Privacy Policy

Privacy at a glance

A plain-language summary of what we process and why. The numbered sections below are the full detail.

• You can access, export, correct, delete, or object to processing. See "Your rights" below.
• We never sell personal data.

1. Who we are

Kleos is an influence operating system provided by Arthea LLC ("Arthea", "we", "us"). This Privacy Policy explains what personal data we collect, how we use it, and the choices you have. It applies to kleos.arthea.ai and the Kleos application.

For data-protection questions, contact our privacy team via the link at the foot of this page at privacy@arthea.ai (EU/UK data-subject requests are handled at the same address).

2. Information we collect

• Account data: name, work email, company and role when you create an account or request a demo.
• Usage data: how you interact with the product, device and browser information, and log data.
• Customer data: the creator records, campaigns, messages and commerce data you choose to manage in Kleos.
• Billing data: company billing details, processed by our payment provider; we do not store full card numbers.

3. How we use information

We use personal data to provide and improve the service, authenticate users, deliver support, communicate about the product, ensure security, and meet legal obligations.

• Operate, maintain and improve Kleos.
• Provide attribution, reporting and AI features.
• Detect, prevent and respond to fraud or abuse.
• Send service and, where permitted, marketing communications you can opt out of.

4. Creator and commerce data

When you connect platforms such as Shopify or run campaigns, Kleos processes creator and order data on your behalf as a processor. You are the controller of that data and remain responsible for the lawful basis of its processing.

5. Sharing and disclosure

We do not sell personal data. We share data only with service providers (subprocessors) who help us run the platform under contract, when required by law, or as part of a corporate transaction. Our current subprocessors, including AI providers, are listed on our Subprocessors page (/legal/subprocessors).

6. Cookies, analytics and advertising

We use essential cookies to run the site and a limited set of analytics to understand usage. You can control non-essential cookies through your browser or the consent controls where presented.

Advertising and conversion measurement (consent-gated). Where you consent, we use the Meta Pixel and Meta Conversions API, the TikTok Pixel, and Google Ads tags to measure ad performance and conversions. As part of this, we transmit a limited set of data (including your email address hashed with SHA-256, your IP address, and your browser user-agent) to Meta for ad and conversion measurement; TikTok and Google receive comparable signals. This is a controller-to-controller transfer: Meta, TikTok and Google act as independent data controllers for the data they receive and process it under their own privacy policies. The legal basis is your consent, which you can withdraw at any time through the cookie/consent controls; withdrawing consent stops these transfers going forward. We do not transmit this advertising data when you have not consented.

7. Data retention

We keep personal data only as long as needed to provide the service and meet legal obligations. Customer data is retained for the term of your agreement and deleted or returned on request afterwards.

8. Security

We apply administrative, technical and organizational measures designed to protect personal data, including encryption in transit, access controls and audit logging. No method of transmission is perfectly secure.

9. International transfers

Arthea operates remotely with hubs in the EU and Malta. Where data is transferred across borders, we rely on appropriate safeguards such as Standard Contractual Clauses.

10. Your rights

Depending on your location (including under the GDPR/RGPD and similar laws), you may have rights to access, correct, delete, port or restrict the use of your personal data, to object to certain processing, and to withdraw consent at any time. To exercise these rights, contact us via the link below; we respond within the timeframe the law requires and will not discriminate against you for exercising them. You also have the right to lodge a complaint with your local supervisory authority.

Creators: where Kleos surfaces public creator profile data for discovery, the creator may object to that processing or request removal/suppression of their data. We honor valid requests and keep provenance of where creator data originated. See our Acceptable Use & Content Policy for how to ask.

11. Children

Kleos is a business tool not directed to children, and we do not knowingly collect personal data from anyone under 16.

12. Changes

We may update this policy from time to time. Material changes will be posted here with an updated date.