Privacy Policy

1. Who We Are

Kluck AI ("Kluck," "we," "our," or "us") is an AI-powered brand management platform built for e-commerce merchants. We help brand owners and brand managers run their Shopify stores and advertising operations through an AI agent that understands their brand and acts on their behalf.

Our platform connects to third-party services — primarily Shopify and Meta — to read your store data and campaign performance so our AI can give you accurate, actionable guidance. This Privacy Policy explains exactly what data we collect, how we use it, and the commitments we make to protect it.

2. What Data We Collect and Why

Store and Advertising Data (Shopify & Meta)

When you connect your Shopify store or Meta advertising account to Kluck, we access data that is strictly necessary for analysis and AI-powered guidance. This includes:

• Shopify: Orders, products, inventory, storefront performance metrics, customer aggregates, and sales data.
• Meta: Campaign performance, ad spend, ROAS, creative performance, audience data, and campaign configuration.

We do not collect or store raw customer personal information (such as individual customer names, email addresses, or payment details) from your Shopify store. We work with aggregated performance and operational data only.

This data is used to power the AI analysis and recommendations you see inside Kluck. If you connect Claude, ChatGPT, or another MCP client, the same store and ads data can also be returned to that assistant when you ask it a question — see Section 6. We do not sell this data, share it with third parties for their own marketing purposes, or use it for any purpose beyond operating our service for you and, if you choose to connect one, the assistant you authorized.

Account Information

We collect the email address you register with. This is used solely to authenticate your account, send you product notifications, and communicate with you about your Kluck subscription. Your email address is never shared with third parties for marketing or sold to any data broker.

Conversations with the AI

Every message you send to the Kluck AI agent — your instructions, questions, feedback, and the responses you receive — is stored to maintain the continuity of your sessions and to build a memory of your brand's context over time. This makes the AI more useful with each interaction.

Your conversations with the Kluck AI agent inside Kluck are separate from Claude and ChatGPT. Connecting one of those assistants does not share this conversation history with it, and Kluck does not pull Claude or ChatGPT chat history either. We do not use your Kluck conversations to train our models, and they are never reviewed by our team for product analytics. Memory and preferences you set in Kluck are not sent to a connected assistant. See Section 6 for what a connected assistant can receive instead.

3. Brand DNA: Strict Confidentiality

Your Brand DNA — the collection of brand guidelines, tone of voice, target customer profiles, strategic positioning, competitive context, and any other brand-defining information you teach Kluck — is treated with the highest level of confidentiality we offer.

No one on our team can access your Brand DNA or brand data. It is stored in an isolated, access-controlled environment. There is no internal admin view, no support access, and no analytics pipeline that touches it. It is yours, and only the AI acting on your behalf — inside Kluck, or inside an assistant you connected — can read it.

Memory and preferences (sometimes called Soul) is a separate, more private layer of brand guidance. Unlike the rest of Brand DNA, it is never returned to a connected Claude, ChatGPT, or other MCP client.

This isn't just policy — it is how the system is architecturally designed.

4. Data Retention and Deletion

While Connected

As long as your Shopify and/or Meta integrations remain connected, we periodically fetch updated data from those platforms to keep your AI's understanding of your business current.

When You Disconnect

When you disconnect a Shopify or Meta integration from Kluck:

• We immediately stop fetching new data from that integration. No further API calls are made to the disconnected service.
• Data older than 60 days is automatically deleted from our systems, on a rolling basis, once both integrations are disconnected.

If you disconnect only one integration (e.g., Meta but not Shopify), the 60-day deletion applies to data from the disconnected service when it ages out, but your Shopify data continues to be refreshed.

Account Deletion

If you delete your Kluck account entirely, all data associated with your account — including Brand DNA, conversation history, store data, campaign data, and account credentials — is deleted from our primary systems within 30 days and from backups within 90 days.

5. Third-Party Integrations

Kluck integrates with the following third-party services to operate:

• Shopify — for store and sales data.
• Meta — for advertising performance data.
• AWS — for secure user authentication.
• Anthropic (Claude), OpenAI (ChatGPT), and other MCP clients — only if an owner or admin connects them. They receive the workspace data described in Section 6 when you ask them a question that calls a Kluck tool. We do not sell this data or share it for third-party marketing.

