How KlientLab collects, uses, and protects your information.
Effective date: March 25, 2025 · Last updated: September 26, 2026
KlientLab is a product of Our Creative Works ("we," "us," or "our"), providing client workspaces for consultants. This Privacy Policy explains how we collect, use, and protect information when you use our website and services at klientlab.com.
Account information: When you register, we collect your name, email address, and password (stored as a one-way hash). You may optionally add a company name, phone number, and address.
Billing information: If you subscribe to a paid plan, billing is handled entirely by Stripe. We store your Stripe customer ID and subscription status but do not store full card numbers or CVVs. Payment event records can contain billing details supplied by Stripe.
Content you create: Project data, quotes, invoices, messages, tasks, and any other content you create or upload while using the service.
Client data: When you invite clients to KlientLab, we collect their name and email address on your behalf. You are the data controller for your clients' information.
Usage data: We log standard server access data (IP address, browser type, pages visited, timestamps) to monitor security, diagnose errors, and improve the service.
We use the information we collect to:
We do not use your data for advertising, and we do not sell or rent your personal information to any third party.
We share information only in the following limited circumstances:
Stripe: Payment processing for subscriptions and invoice payments. Stripe has its own Privacy Policy.
Cloud storage: Project and library files use private storage. Downloads require an authorized account or a short-lived signed download link. Branding images are public so they can appear in your client-facing documents.
Email delivery: Transactional emails are sent via SMTP. Email addresses are passed to the mail service only for delivery and are not used for any other purpose.
Legal requirements: We may disclose information if required to do so by law or in response to valid requests by public authorities.
We do not share your data with advertisers, analytics platforms, or data brokers.
KlientLab uses hosting and storage providers to operate the service. We use industry-standard security measures including HTTPS encryption in transit, hashed passwords, CSRF protection, and rate limiting on authentication endpoints.
No method of transmission over the internet or electronic storage is 100% secure. While we implement commercially reasonable safeguards, we cannot guarantee absolute security.
Project, task, and library downloads are checked against your workspace or assigned client access. Cloud download links expire after five minutes. Anyone with a valid download link can use it until it expires; do not forward it to someone who should not receive the file.
Your storage quota depends on your plan: uploads are unavailable on Free; Pro includes 50 GB and Business includes 500 GB. You are responsible for ensuring that files you upload do not violate any laws or third-party rights.
We use a session cookie to keep you logged in and an optional remember-me cookie when you select that feature. In production, authentication cookies use HttpOnly, Secure, and SameSite=Lax attributes and contain authentication identifiers rather than your account details.
We do not use advertising cookies, tracking pixels, or third-party analytics scripts. We do not use Google Analytics or similar services.
We use first-party measurement on our own server to understand which sources bring new workspaces and whether they create a project or invite a client. We use the existing session to associate a visit with a broad referral source, approved campaign labels, and a public landing page. If you sign up in that session, we associate these milestones with your workspace. This measurement does not store IP addresses, full referring URLs, email addresses, or project content, and does not add advertising cookies or third-party analytics scripts. Measurement records expire after 90 days and are removed during subsequent measured visits. We respect Do Not Track and Global Privacy Control signals for this measurement.
Your theme preference (device theme, light, or dark) is stored in localStorage on your device and never transmitted to our servers.
You have the right to:
To exercise any of these rights, email us at [email protected]. We will respond within 30 days.
We retain workspace data while your account is active. Canceling a paid subscription does not delete your account or files. Contact [email protected] to request account closure, arrange an export, and confirm the deletion process. Our support team handles deletion requests, including stored files; the application does not automatically purge cloud files.
Some records may need to be retained for billing, security, or legal obligations. Backup copies remain subject to backup rotation. Server access logs are managed under our hosting provider's retention settings. Contact us for the retention details that apply to your request.
KlientLab is not directed to children under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify you by email or via a notice in the service.
Your continued use of KlientLab after any changes constitutes your acceptance of the updated policy.
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
KlientLab
Email: [email protected]