This Privacy Policy explains how Petran Laurentiu PFA (Bucharest, Romania) ("we", "us", or "our"), the operator of Klyssa, collects, uses, shares and protects personal data in connection with the Klyssawebsite, desktop application and related services (the "Service"). We are the data controller for the processing described here and are committed to compliance with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.
1. Local-First by Design
Klyssa is a desktop editor that runs on your computer. Your media files, projects, edits and exports are stored locally on your device. We do not upload, host, view, or back up your footage or projects, and we do not track what you edit or how often you export. Some features (such as offline captions and background removal) run entirely on your device. Personal data is only processed by us in the limited situations described below.
2. Information We Collect
Information you provide
- Contact. If you contact us, we collect your email address and any message you send. We also still hold email addresses submitted to our pre-launch waitlist, which we no longer operate.
- Account. If you create an account to use Klyssa credits, we collect your email address and authentication data.
- Purchases. When you buy credits, payment is handled by our Merchant of Record, Polar. We receive confirmation of your purchase and credit balance, but we do not store your full card details.
Information collected automatically
- Website analytics. On our website we use Vercel Analytics, a privacy-friendly, cookieless analytics tool that collects aggregated, non-identifying usage metrics (such as page views and referrers).
- Technical/log data. Our service providers may process limited technical data (such as IP address and request logs) as needed to deliver, secure and troubleshoot the Service.
What we do not collect
- Your video, audio, images, or project files (these stay on your device).
- The content of your edits, or analytics about your projects.
3. How We Use Information
- To notify people who joined our pre-launch waitlist that Klyssa is available;
- To provide and maintain your account and Klyssa credits, and to process purchases via our payment provider;
- To respond to your inquiries and provide support;
- To understand aggregate website usage and improve the Service;
- To detect, prevent and address fraud, abuse and security issues;
- To comply with legal obligations.
4. Legal Basis for Processing (GDPR)
For users in the EEA/UK, we rely on the following legal bases:
- Contract — to provide your account, credits and purchases;
- Consent — for the pre-launch waitlist sign-up and any optional communications (you can withdraw consent at any time);
- Legitimate interests — to secure and improve the Service and understand aggregate usage, balanced against your rights;
- Legal obligation — to meet accounting, tax and other legal requirements.
6. AI Processing
When you choose to use an AI feature, the inputs needed for that feature — such as text prompts, a transcript, or the text to be spoken — may be sent to a third-party AI provider (e.g. OpenAI or Google), either via Klyssa credits or your own key. Your raw video footage is not sent to these providers. AI output is automated and may contain errors; you remain responsible for reviewing and using it. See our Terms of Service for details.
7. Data Retention
- Pre-launch waitlist email — until launch communications are complete or you unsubscribe/ask us to delete it.
- Account data — while your account is active and for a reasonable period afterwards.
- Purchase/billing records — as required for tax and accounting law (typically several years).
- Logs — for a short period for security and troubleshooting.
You can request deletion of your data at any time, and we will honor it except where we must retain certain records by law.
8. International Data Transfers
Some of our sub-processors are located outside the EEA (for example, in the United States). Where personal data is transferred outside the EEA/UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an applicable adequacy decision.
9. Your Rights
Subject to applicable law, you have the right to access, correct, delete or receive a copy of your personal data, to restrict or object to certain processing, and to withdraw consent. To exercise any of these, email klyssa.app@gmail.com. We will respond within the timeframe required by law (generally within one month).
If you are in the EEA, you also have the right to lodge a complaint with your local supervisory authority. In Romania this is the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) (https://www.dataprotection.ro).
10. Security
We use reasonable technical and organizational measures to protect personal data, including encryption in transit and access controls, and we work with reputable infrastructure providers. However, no system is completely secure; we cannot guarantee absolute security but will notify you of significant breaches as required by law.
11. Children
The Service is not directed to children under 16, and we do not knowingly collect personal data from children under 16. If you believe a child has provided us personal data, contact us and we will delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will update the "Effective date" above and, for material changes, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
13. Contact
Data controller: Petran Laurentiu PFA, Bucharest, Romania.
For privacy questions or requests, email klyssa.app@gmail.comwith "Privacy Request" in the subject line.