Legal legal.

Klayn - AI-powered e-commerce content generation platform
Last updated: March 2026

1. Data Controller

FLIZ SAS

Simplified Joint-Stock Company (SAS)

Registered office: 18 Rue Masséna, Office 3, 06000 Nice, France

SIRET : 977 626 118 00029

RCS Nice 977 626 118

Intra-community VAT : FR43977626118

Contact : hello@klayn.ai

2. Data Collected

2.1 Identification data

When creating your account via OAuth (Google, Facebook, Apple), we collect: first name, last name, email address, profile picture (if provided by the OAuth provider).

2.2 Profile data

Information provided during onboarding: brand name, store URL (optional), industry, preferred content language.

2.3 Usage data

  • Generation history (images, videos, texts)
  • Credits consumed and purchase transactions
  • Generated API keys and associated activity
  • Technical logs (timestamps, IP addresses, user-agent)

2.4 Billing data

Payments are processed by Stripe. Klayn does not store any banking data directly. Stripe retains payment data in accordance with its own privacy policy.

3. Purposes and Legal Bases

3.1 Contract performance

Account creation and management, content generation service delivery, credit management and billing, technical support.

3.2 Legitimate interest

Platform improvement, fraud and abuse detection, IT security, anonymized usage statistics.

3.3 Legal obligation

Billing data retained in compliance with French accounting and tax obligations (10 years).

3.4 Consent

Sending marketing communications and newsletters (you can withdraw your consent at any time).

4. Data Retention Period

  • Account data: for the duration of the contractual relationship, then 3 years after account deletion
  • Generated content: 12 months from creation, then automatically deleted
  • Billing data: 10 years (legal obligation)
  • Technical logs: 12 months
  • Prospecting data: 3 years after last contact

5. Data Recipients

5.1 Technical subprocessors

Klayn uses technical service providers to ensure the operation of the service:

  • Vercel (application hosting)
  • Supabase (database and authentication)
  • Stripe (payment processing)
  • AI providers (content generation - image data only, non-personal)

5.2 No resale

Klayn does not sell, rent, or transfer your personal data to third parties for commercial purposes.

5.3 Legal obligations

Klayn may be required to disclose data to competent authorities in case of legal obligation or court order.

6. Transfers Outside the EU

Some of our subprocessors (Vercel, Stripe, AI providers) may process your data outside the European Union, particularly in the United States. These transfers are governed by appropriate safeguards: Standard Contractual Clauses (SCCs) of the European Commission or adequacy decisions where applicable.

7. Security

Klayn implements appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction:

  • Data encryption in transit (HTTPS/TLS)
  • Data encryption at rest
  • Data access restricted to authorized personnel
  • Authentication via secure OAuth providers
  • Continuous monitoring and access logging

8. Cookies and Trackers

8.1 Strictly necessary cookies

These cookies are essential for the platform to function (user session, security). They do not require your consent.

8.2 Analytics cookies

We use audience analytics tools to measure platform performance. These cookies are only placed with your consent.

You can configure your browser to refuse cookies or be alerted when a cookie is placed. Refusing certain cookies may affect your experience on the platform.

9. Your Rights (GDPR)

In accordance with the General Data Protection Regulation (GDPR - EU Regulation 2016/679), you have the following rights:

  • Right of access: obtain a copy of your personal data
  • Right to rectification: correct inaccurate or incomplete data
  • Right to erasure: request deletion of your data (subject to legal conditions)
  • Right to restriction: temporarily restrict processing
  • Right to data portability: receive your data in a structured format
  • Right to object: object to processing based on legitimate interest
  • Right to withdraw consent: for processing based on your consent

To exercise your rights, contact us at hello@klayn.ai including a proof of identity. We will respond within one month (extendable to 3 months for complex requests).

You also have the right to file a complaint with the CNIL (French Data Protection Authority - CNIL).

10. Generated Content and Privacy

The images and source content you upload for generations are used solely to produce your content. Klayn does not use them to train its artificial intelligence models and does not share them with any third party for commercial purposes.

Generated content is automatically deleted 12 months after creation. You are responsible for downloading and backing up your content before this deadline.

11. Policy Changes

Klayn reserves the right to modify this privacy policy at any time. In case of substantial changes, you will be notified by email at least 30 days before the new provisions take effect.

Continued use of the platform after notification constitutes acceptance of the changes.

12. Contact

For any questions regarding the protection of your personal data:

Email : hello@klayn.ai
Address : FLIZ SAS, 18 Rue Masséna, Bureau 3, 06000 Nice