context. We don't knowingly collect data from children.

8. International transfers

If you access Klaro from outside India, your data may be transferred to and processed in India and other jurisdictions where our service providers operate, under appropriate safeguards (standard contractual clauses where required).

9. Security

See our Security overview for the controls we run. To report a vulnerability, email security@theklaro.com.

10. Changes to this policy

We may update this policy from time to time. Material changes will be announced in-product and via email at least 14 days before they take effect.

11. Contact

Project91 Advance Technologies Private Limited · privacy@theklaro.com