Privacy Policy

This Privacy Policy explains how New Odyssey (“we”, “us”) collects and uses personal data in connection with Kleos (the “Service”) and this website.

1. Data we collect

• Account data: your email address, name (if provided), workspace and role, and sign-in timestamps.
• Billing data: plan, subscription status and invoices. Card details are collected and stored by Stripe; we do not store full card numbers.
• Customer Content: product information, brand kits, knowledge sources, outreach contacts you add, prompts and generated outputs.
• Usage data: feature usage and metered consumption (for allowances and billing), audit events and technical logs (IP address, browser, timestamps).

2. How we use it

• To provide, secure and support the Service, including sign-in emails and service notifications.
• To meter usage, bill subscriptions and extra usage, and prevent abuse.
• To maintain audit trails of approvals and publications.
• To improve the Service using aggregated, de-identified usage information.

We do not sell personal data and do not use Customer Content to train our own foundation models.

3. Processors and sharing

We share data only with service providers acting on our instructions, including: Anthropic (AI writing and analysis), OpenAI (AI generation, image and speech processing), Stripe (payments), Resend (transactional email), Render (application hosting and databases), Cloudflare (DNS, networking and media storage) search-data providers such as DataForSEO (keyword, search-result and AI-assistant answer data — we send search terms and tracked questions, not your personal data) and Exa (web research on your brand’s public website and market — we send your domain and research queries, not your personal data). Content sent to AI providers is processed under their API data-usage terms. Businesses that need one can read our Data Processing Addendum, which is currently a draft.

3a. Connected accounts (integrations)

If you choose to connect a third-party account, Kleos accesses only what is needed to publish the content you approve or to show your performance data. We store access tokens encrypted (AES-256-GCM), use them only for the actions you request, and never sell or share data obtained from these platforms.

• LinkedIn: your basic profile (name, email, profile ID) and, if you grant it, the company pages you administer — to publish approved posts as you or your page.
• Facebook & Instagram (Meta): the Facebook Pages you manage and their linked Instagram Business/Creator accounts — to publish approved posts and images. We read page names and IDs; we do not read your personal feed, messages or friends.
• Google: depending on what you connect — Google Business Profile locations (to publish updates), Search Console search performance (clicks, impressions, queries) and Google Analytics 4 reports (sessions and key events by landing page). Access is read-only except publishing Business Profile updates you approve.
• X, Threads, Pinterest: your account ID, username and (for Pinterest) boards — to publish approved posts and pins.
• YouTube, TikTok: your channel or creator profile (ID, name, posting options) — to upload approved videos Kleos rendered. Google data is handled under the Limited Use terms below.
• Webflow, WordPress, Shopify, Wix, HubSpot, Ghost: your sites, blogs or CMS collections (and, for Wix, site members you choose as the post author) — to publish approved articles. Self-hosted WordPress and Ghost connections use an application password or Admin API key you create and can revoke at any time.
• Mailchimp, Kit, Klaviyo, ActiveCampaign, beehiiv, HubSpot email: your account, list/audience or publication names and sender defaults — to create, schedule or send approved newsletters. Kleos reads list names and IDs only; we do not export or copy your subscriber lists.

Google API Services: Kleos’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data from Google APIs is not used to develop, improve or train generalised AI or machine-learning models.

Revoking access: disconnect any integration under Settings → Integrations, which deletes the stored tokens immediately. You can also revoke Kleos in each platform’s settings (for example LinkedIn → Settings → Data privacy → Permitted services; Facebook → Settings → Business integrations; Google → myaccount.google.com/permissions). See Data deletion to delete all data Kleos holds about you.

4. International transfers

Our providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards such as standard contractual clauses.

5. Retention

We retain account and Customer Content for as long as your workspace is active. When a workspace owner deletes a workspace it is locked at once and can be restored for 30 days; after that everything it held is deleted, including stored files. We keep only what we must for legal, tax or security reasons: invoices and payment records, and an activity log with personal details removed. Backups held by our hosting provider expire on its standard schedule.

6. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict or port your personal data, and to object to certain processing. Workspace owners and admins can export everything in a workspace themselves, workspace owners can delete the workspace, and anyone can delete their own account, all under Your data in the app. Contact us to exercise other rights. You may also complain to your local data-protection authority.

7. Security

We use encryption in transit, hashed single-use sign-in tokens, role-based access control, tenant isolation and audit logging. No system is perfectly secure; please contact us if you believe your account has been compromised.

8. Cookies

The Service uses strictly necessary cookies for sign-in sessions and preferences. This marketing site does not use advertising cookies.

9. Changes

We will post updates to this policy here and, for material changes, notify workspace owners.

Contact

For privacy questions or requests, email clio@new-odyssey.com.

Businesses that need a data processing agreement can read our Data Processing Addendum (currently a draft).