Privacy Policy
This policy explains what Klovera, operated by Internet Mastery (“we”, “us”), collects when you use the studio at app.klovera.ai and the services behind it, and what we do with it.
1. What we collect
- Account: your email address, the name you give, your plan, and your credit balance and history.
- Sign-in: a session cookie (
klv_sid, httpOnly, 30 days) and one-time sign-in links. We store only a one-way hash of each, never the link or cookie itself. - Your work: the scripts, images, audio, video and records (people, products, places) you create or upload.
- Connected platforms: if you connect TikTok, Instagram, Facebook, YouTube or LinkedIn, the access tokens needed to publish for you and the account name to show which is connected.
- Purchases: from our checkout (SamCart), the email, product and order details needed to grant your plan and credits. We do not receive or store card numbers.
- Usage and logs: what you ran, when, what it cost, IP address and browser, for operating, securing and billing the Service.
2. How we use it
- To run the Service: make what you ask for, sign you in, keep your work private to your account.
- To charge credits accurately and prevent abuse (including sign-in rate limits).
- To publish to your connected accounts, only when you tell us to.
- To email you sign-in links, invitations, and notices about your account.
- To fix problems and improve the Service.
3. Who it is shared with
Only with the providers that do the work, and only what each needs:
- AI providers — Anthropic (writing), fal.ai (video and images), ElevenLabs (voices), Submagic (captions) — receive the content of the job you run.
- Infrastructure — Cloudflare (hosting and file storage), Neon (database), Resend (email), SamCart (checkout).
- Social platforms, when you choose to publish to them.
We do not sell your information and do not share it with advertisers.
4. Retention
Your work and account data are kept while your account is open. Connected-platform tokens are kept until you disconnect. Operational logs are kept for up to 90 days; billing records for as long as the law requires. Nightly database backups are kept for 14 days.
5. Security
Traffic is encrypted, sign-in secrets are stored only as hashes, and each account can see only its own work. No system is perfectly secure; tell us at once if you think your account has been misused.
6. Your choices and rights
You can ask to see, correct, export or delete your data, or close your account, by writing to [email protected]. You can disconnect any social platform at any time, which revokes our access.
7. Children
The Service is not for anyone under 18, and we do not knowingly collect their data.
8. Where it is processed
The Service and its providers process data in the United States and other countries where they operate.
9. Changes
We will post changes here and tell you by email before any material change.