Privacy
Your brand, your files, your call.
Klaspr needs an account to save your work and run generations. This page explains what we hold, why we hold it, and how you get it back or delete it.
Who is responsible
Klaspr is the data controller for the personal data described here. You can reach us at privacy@klaspr.com for any question or request about your data.
Account data
We store your email address, workspace name, profile handle, plan, credits and your onboarding answers so you can sign in and so your plan and credits work. Billing is currently disabled; we do not collect payment card details. Legal basis: the contract between you and Klaspr.
Your projects and files
References, product images, brand settings, your brand website, avatars and generated outputs are stored in private storage on our servers so they are available across your devices. They are not shared with other customers. Files are delivered to you through private links that expire.
Photos of people
If you upload a photo of a person to create an avatar or as a reference, we use it only to produce your own generations. We do not use it to identify anyone, build a face database or train models, and it is deleted with the project or your account. Only upload photos of yourself, or of people who have agreed to it.
Generation and AI providers
When you run a generation or import a product, we send only what that request needs (the prompt, the selected images and the relevant product or brand text) to the providers below. Images reach them through links that expire within hours. Their retention and training terms depend on each provider and its API agreement.
- Higgsfield (United States): image and video generation, avatars.
- Google Gemini (United States): watching a reference ad you upload to clone it.
- Anthropic (United States): writing video and avatar prompts.
- DeepSeek (China): reading product pages and brand websites, writing prompts. It receives text only, never your photos.
- EvoLink (outside the EU): image and video generation for some formats, and watching a reference ad when Google is unavailable.
These providers process data outside the European Union. Legal basis: the contract, since you ask for the generation.
Hosting and analytics
Your account, database and files are hosted by Supabase in Ireland (EU). The website runs on Vercel, whose network may process requests outside the EU.
With your permission, PostHog (EU servers) receives usage events, errors and an account identifier to help us understand activation and failures. Clicks are counted without the text or links they contain, we do not send your email for analytics, and session recordings are disabled. You can decline analytics without losing access, and change your choice below. Browser analytics identifiers are kept for up to one year. Legal basis: your consent.
Security and abuse prevention
We keep short technical logs and per-account usage counters to protect the service, stop abuse and limit costly requests. Legal basis: our legitimate interest in keeping Klaspr secure.
How long we keep data
We keep your account and workspace for as long as your account exists. Deleting a project or a media item removes it from your workspace. Deleting your account removes your workspace, its files, your account record and your analytics profile and events. Billing records we are legally required to keep are the exception.
Your rights
You can access, correct, export or delete your data, object to its processing, and withdraw your analytics consent at any time. Write to privacy@klaspr.com; we answer within one month. If you think we have not respected your rights, you can complain to the CNIL (cnil.fr) or your local data protection authority.
Last updated · October 2026