Privacy Policy

Kluck AI · Effective Date: July 23, 2026

1. Who We Are

Kluck AI ("Kluck," "we," "our," or "us") is an AI-powered brand management platform built for e-commerce merchants. We help brand owners and brand managers run their Shopify stores and advertising operations through an AI agent that understands their brand and acts on their behalf.

Our platform connects to third-party services — primarily Shopify and Meta — to read your store data and campaign performance so our AI can give you accurate, actionable guidance. This Privacy Policy explains exactly what data we collect, how we use it, and the commitments we make to protect it.

2. What Data We Collect and Why

Store and Advertising Data (Shopify & Meta)

When you connect your Shopify store or Meta advertising account to Kluck, we access data that is strictly necessary for analysis and AI-powered guidance. This includes:

  • Shopify: Orders, products, inventory, storefront performance metrics, customer aggregates, and sales data.
  • Meta: Campaign performance, ad spend, ROAS, creative performance, audience data, and campaign configuration.

We do not collect or store raw customer personal information (such as individual customer names, email addresses, or payment details) from your Shopify store. We work with aggregated performance and operational data only.

This data is used exclusively to power the AI analysis and recommendations you see inside Kluck. We do not sell it, share it with third parties for their marketing purposes, or use it for any purpose beyond operating our service for you.

Account Information

We collect the email address you register with. This is used solely to authenticate your account, send you product notifications, and communicate with you about your Kluck subscription. Your email address is never shared with third parties for marketing or sold to any data broker.

Conversations with the AI

Every message you send to the Kluck AI agent — your instructions, questions, feedback, and the responses you receive — is stored to maintain the continuity of your sessions and to build a memory of your brand's context over time. This makes the AI more useful with each interaction.

Your conversations are strictly confidential. They are never used to train AI models — ours or anyone else's. They are never reviewed by our team for product analytics. They are never shared with any third party. They exist solely to serve your specific session and build your brand's memory within Kluck.

3. Brand DNA: Strict Confidentiality

Your Brand DNA — the collection of brand guidelines, tone of voice, target customer profiles, strategic positioning, competitive context, and any other brand-defining information you teach Kluck — is treated with the highest level of confidentiality we offer.

No one on our team can access your Brand DNA or brand data. It is stored in an isolated, access-controlled environment. There is no internal admin view, no support access, and no analytics pipeline that touches it. It is yours, and only the AI acting on your behalf can read it during your sessions.

This isn't just policy — it is how the system is architecturally designed.

4. Data Retention and Deletion

While Connected

As long as your Shopify and/or Meta integrations remain connected, we periodically fetch updated data from those platforms to keep your AI's understanding of your business current.

When You Disconnect

When you disconnect a Shopify or Meta integration from Kluck:

  • We immediately stop fetching new data from that integration. No further API calls are made to the disconnected service.
  • Data older than 60 days is automatically deleted from our systems, on a rolling basis, once both integrations are disconnected.

If you disconnect only one integration (e.g., Meta but not Shopify), the 60-day deletion applies to data from the disconnected service when it ages out, but your Shopify data continues to be refreshed.

Account Deletion

If you delete your Kluck account entirely, all data associated with your account — including Brand DNA, conversation history, store data, campaign data, and account credentials — is deleted from our primary systems within 30 days and from backups within 90 days.

5. Third-Party Integrations

Kluck integrates with the following third-party services to operate:

  • Shopify — for store and sales data.
  • Meta — for advertising performance data.
  • AWS — for secure user authentication.

6. How We Protect Your Data

We apply security practices consistent with the sensitivity of the data we hold:

  • Data in transit is encrypted using TLS.
  • Data at rest is encrypted at the storage level.
  • Access controls ensure that even internal team members cannot access merchant-specific data, particularly Brand DNA and conversation history.
  • Authentication is handled through industry-standard OAuth 2.0 flows.
  • We conduct periodic reviews of our security posture as the platform evolves.

7. Your Rights

Regardless of where you are located, you have the following rights over your data:

  • Access: You can request a copy of the data we hold about you.
  • Correction: You can ask us to correct inaccurate data.
  • Deletion: You can ask us to delete your data at any time. Account deletion triggers the process described in Section 4.
  • Objection: You can object to any processing you believe is not necessary.

To exercise any of these rights, contact us at the email below. We will respond within 14 business days.

8. Children's Privacy

Kluck is a business-to-business platform for adult brand owners and managers. We do not knowingly collect information from anyone under 18 years of age. If you believe a minor has registered an account, contact us immediately.

9. Changes to This Policy

We will notify you of material changes to this policy via email and/or a notice in the Kluck dashboard before the changes take effect. The "Effective Date" at the top of this page reflects when the current version was last updated. Continued use of Kluck after a policy update constitutes acceptance of the revised terms.

10. Contact

If you have questions about this policy, want to exercise a data right, or need to report a privacy concern:

This policy is written in plain language intentionally. If any section is unclear or you need it in another format, reach out — we'll clarify.