Privacy Policy

Klyna is an indie studio. We do not have an ads team, a growth team, or a data-science team. Almost nothing about you reaches our servers, and the small amount that does is described here in plain English.

1. The short version

• No third-party analytics on klyna.dev. No Google Analytics, no Plausible, no Fathom.
• No tracking cookies. The only cookie we set is a session cookie on the admin panel.
• BYOK keys (OpenAI, Groq, Gemini, etc.) are stored inside your WordPress or Shopify install. They are never proxied through, copied to, or logged by klyna.dev.
• We do not see your site's posts, products, customers, orders, search queries, or AI prompts. Klyna tools run inside your environment.

2. What we DO collect

2.1 Anonymous install pings

When a Klyna plugin or app activates, it sends one ping per day to pings.klyna.dev. The payload is:

• product slug (e.g. klyna-seo)
• plugin/app version
• host platform version (WordPress 6.7, Shopify 2025-07, etc.)
• site locale (en_US)
• a one-day hash — sha256(site_url + daily_salt) — so we can count one site once per day without knowing which site it is

The country is derived from the request IP at the edge and the IP itself is dropped before anything is written to disk. Raw pings are kept for 7 days, then aggregated and deleted. You can opt out completely by defining KLYNA_NO_PINGS in wp-config.php or setting the equivalent Shopify metafield.

2.2 Downloads

When you download a plugin zip or extension from klyna.dev, our CDN logs the request (IP, timestamp, user-agent) for 24 hours of abuse protection. After that the logs are deleted.

2.3 Support and contact

When you email hello@klyna.dev or security@klyna.dev, or use the form on /contact, we store the message, your email address, and any attachments you send. We keep that thread for as long as it takes to help you, and we archive it after.

2.4 Admin panel

The admin panel at klyna.dev/admin is for the studio operator only. It stores the operator's email, an argon2id-hashed password, WebAuthn credentials, and an append-only audit log of admin actions.

3. What we DO NOT collect

• Visitor analytics on klyna.dev (no pageviews, no sessions, no fingerprints).
• BYOK API keys (they never leave your WordPress / Shopify database).
• Your site's content: posts, products, customer records, orders, drafts.
• Search queries you make inside our plugins.
• The prompts or completions you send to AI providers via our BYOK flow.
• Long-term IP addresses (we drop them at the edge before writing).

4. Third parties that touch the data

See the DPA for the full sub-processor list. In short: Vercel hosts the static site, Cloudflare runs DNS and the ping edge, and Resend delivers transactional email. We do not share data with advertisers or data brokers, ever.

5. Your rights (GDPR / UK GDPR)

If you are in the EU, EEA, or UK, you have the right to:

• ask what we have about you (access)
• ask us to correct it (rectification)
• ask us to delete it (erasure)
• ask us to stop processing it (restriction / objection)
• get an export of it in a portable format (portability)
• complain to your supervisory authority if we get it wrong

Because we collect so little, most of these requests resolve in one email. Email privacy@klyna.dev and we will reply within 30 days. Our lawful basis for the install ping is legitimate interest (knowing how many sites use each tool so we can support them), and you can opt out at any time.

6. Your rights (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect, the right to delete it, the right to correct it, and the right to opt out of any sale or sharing. We do not sell or share personal information. Email privacy@klyna.dev to exercise these rights.

7. Children

Klyna tools are aimed at developers and business owners. They are not directed at children under 13 (or under 16 in the EU). If you believe a child has sent us personal information, email us and we will delete it.

8. Changes

If we change what we collect or who we share it with, we'll update this page and bump the "Last updated" date.

9. Contact the data controller

The data controller for klyna.dev is the studio operator, based in Islamabad, Pakistan. Contact: privacy@klyna.dev.