Effective Date: June 7, 2026

Privacy Policy

Klaravex LLC (“Klaravex,” “we,” “us,” or “our”) operates klaravex.com. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our website or services. By using our website or engaging our services, you agree to this Privacy Policy.

1. Who We Are

Klaravex LLC is a Wyoming limited liability company providing managed IT security, readiness advisory, and AI-assisted support to US SMBs and consumers. Our principal is based in Berlin, Germany; EU clients are served under a GDPR Data Processing Agreement. We are a US data processor — we do not sell your personal information.

Contact: hello@klaravex.com | klaravex.com

2. Data We Collect

2a. Data You Provide Directly

  • Name, email address, company name, job title
  • Phone number (if provided)
  • Information submitted via contact forms, the Loki chat widget, or email
  • Resume or career documents (consumer resume services only)
  • Payment information (processed by Stripe — Klaravex sees only last-4 digits and email)

2b. Data Collected Automatically

  • IP address, browser type, operating system
  • Pages visited, time on site, referring URLs
  • Cookie data (see Section 6)

2c. Data We Do NOT Collect

  • Protected Health Information (PHI) — Klaravex infrastructure is not HIPAA-eligible; HIPAA advisory services involve scoping questions only
  • Social Security numbers (do not submit these)
  • Full payment card numbers (handled exclusively by Stripe)

3. How We Use Your Information

We use collected information to:

  • Respond to inquiries and deliver our managed IT and advisory services
  • Process payments and manage billing via Stripe
  • Send transactional emails (receipts, ticket updates, service communications) via Resend
  • Operate and improve the Loki AI assistant and our website
  • Conduct outreach via marketing campaigns (you may opt out at any time)
  • Comply with applicable legal obligations

We do not use your data for automated decision-making that produces significant legal effects without human review.

4. How We Share Your Information

We share personal information only as follows:

  • Service providers (subprocessors): Stripe (payments), Resend (email), Atera (RMM — B2B clients only), Anthropic (AI inference for Loki), Hetzner (VPS hosting), Cloud86 (website hosting). All subprocessors are contractually bound to protect your data.
  • Legal requirements: When required by law, court order, or governmental authority.
  • Business transfers: In connection with a merger, acquisition, or sale of assets, subject to confidentiality obligations.

We do not sell your personal information to third parties.

5. Your Rights

5a. California Residents (CCPA / CPRA)

California residents have the following rights under the California Consumer Privacy Act:

  • Right to Know: Request disclosure of the categories and specific pieces of personal information we collect, use, and share.
  • Right to Delete: Request deletion of personal information we have collected about you, subject to legal exceptions.
  • Right to Correct: Request correction of inaccurate personal information.
  • Right to Opt Out of Sale: Klaravex does not sell personal information. No opt-out is needed.
  • Right to Non-Discrimination: We will not discriminate against you for exercising CCPA rights.

To exercise these rights, email hello@klaravex.com with subject line “CCPA Request.” We will respond within 45 days.

5b. Virginia Residents (CDPA)

Virginia residents have similar rights under the Virginia Consumer Data Protection Act (CDPA), including rights to access, correct, delete, and obtain a portable copy of their data, and to opt out of targeted advertising. Contact hello@klaravex.com to exercise these rights.

5c. EU / EEA Residents (GDPR)

EU and EEA residents whose data is processed by Klaravex as a data controller have the following rights under the General Data Protection Regulation:

  • Right of access (Art. 15)
  • Right to rectification (Art. 16)
  • Right to erasure / right to be forgotten (Art. 17)
  • Right to restriction of processing (Art. 18)
  • Right to data portability (Art. 20)
  • Right to object to processing (Art. 21)

EU clients engaged under a Data Processing Agreement are served as data subjects of their employing organisation. Contact hello@klaravex.com or your DPA representative. Transfers of EU personal data to the US are made under Standard Contractual Clauses (SCCs) per GDPR Art. 46(2)(c).

Legal basis for processing: performance of a contract (Art. 6(1)(b)); legitimate interests (Art. 6(1)(f)) for analytics and service improvement; compliance with legal obligations (Art. 6(1)(c)).

6. Cookies

We use cookies and similar tracking technologies to:

  • Maintain site functionality and session state
  • Measure site performance and visitor analytics (Google Analytics, if active)
  • Deliver and measure marketing content

You may control cookies through your browser settings or a cookie consent tool. Disabling cookies may affect site functionality. We do not use cookies for cross-site behavioral advertising.

7. Data Retention

We retain personal data for the duration of our business relationship plus three years, unless a shorter period is required by law or requested in writing. Payment records are retained per IRS and applicable state requirements (typically 7 years). You may request deletion at any time subject to legal retention obligations.

8. Security

We implement reasonable technical and organisational measures to protect personal data, including: MFA on all administrative accounts; encrypted transit (HTTPS); secrets management via 1Password; restricted access controls. No transmission over the internet is 100% secure; we cannot guarantee absolute security.

9. Children

Our services are not directed at children under 13. We do not knowingly collect personal information from children. If we learn we have collected such information, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy periodically. The “Effective Date” at the top will reflect the most recent version. Material changes will be communicated via email to active clients.

11. Contact

Privacy inquiries, CCPA/GDPR requests, and data deletion requests:
hello@klaravex.com
Klaravex LLC | klaravex.com