Privacy Policy

Last updated: August 27, 2026

1. Overview

This Privacy Policy explains how kleimit (“we”, “us”, “our”) collects, uses, stores, and protects your data.

By using the Service, you agree to this Policy.

1.1 GDPR Applicability

If you are located in the European Union (EU) or European Economic Area (EEA), your data is processed according to the General Data Protection Regulation (“GDPR”).

1.2 Data Controller

The Data Controller is:
kleimit (Switzerland)
Email: [email protected]

Data is primarily hosted in Switzerland, a country recognized by the EU as providing an adequate level of data protection.

2. Data We Collect

2.1 Information You Provide

  • Email, password, and basic account details
  • Uploaded contracts (PDFs, images, documents)
  • Messages, chats, photos, screenshots, and evidence
  • Inputs sent to the AI assistant
  • Payment details (processed by Stripe)

2.2 Automatically Collected Data

  • IP address
  • Device information
  • Session logs
  • Crash/error diagnostics
  • Cookies for authentication and security

3. How We Use Your Data

We use your data to:

  • analyze tenancy agreements using AI models,
  • generate deposit-recovery strategies,
  • generate letters, notices, and PDFs,
  • run your AI chat sessions,
  • manage your account,
  • detect abuse and security issues,
  • process payments,
  • improve product performance and stability.

We do not sell your data.
We do not share data with landlords or agents.

3.1 Legal Basis for Processing (GDPR)

For EU/EEA users, data is processed under:

  • Performance of a contract — running your case and providing core features.
  • Legitimate interest — security, fraud prevention, improving the service.
  • Consent — when uploading files or providing data voluntarily.
  • Legal obligation — accounting and required disclosures.

4. AI Processing

Your uploaded content may be processed by AI providers (e.g., OpenAI) for:

  • contract analysis,
  • summaries and insights,
  • message rewriting,
  • template and PDF generation.

We only use providers with strong privacy practices.
Where configurable, we do not allow your data to be used for model training.

5. Data Storage & Security

We use encryption, secure servers, and restricted access controls.

However, no system is perfectly secure.
We cannot guarantee absolute security, and you use the Service at your own risk.

6. Data Retention

We retain your data while your account is active.

You may at any time:

  • delete uploaded documents,
  • delete your account directly from your account settings,
  • request data export,
  • request full deletion (subject to legal limits).

When you delete your account, we remove your profile and associated case data and uploads from our active systems, except for information we must retain for legal, billing, or security reasons.
Backup data is automatically erased after scheduled retention periods.

7. Data Sharing

We share your data only with trusted providers that help operate the Service:

  • Stripe — payments
  • OpenAI — AI processing
  • Cloudflare — CDN, caching, security
  • Google Analytics — analytics, only after you provide the required cookie consent
  • Swiss hosting provider — servers and database storage
  • Email delivery provider (e.g., Postmark, Resend, Mailgun)

We do not sell, rent, or trade your personal data.

7.1 Sub-Processors

Each sub-processor only processes data on our behalf.
All are required to follow strong privacy and security standards.

8. Cookies

We use essential cookies for login sessions, authentication, security, and remembering your cookie preferences.

Non-essential analytics cookies, such as those used by Google Analytics, are only used after you provide the required cookie consent.

8.1 International Data Transfers (GDPR)

Your data may be transferred to service providers located outside the EU/EEA.
We rely on:

  • EU adequacy decisions (e.g., Switzerland, UK),
  • Standard Contractual Clauses (SCCs), or
  • equivalent GDPR-compliant safeguards.

9. Your Rights

If you are in the EU/EEA, you have the right to:

  • access your data,
  • correct your data,
  • delete your data (“right to be forgotten”),
  • export your data (“data portability”),
  • object to or restrict processing,
  • withdraw consent at any time,
  • file a complaint with your local data protection authority.

You can exercise your rights by deleting your account via your profile settings or by contacting [email protected].

10. Children

kleimit is not intended for users under 18.
We do not knowingly collect information from minors.

11. No Legal Advice Disclaimer

kleimit is not a law firm.
We provide no legal advice.
All content and suggestions are informational only.

Outcomes cannot be guaranteed.
You are responsible for your own decisions and communications.

12. Liability Disclaimer

To the fullest extent permitted by law, kleimit is not liable for:

  • disputes with landlords or agents,
  • incorrect or incomplete AI output,
  • misinterpretation of documents,
  • deposit loss,
  • emotional distress,
  • legal consequences.

Use kleimit at your own risk.

13. Changes to This Policy

We may update this Privacy Policy from time to time.
Continued use of the Service means you accept any changes.

14. Data Processing Agreement

If required, we can provide a Data Processing Agreement (DPA) detailing our sub-processors and GDPR safeguards.
Contact [email protected] to request one.

15. Contact

For privacy questions or requests, email:
[email protected]