Privacy Policy

The short version

• We collect what we need to run your account: your sign-in details, the brand and competitors you set up, and the creative you generate.
• To build your Nucleus we read your public website; to show competitor ads we read the public Meta Ad Library. We don't touch anything behind a login.
• We use trusted AI providers to generate creative and read ads. We don't sell or rent your personal information to anyone.
• You can use the free downloader tools without an account, and we don't keep the files they fetch.

1. What we collect

Information you give us

• Account details: your email, name, and a password (or the equivalent from your sign-in), so we can create and secure your account and workspace.
• Brand & workspace setup: the website you add for your Nucleus, the products, prices and positioning we extract from it, any product images you upload, and the competitor brands or handles you choose to watch.
• Generated creative & briefs: the angles, briefs and ad images you create, which we store so you can revisit, edit, export, and save them to boards.
• Billing details: handled by our payment processor (Stripe). We receive your plan and a customer reference — we never see or store your full card number.
• Usage & credits: your credit balance and a ledger of credits granted, spent on generations, and purchased via top-ups, so we can meter usage and bill correctly.
• Contact messages: if you use our contact form, we store the name, email and message so we can reply.

Information collected automatically

• Basic analytics: page views, device type and browser, used in aggregate to keep Klipio reliable.
• IP address: like every web service, our servers receive your IP address with each request. We record it to derive approximate location (country, region, city), apply rate limits, detect abuse, and keep an audit trail of administrator actions. We don't use it to build advertising profiles and we don't sell it.
• Technical & usage logs: short-lived logs of scans, generations and errors so we can fix failures and prevent abuse. These are purged on a rolling basis.

2. How AI providers process your data

Generating creative and reading ads relies on third-party AI services. To provide the product, we send the relevant inputs — your brand details, briefs, product images, and the public competitor ads you picked — to these providers so they can return a result (for example, generated ad images or an analysis of an ad). We send only what's needed for the task, and we choose providers and API tiers whose terms state they don't train on data sent through their business APIs. We don't use your data to train our own models. A current list of our sub-processors is available on request at [email protected].

3. Where competitor ad data comes from

Competitor ads come from Meta's public Ad Library — the official archive Meta publishes of the ads running across Facebook and Instagram. Klipio looks up the brands you choose and reads their live, public ads. It never accesses private accounts, hidden data, or anything behind a login.

4. What we do not collect

• We don't keep copies of the videos or files the free downloaders fetch — they pass through and are deleted automatically.
• We don't track you across other websites or use third-party advertising cookies.
• We don't require a phone number or social login, and you can use the free downloader tools without an account.

5. How we use your information

• To build your Nucleus, watch the competitors you choose, and generate on-brand creative.
• To run your account, process payments, and enforce plan limits and rate limits.
• To keep the service secure and prevent abuse.
• To reply to support and contact requests.
• To understand, in aggregate, which features are used so we improve the right things.

6. Cookies and similar tech

We use a small number of cookies and local-storage entries needed for the site to work — for example, keeping you signed in, or remembering that you dismissed a banner. We don't use third-party advertising cookies.

7. Who we share data with

We share data only with the service providers that make Klipio run, and only what each needs:

• Hosting & infrastructure (to serve the site, run the app and database, and process jobs).
• AI providers (to generate creative and read competitor ads, as described in section 2).
• Public ad-data sources (to retrieve competitor ads from the Meta Ad Library).
• Payment processor (Stripe, to handle subscriptions and top-ups — we never see your full card number).
• Analytics, email & bot protection (aggregate usage, transactional email, and Cloudflare Turnstile to stop form spam).

We never sell your personal information. We may disclose data if legally required to.

8. Klipio Ad Downloader (browser extension)

The Klipio Ad Downloader is a separate Chrome / Brave / Edge extension that adds a Download button to the public Facebook (Meta) Ad Library so you can save ad creatives for research. It is held to the same privacy standard as the rest of Klipio:

• It runs only on the Ad Library (facebook.com/ads/library). It cannot see, read, or act on any other website you visit.
• Downloading sends us nothing. When you download an ad, the file goes straight from Facebook's servers to your own device — it never passes through Klipio.
• Stored on your device: a small local download count, an anonymous install ID, and — only if you connect a Klipio account — your own Klipio API key. These live in your browser's local storage.
• First-party install/update and reliability events: when the extension is installed, updated, started, and periodically while enabled, it sends Klipio an anonymous install ID, extension version, browser/platform details, and event type. As with any web request, our servers also receive your IP address, which we record and use to derive approximate location. This measures installs, update adoption, extension health, and where the product is being used. It does not include your browsing history, search terms, page URLs, downloaded files, or ad contents.
• The optional “Save to swipe file” feature: if you connect an account and click Save on an ad, the extension sends that ad's public information (its Ad Library ID, advertiser, and media links) with your API key to klipio.io to add it to your swipe file. That's the only data it ever sends us, and only when you choose to save an ad.
• No advertising, no third-party tracking, no selling. We never sell, rent, or transfer extension data to data brokers or ad platforms.

9. Data retention

• Account, brand and workspace data: kept while your account is active; removed when you delete your account.
• Generated creative and saved boards: kept until you delete them or close your account.
• Downloaded files (free tools): deleted automatically, usually within minutes.
• IP addresses: kept for up to 12 months, then deleted automatically. Aggregate location statistics derived from them are kept in summarized form, which is no longer linked to an IP address.
• Contact messages and raw logs: kept for a reasonable period, then removed; aggregate analytics is kept in summarized form.

10. Your rights

You can delete your account at any time from your settings, which removes your personal data (we may retain anonymized, aggregate analytics and any minimal records we're legally required to keep). Depending on where you live (for example under GDPR or CCPA), you can also ask us to access, correct, or delete the personal data we hold and to stop processing it. Email [email protected] and we'll act on it.

11. Children

Klipio isn't directed at children (under 13 in the US, or the applicable minimum age in your country), and we don't knowingly collect their data.

12. Claude connector (“Log in with Klipio”)

You can optionally connect Klipio to Anthropic's Claude as a read-only connector. When you do:

• You choose to connect it, and you approve a consent screen that lists exactly what Claude may read: your workspaces, tracked competitors and their public ads, mined angles, creative briefs, generated creatives, and brand brain.
• It is read-only and per-user isolated. The connector can never change, delete, or spend anything, and each connection is scoped to your account only — it can never read another customer's data.
• What Claude reads becomes part of your Claude conversation and is then handled under Anthropic's own policies. On Anthropic's Team and Enterprise plans your conversations are not used to train their models; on consumer plans you control that in Claude's settings. Anthropic stores your encrypted connection token but does not store the data our connector returns.
• You can revoke access anytime from your Klipio connections page, which immediately invalidates the connection.

13. Changes to this policy

If we make a material change, we'll update the date at the top of this page. Continuing to use Klipio after a change means you accept the updated policy.

14. Contact

Privacy questions: [email protected]. General questions: [email protected].