Privacy Policy

Klok Labs

Effective Date: March 13, 2026 • https://kloklabs.com/privacy-policy/

1. Introduction and Who We Are

Klok Labs (“Company,” “we,” “us,” or “our”) operates the website https://kloklabs.com and a suite of web applications that help businesses manage and optimize their digital marketing, advertising, and online presence. Our services connect with third-party platforms including Google Analytics, Google Ads, Google Search Console, and Meta Ads on behalf of our users.

This Privacy Policy explains what information we collect, how we use it, with whom we share it, and the rights you have over your data. It applies to all visitors to our website and users of our applications.

By using our website or services, you agree to the practices described in this policy. If you do not agree, please discontinue use of our services.

2. Information We Collect

2.1 Information You Provide Directly

Account registration details (name, email address, company name, password)
Billing and payment information (processed by our payment processor; we do not store full card numbers)
Support inquiries, messages, and feedback you send us
Any content you upload or create within our applications

2.2 Information Collected Automatically from Website Visitors

IP address and approximate geographic location
Browser type, version, and operating system
Pages visited, referral URLs, and time spent on pages
Cookies and similar tracking technologies (see Section 7)
Comment form submissions, including commenter IP addresses and browser user agent strings, which are used for spam detection

2.3 Information from Third-Party API Integrations

When you connect third-party accounts to our applications, we access data from those platforms solely to provide the services you have requested. This may include:

Google Analytics 4 (GA4): Website sessions, user counts, traffic sources, engagement metrics, and conversion events for your connected properties
Google Ads: Campaign performance data, spend, impressions, clicks, conversions, ad creatives, and audience lists for your ad accounts
Google Search Console: Search query performance, index coverage, URL inspection data, and site-level performance metrics for your verified properties
Meta Ads (Facebook/Instagram): Campaign, ad set, and ad performance metrics, audience data, and spend data for your ad accounts

We access only the scopes and data necessary to provide the features you use. We do not access data beyond what is required to fulfill your service requests.

2.4 Data Collected Through Automated Web Analysis

Our platform includes AI-powered optimization features that may analyze publicly accessible web pages, including your own websites and relevant industry content, to provide recommendations for search engine optimization (SEO), content quality, and digital marketing strategy. This automated analysis:

Accesses only publicly available pages that are not protected by authentication, robots.txt restrictions, or access controls
Does not collect or store personal information from scraped pages
Is used solely to generate optimization insights and recommendations for our users
Complies with applicable terms of service for web crawling and automated access

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Providing and Improving Our Services

To authenticate your identity and manage your account
To connect to and retrieve data from integrated third-party platforms (Google, Meta, etc.) on your behalf
To generate dashboards, reports, and recommendations based on your connected data
To operate, maintain, and improve the features and functionality of our applications
To process payments and manage billing

3.2 Communications

To respond to your support requests and inquiries
To send transactional emails (account verification, password resets, billing receipts)
To send product updates, feature announcements, and marketing communications (you may opt out at any time)

3.3 Security and Legal Compliance

To detect, prevent, and respond to fraud, abuse, or security incidents
To comply with applicable laws, regulations, legal processes, and lawful governmental requests
To enforce our Terms of Service and protect the rights of Klok Labs and our users

3.4 Analytics and Research

To understand how our services are used and improve user experience
To conduct aggregate, anonymized analysis of platform usage trends

4. Google API Services – Disclosure and Compliance

Klok Labs’ use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can review this policy at:

https://developers.google.com/terms/api-services-user-data-policy

4.1 Scope of Google Data Access

We request access to Google account data only for the following specific purposes:

Google Analytics 4: Reading website traffic and performance metrics to populate your Klok Labs analytics dashboard
Google Ads: Reading campaign performance, spend data, and conversion metrics to display in your marketing overview
Google Search Console: Reading search performance data and index coverage to provide SEO insights

We request only the minimum OAuth scopes necessary to provide the above features. We do not request read/write access where read-only access is sufficient.

4.2 Limited Use of Google User Data

Our use of data obtained through Google APIs is strictly limited as follows:

We use Google user data only to provide or improve user-facing features that are prominently described in this policy and our service description
We do not use Google user data to serve advertisements, including retargeting, personalized advertising, or interest-based advertising
We do not allow humans to read Google user data unless: (a) you have given us express permission; (b) it is necessary for security or abuse prevention; (c) it is required by law; or (d) it is aggregated and anonymized
We do not transfer Google user data to third parties except as necessary to provide our services, and only in compliance with the Google API Services User Data Policy
We do not use Google user data for any purpose unrelated to providing and improving the services you have authorized

4.3 Google Account Connection and Revocation

You authorize our access to your Google accounts through OAuth 2.0. You may revoke this authorization at any time by:

Visiting your Google Account security settings at https://myaccount.google.com/permissions and removing Klok Labs’ access, or
Disconnecting the integration from within your Klok Labs account settings

Revoking access will immediately stop our ability to retrieve new data from your Google accounts. We will delete cached data upon your written request (see Section 9).

