Legal
Privacy
What we collect, why we hold it, and how to get rid of it.
Draft pending legal review. Last drafted 4 November 2025.
What we collect
We collect as little as we can while still running the service.
- Account details: your email address, and a name if you give us one. Passwords are stored only as a hash, never in a readable form.
- Site content: the pages, text and images you create in the builder.
- Enquiries: anything you send through the contact form, along with your email address.
- Technical basics: IP address and browser details, recorded in server logs for security and rate limiting.
Why we hold it
To provide the service you asked for: running your account, storing and publishing your site, and answering when you get in touch.
We also have a legitimate interest in keeping the service working and preventing abuse, which is why we keep short-lived server logs and apply rate limits to sign-in and contact attempts.
Who else sees it
We use a small number of processors to run the service. They only handle data on our instructions:
- Cloudinary — stores images you upload to your sites.
- Resend — delivers account emails such as verification links.
- Our hosting providers — run the application and the database.
How long we keep it
Account and site data are kept while your account exists. Delete your account and your sites, pages and uploaded files are deleted with it.
Enquiries are kept for two years so we can follow up on a project, then deleted.
Server logs are kept for a short period and then rotated out.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it. The account section includes an export that produces a machine-readable copy of everything we hold about you.
To make a request, email hello@kleelab.com. We answer within one month.
Cookies and local storage
We do not use advertising cookies. We do store a sign-in token in your browser so you do not have to log in on every page — see the cookies page for detail.
Last updated 4 November 2025