Your data. Plainly explained.

Klientele is a product of Codefree Systems & Technologies Pvt. Ltd. (“Codefree”, “we”, “us”), incorporated in India. Codefree is the data controller for all data collected through klientele.io, the Klientele application, and related services.

Questions? Email [email protected].

Three kinds of data:

• Account data — name, work email, company, password (stored as a salted hash, never plain text), workspace name. Collected at signup.
• Workspace data — everything you and your team put into Klientele: requests, time entries, clients, retainers, invoices, comments, attachments. Owned by you, processed by us.
• Usage data — IP, browser, OS, pages viewed, actions taken. Used for security (rate-limits, audit logs) and basic product analytics.

• Your workspace data is never used to train AI models.
• We don't sell, rent, or share data with advertisers or data brokers.
• We don't track you across the open web with third-party cookies.
• No ID-verification or biometric data is required.

• To run your Klientele workspace and the features you signed up for.
• To send transactional emails (welcome, password reset, invoice, alerts).
• To detect abuse (spam, brute-force, scraper bots).
• To send product updates and changelogs — only if you've opted in, with one-click unsubscribe.
• To improve the product through aggregate, de-identified usage analytics (PostHog, self-hosted). Opt-out per user in workspace settings.

Only with third-party providers we need to operate:

• Codefree Pay (operated by Codefree Systems & Technologies Pvt. Ltd.) — billing for your Klientele subscription. We send subscription metadata only; card details never reach Klientele.
• Razorpay — RBI-regulated payment gateway engaged by Codefree Pay to process the transaction.
• Postmark — transactional email delivery.
• Anthropic Claude API — used only when you invoke the AI template generator. Your description is sent to generate a template; we don't store the conversation beyond the resulting template.
• Cloud infrastructure (Kubernetes in India) — compute & storage. Encrypted at rest and in transit.

We don't share data with anyone else except where compelled by Indian law (court order, subpoena, regulatory request). When that happens, we notify you unless legally prohibited.

Data is stored on infrastructure located in India. Backups are encrypted and retained for 30 days. Enterprise customers can request specific data-residency arrangements under a bespoke contract.

• Active workspaces — for as long as the subscription is active.
• Cancelled workspaces — 30 days of read-only export access, then purged. Backups expire 60 days after cancellation.
• Audit logs — per the audit retention on your workspace (30 days default; up to 7 years on Agency-tier templates).

At any time you can:

• Export everything as CSV / PDF from inside the app.
• Update or correct your account data in user settings.
• Delete your account and request immediate purge of personal data.
• Opt out of product analytics in workspace settings.
• Object to processing under applicable data-protection law.

Exercise any of these by emailing [email protected]. We respond within 7 working days.

First-party cookies only — session IDs, CSRF tokens, theme preference. No third-party advertising cookies, no cross-site tracking. klientele.io uses Cloudflare Web Analytics, which is cookieless.

Klientele is a business product. We do not knowingly collect data from anyone under 18.

We update this page when our practices change. Material changes are emailed to workspace admins at least 30 days before taking effect.

Privacy questions, data requests, or anything else? Email [email protected] or use the contact form.