This notice explains how Klinworks, LLC ("Klinworks," "we," "us") processes the personal information of California residents when they visit the agentceo.io website or use the Agent CEO application at app.agentceo.io (the "Service"), and what rights they have under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA").
Klinworks is a Delaware (United States) limited liability company, File No. 10704723, with its registered office at 131 Continental Drive, Suite 305, Newark, Delaware 19713.
This notice supplements the Privacy Policy and Part II of the GDPR and CCPA Notice. Anything not covered here is governed by those documents.
Contact for exercising your rights: privacidad@klinworks.com
1. Who This Notice Applies To
It applies to any California resident whose personal information we process as a business (controller): website visitors, people who join the waitlist or request a resource, and users of the Service.
It does not apply to the data our customers enter into the Service about their own customers, contacts or suppliers. There, we act as a service provider (processor) to the customer, who decides about that data. If you are a customer of one of our customers, direct your request to that company; if it reaches us, we will forward it to them or tell you whom to contact.
2. What Information We Collect
2.1 On the Website (agentceo.io)
- Waitlist: email address, language, source campaign (UTM parameters), the page you landed on, the site you came from (referrer), browser (user-agent), type of business if you choose to provide it, and the version of the notice shown to you when you signed up.
- Downloadable resources: email address and the resource you requested.
- Website assistant: we do not store your conversations on our server. They remain only in your browser for 7 days. To prevent abuse, we apply a daily cap on questions per IP address, and for that purpose we store a non-reversible digest (hash) of the IP address, never the IP address in plain text.
- Technical security logs generated by Cloudflare, our network and protection provider.
The website does not use analytics or advertising cookies.
2.2 In the Application (app.agentceo.io)
Your account data, billing data (payments are processed by Stripe; we do not store full card numbers), Service usage data and the business content you enter. The details are in Section 2 of the Privacy Policy, and the list of providers is at Subprocessors.
3. Categories Under the CCPA
| CCPA category | Do we collect it? | Examples | Source |
|---|---|---|---|
| Identifiers | Yes | Email address; in the app, also account data | You |
| Internet or other similar network activity | Yes | Landing page, source campaign, referrer, browser, security logs; in the app, use of the Service | Your browser |
| Commercial information | Yes, in the app only | Subscribed plan, purchases and credits | You, when subscribing |
| Professional information | Yes, if you provide it | Type of business (optional on the website); company and role in the app | You |
| Content you upload to the app | Yes, in the app only | Documents, tasks, conversations with the agents | You |
| Precise geolocation | No | — | — |
| Biometric information | No | — | — |
| Inferences to create a profile about you | No | — | — |
Sources: directly from you and from your browser when you visit the website or use the Service. We do not purchase personal information from third parties.
4. Sensitive Personal Information
The website does not ask for sensitive personal information.
[PENDIENTE: confirm whether the app processes sensitive personal information within the meaning of the CPRA (for example, account login credentials) and, if so, for what purposes and whether any of them requires offering the right to limit its use.]
5. What We Use the Information For
- Managing the waitlist and notifying you of the launch.
- Sending you the resource you requested.
- Understanding which campaigns and pages generate interest, without third-party analytics tools.
- Providing, billing for and supporting the Service.
- Protecting the website and the Service against abuse, fraud and attacks.
- Complying with legal and tax obligations.
The purposes of the Service are detailed in Section 3 of the Privacy Policy.
6. We Neither Sell Nor Share
We do not sell personal information, nor do we "share" it for cross-context behavioral advertising, as the CCPA defines those terms. This includes consumers under 16 years of age.
Global Privacy Control (GPC). If your browser sends the GPC signal, we treat it as a valid request to opt out of the sale or sharing of your personal information, without you having to do anything else.
You can also use the Do Not Sell or Share My Personal Information page.
7. Who We Disclose It To
We disclose personal information only to service providers that help us operate the website and the Service (infrastructure, database, payments, email, AI models), under contracts that prohibit them from using it for their own purposes. The current list is at Subprocessors.
In addition, we may disclose it to authorities when required by law, or to advisors or acquirers in a corporate transaction, as set out in Section 5 of the Privacy Policy.
8. How Long We Retain It
| Information | Retention |
|---|---|
| Waitlist and resource leads | [PENDIENTE: exact period] |
| IP hash for the assistant cap | [PENDIENTE: exact period] |
| Website assistant conversations | We do not store them; your browser deletes them after 7 days |
| App account and content | For as long as your account is open |
| Content after the account is closed | 30 days to export, then deletion |
| Security and access logs | Up to 12 months |
| Billing data | The period required by applicable tax law |
The app retention periods come from Section 7 of the Privacy Policy, which controls in case of doubt.
9. Your Rights
As a California resident, you have the right to:
- Know and access: what personal information we hold about you, where it comes from, what we use it for and with whom we share it, and receive a copy.
- Delete: ask us to delete it, subject to the exceptions permitted by law (for example, what we must retain under tax obligations).
- Correct: rectify inaccurate information.
- Opt out of sale or sharing: object to the sale or sharing of your information. We currently do neither, but the right is still yours.
- Limit the use of sensitive information: ask that it be used only for what is strictly necessary to provide the Service to you.
- Non-discrimination: we will not give you a worse service or a different price for exercising any of these rights.
10. How to Exercise Them
10.1 Request. Write to privacidad@klinworks.com stating which right you are exercising. It is free of charge.
10.2 Verification. Before providing or deleting information, we will verify that it is you. We will normally ask you to reply from the email address you signed up with or to sign in to your account. We will use the verification data only for that purpose.
10.3 Authorized agent. You may ask another person to act on your behalf. We will ask them for a permission signed by you and may ask you to confirm your identity directly with us.
10.4 Timeframe. We will confirm receipt and respond within 45 days, extendable by another 45 when necessary, with notice to you before the first period expires.
11. Children
The Service is not directed to minors and, in particular, we do not knowingly collect information from children under 13 (federal COPPA law). If we discover that we have it, we delete it. The Privacy Policy also sets the minimum age to use the Service.
12. Changes to This Notice
We will review it at least once a year and whenever what we collect or how we use it changes. The date in the header indicates the latest version.
Contact
Klinworks, LLC 131 Continental Drive, Suite 305 Newark, Delaware 19713, United States
- Privacy rights: privacidad@klinworks.com
- Legal matters: legal@klinworks.com