5. Meta Ads Integration

When you connect your Meta Business account (Facebook and/or Instagram ads), we access your advertising performance data through the Meta Ads API. This is subject to Meta’s Platform Terms and Data Policy, available at https://www.facebook.com/privacy/policy/.

We access Meta Ads data only to display performance metrics, reports, and insights within your Klok Labs dashboard
We do not use your Meta Ads data to run, modify, or manage campaigns unless you explicitly request such functionality
We do not share your Meta Ads data with other advertisers or third parties
You may disconnect Meta integration at any time from your Klok Labs account settings or through Meta’s app permissions manager

6. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information in the following limited circumstances:

6.1 Service Providers

We engage trusted third-party vendors to help operate our services, including cloud hosting providers, payment processors, email delivery services, and analytics tools. These vendors are contractually bound to use your information only as directed by us and in accordance with this policy.

6.2 Legal Requirements

We may disclose your information if required to do so by law or in good-faith belief that such action is necessary to: comply with a legal obligation; protect and defend the rights or property of Klok Labs; prevent or investigate possible wrongdoing; protect personal safety of users or the public; or protect against legal liability.

6.3 Business Transfers

In the event of a merger, acquisition, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

6.4 Aggregated and De-identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you, for purposes such as industry research, improving our services, or marketing our capabilities.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate our website and applications. You can control cookie preferences through your browser settings, though disabling certain cookies may affect functionality.

7.1 Types of Cookies We Use

Essential cookies: Required for authentication, session management, and core application functionality
Functional cookies: Remember your preferences and settings (e.g., screen options, display preferences). These persist for up to one year
Analytics cookies: Help us understand how visitors use our site (e.g., via Google Analytics). These may track pages visited, time on site, and traffic sources
Login cookies: Persist for two days; extended to two weeks if you select “Remember Me”

7.2 Third-Party Cookies

Our site may contain embedded content from third-party services (e.g., videos, maps, social media widgets). These third parties may set their own cookies and collect data subject to their own privacy policies. We recommend reviewing the privacy policies of any third-party services you interact with through our site.

8. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

Account data: Retained for the duration of your account plus 90 days after account deletion, unless you request earlier deletion
Third-party API data (Google, Meta): Cached data is retained for up to 90 days to enable historical comparisons and reporting. You may request deletion at any time
Website usage logs and analytics: Retained for up to 24 months in aggregate, anonymized form
Comment and spam detection data: Retained indefinitely to support automated spam detection, unless you request deletion
Financial records: Retained for up to 7 years as required by applicable tax and accounting laws

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate or incomplete data
Deletion: Request deletion of your personal data (subject to legal obligations)
Portability: Request that we provide your data in a structured, machine-readable format
Objection or Restriction: Object to or request restriction of certain processing activities
Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting prior processing

To exercise any of these rights, please contact us at kloklabs.com. We will respond within 30 days. We may need to verify your identity before processing your request.

If you are located in the European Economic Area (EEA), UK, or California, additional rights may apply under GDPR, UK GDPR, or the California Consumer Privacy Act (CCPA), respectively.

10. Data Security

We implement industry-standard technical and organizational measures to protect your information against unauthorized access, disclosure, alteration, and destruction. These include:

Encryption of data in transit using TLS/HTTPS
Encryption of sensitive data at rest
Access controls and role-based permissions limiting data access to authorized personnel
Regular security assessments and monitoring
Secure OAuth 2.0 token storage for third-party integrations

While we strive to protect your data, no security system is impenetrable. We encourage you to use strong, unique passwords and to contact us immediately if you suspect unauthorized access to your account.

11. Children’s Privacy

Our services are not directed to children under the age of 13 (or 16 in the EEA), and we do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal data from a child, we will take steps to delete that information promptly. If you believe we have collected data from a child, please contact us at kloklabs.com.

12. International Data Transfers

Klok Labs is based in the United States. If you are accessing our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using our services, you consent to such transfers.

Where required by applicable law, we implement appropriate safeguards for international data transfers, such as Standard Contractual Clauses approved by the European Commission.

13. Third-Party Websites and Services

Our website and applications may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party service you use in connection with our platform, including:

Google LLC: https://policies.google.com/privacy
Meta Platforms, Inc.: https://www.facebook.com/privacy/policy/

We are not responsible for the privacy practices or content of third-party websites.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

Update the “Effective Date” at the top of this page
Post a notice on our website or send an email notification to registered users

Your continued use of our services after the effective date of the updated policy constitutes acceptance of the changes. We encourage you to review this policy periodically.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: