Privacy Policy

Last updated: 28 April 2026

This Privacy Policy explains how Glitchlab Ltd ("we," "us," "our") collects, uses, and protects information when you use KLEERO ("the Service") through our website kleero.co, the KLEERO chatbot in Telegram and WhatsApp, and any related services.

1. Who we are

KLEERO is a product of Glitchlab Ltd, a company registered in Scotland.

• Company number: SC870130
• Registered office: Martha Street, 77 John Street, 15j, Glasgow, G1 1JF, United Kingdom
• Contact: hello@kleero.co

For data protection purposes, Glitchlab Ltd is the data controller of personal data processed through the Service.

2. Information we collect

When you interact with KLEERO we may collect:

Information you give us directly

• Messages you send to the bot (text, photos of receipts, location)
• Business type, cuisine type, and city you select
• Email address (if you sign up for early access or contact us)
• Your Telegram or WhatsApp user ID (provided by the messaging platform)

Information we collect automatically

• Approximate location (city level) when you share it with the bot
• Date and time of messages
• Technical data when you visit kleero.co: IP address, browser type, device type, pages viewed, referring URL
• Cookies and similar technologies (see Section 7)

We do not collect

• Phone numbers (beyond what is automatically shared by Telegram/WhatsApp)
• Payment card details (we currently do not process payments)
• Any "special category" data such as health, race, religion, sexual orientation

3. How we use your information

We use your information to:

• Provide the core Service (analyze receipts, suggest cheaper suppliers, predict food waste, prepare event plans)
• Respond to your messages and improve our recommendations
• Send you product updates if you opted in
• Operate, maintain, and improve the Service
• Comply with legal obligations

Receipt images. When you send a photo of a receipt, KLEERO processes it through our AI partners (OpenAI and Google Gemini) for text recognition. The image is deleted from our servers within 24 hours of processing. The recognized text and analysis results are retained for 30 days to provide your savings reports, then deleted.

Conversation history. Your messaging-platform user ID and message history are retained for 90 days to provide continuity of service and improve recommendations. After that, they are anonymized or deleted.

4. Legal bases (UK GDPR / EU GDPR)

We rely on the following legal bases:

• Contract — to deliver the Service you request
• Legitimate interest — to operate, secure and improve the Service
• Consent — for non-essential cookies, marketing emails, and optional analytics
• Legal obligation — to comply with applicable laws

You can withdraw consent at any time by emailing hello@kleero.co or, for cookies, by changing your settings in our cookie banner.

5. Sharing your information

We share information only with:

• Service providers (subprocessors) strictly necessary to deliver the Service:
• OpenAI, L.L.C. (United States) — receipt OCR and language processing
• Google LLC (United States) — Gemini API for image and text analysis
• Railway Corp. (United States) — hosting our bot infrastructure
• Vercel Inc. (United States) — hosting our website
• Microsoft Corporation (United States) — email infrastructure for hello@kleero.co
• Authorities when required by law (court order, regulatory request)
• Successors if we sell or restructure the business (you will be notified)

We do not sell your personal data. We do not share your data for third-party advertising beyond the analytics described in Section 7.

International transfers. Some of our subprocessors are based in the United States. When we transfer your personal data outside the UK or EEA, we rely on Standard Contractual Clauses approved by the European Commission and the UK Information Commissioner's Office, and we apply additional safeguards where appropriate.

6. Data retention

After these periods data is deleted or anonymized.

7. Cookies and analytics

When you visit kleero.co we use:

Strictly necessary cookies — required for the site to function (preference for language, etc.). These do not require consent.

Analytics cookies (with your consent)

• Google Analytics 4 — to understand how visitors use the site
• Meta Pixel — to measure the effectiveness of our Instagram and Facebook advertising

You can accept or reject these via the cookie banner shown on your first visit. You can change your choice at any time through the banner controls. Rejecting analytics does not limit your access to the Service.

8. Your rights

If you are in the UK, EEA, or California, you have the following rights:

• Access — request a copy of your data
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — request that we stop processing your data
• Portability — receive your data in a machine-readable format
• Object — object to processing based on legitimate interest or marketing
• Withdraw consent — at any time, where consent was the legal basis

If you are in Mexico, you have equivalent ARCO rights (Acceso, Rectificación, Cancelación, Oposición) under LFPDPPP.

If you are in California, you have rights under CCPA including the right to know what data we have and to request deletion.

To exercise any right, email hello@kleero.co. We respond within 30 days.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.

9. Security

We implement reasonable technical and organizational measures to protect your data, including encryption in transit (HTTPS/TLS), access controls, and secure infrastructure providers. No system is 100% secure; if a breach occurs that affects your rights we will notify you within 72 hours where required by law.

10. Children

The Service is not directed to anyone under 18. We do not knowingly collect data from minors. If you believe we have collected data from a person under 18, contact us at hello@kleero.co and we will delete it.

11. Changes to this Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest revision. Material changes will be communicated through the Service or by email where reasonable.

12. Contact

For privacy questions, requests, or complaints:

Glitchlab Ltd

Email: hello@kleero.co

Address: Martha Street, 77 John Street, 15j, Glasgow, G1 1JF, United Kingdom