6. Claude, ChatGPT, and MCP Connectors

Connecting a connector is optional. Claude and ChatGPT use the same Kluck connector at a single URL. An organization owner or admin signs in to Kluck, picks one workspace to connect, and chooses whether to allow read-only access or also allow images and account changes. Only an owner or admin can complete this step or disconnect it later.

What a connected assistant can receive

With read access, the assistant can request this workspace's store performance, product catalog, Meta ad performance, creative fatigue, tracked competitor snapshots, your own Instagram and Facebook post performance, public Brand DNA, links to artifacts already saved in Kluck, and credit or plan status. It does not receive raw customer personal information, payment card data, passwords, Shopify or Meta credentials, Memory and preferences (Soul), or your Kluck conversation history.

What a connected assistant can change

If you also allow images and account changes, the assistant can create a new product creative — using a product already in your catalog with photos — which spends credits as soon as you ask for it. It can also propose pausing or resuming a Meta ad, changing a Meta campaign or ad set budget, or editing a Shopify product's title, description, tags, or collection membership. Those proposals are shown to you first and only take effect after you confirm them; price and inventory are not edited this way.

Connection tokens and audit records

Kluck issues a short-lived connection token (expiring in about an hour) and a longer-lived renewal token (expiring in about 30 days) that is stored only as a one-way hash, never in a form we or anyone else can read back. We keep an internal audit record of connection and tool-call events — such as when a workspace was connected, when an assistant called a tool, and whether a change was applied — for security and support. Sensitive values like tokens are stripped out before anything is logged. These audit records follow their own retention schedule, separate from the data-retention periods in Section 4; we have not published a fixed duration for them.

Revoking access

An owner or admin can disconnect at any time from Settings in Kluck, which immediately revokes that connection — a previously issued token stops working right away, even before it would otherwise expire. Removing the connector inside Claude or ChatGPT stops that assistant from calling Kluck, but we recommend disconnecting from Kluck's Settings as well so the grant itself is revoked. To ask us to delete data associated with a connection or your account, contact growth@kluck.ai.

Setup instructions are in Connect Claude to Kluck and Connect ChatGPT to Kluck. A connected provider's own privacy policy applies to what it does with the data once received.

7. How We Protect Your Data

We apply security practices consistent with the sensitivity of the data we hold:

• Data in transit is encrypted using TLS.
• Data at rest is encrypted at the storage level.
• Access controls ensure that even internal team members cannot access merchant-specific data, particularly Brand DNA and conversation history.
• Authentication is handled through industry-standard OAuth 2.0 flows, including the OAuth connection Claude and ChatGPT use. Connector tokens are short-lived, and renewal tokens are stored only as one-way hashes.
• We conduct periodic reviews of our security posture as the platform evolves.

8. Your Rights

Regardless of where you are located, you have the following rights over your data:

• Access: You can request a copy of the data we hold about you.
• Correction: You can ask us to correct inaccurate data.
• Deletion: You can ask us to delete your data at any time. Account deletion triggers the process described in Section 4.
• Objection: You can object to any processing you believe is not necessary.
• Disconnect: You can disconnect a Claude, ChatGPT, or other MCP connector at any time.

To exercise any of these rights, contact us at the email below. We will respond within 14 business days.

9. Children's Privacy

Kluck is a business-to-business platform for adult brand owners and managers. We do not knowingly collect information from anyone under 18 years of age. If you believe a minor has registered an account, contact us immediately.

10. Changes to This Policy

We will notify you of material changes to this policy via email and/or a notice in the Kluck dashboard before the changes take effect. The "Effective Date" at the top of this page reflects when the current version was last updated. Continued use of Kluck after a policy update constitutes acceptance of the revised terms.

11. Contact

If you have questions about this policy, want to exercise a data right, or need to report a privacy concern:

• Email: growth@kluck.ai
• Company: Kluck AI

This policy is written in plain language intentionally. If any section is unclear or you need it in another format, reach out — we'll clarify.