1. Overview
Klyro ("we", "us", "our") gives Shopify merchants AI employees, with one isolated container per store. It is operated by Capaxe Labs. This policy explains what data we collect, why we collect it, how we protect it, and your rights as a user.
2. Data We Collect
2.1 Account Data
| Field | Source | Purpose |
|---|---|---|
| Email address | Google OAuth | Account identification, login |
| Display name | Google profile | Shown in the UI and audit logs |
| Profile picture URL | Google profile | Avatar in the dashboard |
| OAuth provider ID | Google OAuth | Single sign-on link |
2.2 Security & Authentication Data
| Field | Purpose |
|---|---|
| SSH public keys | Secure shell access to your instance |
| 2FA (TOTP) secret | Two-factor verification, stored hashed and never exposed via API |
| JWT access & refresh tokens | Stateless API session management |
2.3 Instance & Infrastructure Data
When you create and manage an instance, we store:
- Instance configuration: name, subdomain, plan tier, resource allocation, datacenter region
- Domain records: custom domains and SSL certificate status
- Store and file credentials: generated per instance, stored encrypted, never returned in API responses
- Integration tokens (optional): Telegram, Slack, Discord, used only for the notifications you set up
- Backup metadata: type, status, size, expiry. Backup contents live in encrypted object storage
2.4 AI Agent Data
If you use Klyro's AI agents:
- Agent configuration: name, role, system prompt, schedule
- Task and message history: titles, descriptions, priority, status, and agent-to-user messages
- Agent activity logs: timestamped records for debugging and traceability
2.5 Audit & Activity Logs
Every significant action on the platform generates an immutable audit event containing:
| Field | Example |
|---|---|
| Action performed | site.create, domain.add, backup.restore |
| Actor identity | Email, actor type (user, agent, system) |
| IP address | Client IP at the time of the action |
| User agent | Browser or client identifier |
| Resource affected | Type, ID, and name |
| Outcome | Success, failure, or error with HTTP status |
2.6 File Activity Logs
SFTP and file-management operations are logged with the action type (upload, download, delete, rename), file path, file name, file size, acting user, and timestamp.
2.7 Data We Do NOT Collect
No third-party analytics
No Google Analytics, Mixpanel, Hotjar, or tracking SDKs
No cookies
Auth uses JWT bearer tokens sent as HTTP headers
No advertising data
We don't run ads or build advertising profiles
No storefront visitor tracking
We never log or analyse traffic to your Shopify store
3. How We Use Your Data
| Purpose | Data used |
|---|---|
| Account management | Email, name, avatar |
| Authentication | OAuth credentials, JWT tokens, 2FA secrets |
| Instance operations | Instance config, credentials, server assignment |
| Security & compliance | Audit logs, IP addresses, user agents |
| Agent automation | Agent config, task history, activity logs |
| Notifications (opt-in) | Integration tokens for Telegram, Slack, Discord |
4. Data Storage & Security
INFRASTRUCTURE
- Hetzner Cloud (EU, Germany)
- PostgreSQL with TLS-encrypted connections
- One isolated container per store, with its own storage
- Backups encrypted at rest
ACCESS CONTROLS
- Sensitive fields excluded from all API responses
- JWT tokens signed with HMAC-SHA256
- SSH keys stored as public keys only
- Per-instance credential isolation
5. Data Sharing & Third Parties
| Third party | Data shared | Purpose |
|---|---|---|
| Email and profile, initiated by you | Authentication only | |
| Hetzner Cloud | Server and container metadata | Infrastructure hosting |
| Shopify | Requests made with the Admin API token you create | Reading and acting on your store |
| AI model providers | Agent prompts and task context | AI agent execution |
We do not sell your data, share it with advertisers, provide it to data brokers, or share audit logs outside your team.
6. Data Retention
| Data type | Retention |
|---|---|
| Account data | Until you delete your account |
| Audit events | Immutable, retained permanently for compliance |
| File activity logs | Kept for the lifetime of the associated instance |
| Instance data & credentials | Deleted when you terminate an instance |
| Backups | Auto-expire based on your plan's backup window |
| JWT tokens | In memory only, expire per the configured window |
7. Your Rights
Access
View all personal data we hold via your dashboard and API
Rectification
Update your name and profile information in Settings
Deletion
Request account deletion. Your user record is soft-deleted and every instance is terminated. Audit logs are immutable and will not be deleted.
Data portability
Export your instance data over SFTP or a backup download at any time
Restrict processing
Contact us to restrict specific processing activities
8. Children's Privacy
Klyro is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we discover that we have collected data from a child, we will delete it promptly.
9. Changes to This Policy
We may update this policy from time to time. Material changes are announced in the Klyro dashboard and by email. The "Last updated" date at the top always reflects the most recent revision.
10. Contact
For privacy questions, data access requests, or to report a concern:
Capaxe Labs
Audit trail integrity
You can check your audit trail at any time from the Activity Logs page. Each event shows its SHA-256 checksum and a link to the previous event in the chain.