1. Scope and controller
Klayvora, a service offered by Aurelius RE, LLC is responsible for the personal information described in this notice. This notice applies to the Klayvora website, portal, support, sales, calls, and verification services. It does not govern a customer's own website or a third party's independent practices.
2. Information we collect
- Identity and account data, including name, business email, authentication identifier, role, and account security events.
- Business and request data, including company name, public website, phone number, selected lead paths, scope, authorization records, notes, messages, and support requests.
- Verification evidence, including public URLs, timestamps, screenshots, device and browser context, synthetic test identifiers, observed results, and customer-supplied destination confirmation when separately authorized.
- Transaction data from Stripe, including product, amount, currency, payment status, customer and subscription references, and billing events. Klayvora does not receive or store full payment-card numbers.
- Communication data, including emails, call metadata, and opt-out or suppression records. Calls are not recorded at launch. If recording is later enabled, this notice and the required state-specific notice and consent controls must be updated before recording begins.
- Technical data, including IP-derived security information, browser and device data, logs, cookies needed for authentication, fraud signals, and diagnostic records.
3. Sources
We collect information from you and your authorized representatives, from your use of the portal, from public business websites and records used to scope a request, from the website or destination you authorize us to test, and from service providers such as authentication, payment, hosting, communication, and security vendors.
4. How we use information
- Create and secure accounts; verify identity and authority; and prevent misuse.
- Review scope, perform authorized checks, generate evidence, deliver reports, and provide retests and support.
- Process one-time and recurring payments, administer subscription entitlements, and maintain transaction records.
- Send service, security, billing, legal, and customer-requested communications.
- Troubleshoot, audit, measure reliability, enforce policies, comply with law, and establish or defend legal claims.
- Improve workflows and service quality using minimized or de-identified operational information where practical.
5. When we disclose information
We disclose information to vendors that provide authentication, database, hosting, file storage, payment, email, telephony, CRM, logging, security, and professional services. They receive information only for their contracted role and are expected to protect it.
We may disclose information when reasonably necessary to comply with law, protect rights or safety, investigate fraud or security incidents, complete a corporate transaction, or follow your instructions. We do not sell personal information for money or use customer request content for unrelated third-party advertising.
6. Cookies and analytics
The testing release uses cookies and similar storage required for authentication, session security, account preferences, and form continuity. Non-essential advertising or cross-site tracking is not part of the approved launch configuration. If non-essential analytics or advertising tools are added, this notice and any required consent controls must be updated before use.
7. Retention
The launch retention schedule keeps account, authorization, order, payment, and core audit records for up to seven years after the related transaction or account closure; verification evidence and delivered reports for up to three years; ordinary technical logs for up to twelve months; and active suppression records for as long as needed to honor an opt-out. Records may be kept longer when required by law, a dispute, security investigation, or a customer's documented instruction.
We delete or de-identify information when the applicable period and legitimate need end.
8. Security
We use administrative, technical, and organizational safeguards designed for the information and service, including access controls, authentication, encrypted transport, scoped provider credentials, audit records, and data minimization. No system can guarantee absolute security. If an incident creates a legally reportable risk, we will investigate and provide notices required by applicable law.
9. Your choices and requests
You may request access, correction, deletion, or a copy of information associated with your account by contacting privacy@klayvora.io. You may also object to or restrict certain processing where applicable. We may verify the request, preserve records required by law or legitimate claims, and deny requests where an exception applies.
Marketing opt-outs are honored separately from essential account, security, billing, and service messages. Contact support@klayvora.io to close an account or cancel future subscription renewal.
10. State and international privacy rights
Residents of certain states may have additional rights under applicable privacy laws. Klayvora will honor verified requests where those laws apply and will not discriminate for exercising a protected right. The launch service is directed to United States businesses; do not submit information governed by non-U.S. law without written approval.
11. Children and sensitive data
Klayvora is not intended for children under 18 and does not knowingly collect their information. Do not submit Social Security numbers, government identifiers, health information, financial account credentials, payment-card numbers, private inbox credentials, or other sensitive personal information through free-text fields.
12. Changes and contact
Material changes will be posted with a new date and presented for renewed consent when required. Draft last updated August 31, 2026.
Privacy questions and requests: privacy@klayvora.io. Mailing address: 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, USA. General support: support@klayvora.io.