Privacy Policy for Cleyo

Effective Date: January 1, 2025

Cleyo (https://cleyo.co) values your privacy. This policy explains how we collect, use, and protect your information when you use our newsletter content amplification platform.

1. Information We Collect

Personal Data

We collect the following personal information:

  • Email Address: Collected when you sign up for an account or subscribe to our service.
  • Name: Used to personalize your account experience.
  • Profile Information: When you sign up via Google OAuth, we may collect your profile picture and basic profile data.
  • Payment Information: Processed securely through our payment processor (Polar.sh) to manage subscriptions.

Content Data

To provide our content generation services, we process:

  • Newsletter URLs: Links you provide to generate content from your newsletters.
  • Pasted Content: Text content you paste directly into Cleyo for processing.
  • Generated Content: LinkedIn carousels, text posts, and Twitter threads created by our AI.
  • Template Data: Custom carousel templates you create, including colors, fonts, and layouts.
  • Uploaded Assets: Logos, watermarks, and images you upload for carousel customization.

Technical Data

We automatically collect:

  • Cookies: Used for authentication and session management.
  • Usage Data: Generation counts and feature usage for service improvement.

2. Use of Information

Personal Data

Your personal information is used for:

  • Account creation and management
  • Service-related communications and support
  • Processing payments and managing subscriptions
  • Email verification and password reset functionality

Content Data

Your content is used to:

  • Generate LinkedIn carousels, text posts, and Twitter threads using AI
  • Store and display your generated content for later access
  • Apply your custom templates to carousel designs
  • Export PDF carousels for download

AI Processing

We use third-party AI services (Anthropic Claude) to generate content. When you submit content:

  • Your newsletter content is sent to Anthropic's API for processing
  • Anthropic processes your content according to their privacy policy
  • Generated content is returned to Cleyo and stored in your account

3. Sharing of Data

We do not sell, trade, or share your personal data with third parties, except:

  • AI Processing: Newsletter content is shared with Anthropic to generate social media content.
  • Service Providers: We share data with trusted third-party service providers (e.g., Polar.sh for payment processing, Cloudflare for infrastructure and storage) who assist in operating our service.
  • Legal Compliance: When required by law or to protect our rights and the safety of our users.

4. Cookies

We use cookies for:

  • Authentication: Storing secure JWT tokens to maintain your login session.
  • Performance: Caching frequently accessed data for faster page loads.

You can disable cookies in your browser settings, but doing so may limit your access to certain features of our service.

5. Security

We implement industry-standard security measures to protect your data:

  • Password hashing using bcrypt
  • JWT-based authentication with short-lived access tokens
  • Secure HTTPS connections for all data transmission
  • Rate limiting to prevent abuse and unauthorized access
  • Secure cloud storage for uploaded assets and generated PDFs

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. User Rights

You have the following rights regarding your data:

  • Access: View all your generated content and account information.
  • Modification: Update or correct your personal information through your account settings.
  • Deletion: Request deletion of your account and all associated data at any time.
  • Export: Download your generated carousels as PDF files.

To exercise these rights, you can manage your account settings or contact us directly.

7. Data Retention

We retain your data as follows:

  • Account Data: Retained while your account is active.
  • Generated Content: Stored indefinitely while your account is active, allowing you to access past generations.
  • After Account Deletion: All personal data, generated content, and uploaded assets are permanently deleted within 30 days.

8. Updates to Privacy Policy

We may update this policy from time to time. You will be notified of any significant changes via email.

9. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at [email protected].