This Privacy Policy explains how Kortlabs (“Kortlabs”, “we”), the company behind the Kliper platform, collects, uses, and protects personal information when you visit our website or use our platform. We build compliance tooling, so protecting data is core to what we do. Kliper is our product; Kortlabs is the company that operates it.
AI features (Cortex) use OpenAI and self-hosted models on our own Hetzner infrastructure; providers we use do not train on data submitted via their APIs.
When you connect your Google Calendar, Kliper accesses the Google Calendar API (calendar.events scope) solely to create and update calendar events that you choose to add from Kliper (for example, assessment meetings and deadlines). We do not read your existing calendar entries beyond what is required to update events Kliper created, we do not use this data for advertising, and we never sell it. You can disconnect at any time in Kliper, which revokes our access; we retain Google tokens only while the connection is active.
Kliper’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Where the EU/UK GDPR applies, we process personal data under: performance of a contract, our legitimate interests (securing and improving the service), your consent (analytics, marketing), and legal obligations. We also comply with Morocco’s Law No. 09-08 (overseen by the CNDP), the California CCPA/CPRA and other U.S. state privacy laws, and other local data-protection laws where you are located.
We retain personal data only as long as necessary for the purposes described, to comply with legal obligations, resolve disputes, and enforce agreements. Customer content is retained per your subscription and deleted on request.
We apply encryption in transit and at rest, per-tenant isolation, access controls, and SOC 2 Type II–aligned practices. See Trust & Security for detail.
Your rights depend on where you live:
To exercise any right, email [email protected] — we respond within the timeframes required by law.
We are based in Morocco and host data in the EU (Germany, on Hetzner). For cross-border transfers we rely on appropriate safeguards: EU Standard Contractual Clauses (for transfers from the EU/EEA, including access by our team in Morocco), the UK International Data Transfer Addendum (from the UK), and equivalent safeguards elsewhere. Copies are available on request.
We may update this policy from time to time. Material changes will be posted here with an updated effective date.
Questions about this policy? Email [email protected] or use our contact page. Kortlabs — Rue de Bruxelles, 20000 Casablanca, Morocco.