Legal

Privacy Policy

Last updated: 22 May 2026

This Privacy Policy explains how Klovex ("Klovex", "we", "us") collects, uses, stores and protects information when you use the Klovex platform ("Service") at https://klovex.xyz. Klovex is a software company registered in Poland.

1. Who we are

Klovex provides tools for performance-marketing teams to manage paid advertising campaigns across third-party ad platforms (including TikTok, Meta and Google Ads) through those platforms' official marketing APIs.

For any privacy-related question you can reach us at privacy@klovex.xyz.

2. Information we collect

2.1 Account information

When you sign up we collect the information you provide directly: your name, work email, company name and the role you have within that company.

2.2 Information from connected ad platforms

When you connect an ad account (for example a TikTok For Business advertiser account) through OAuth, we receive an access token that lets us read and act on that account on your behalf, strictly within the scopes you authorize. With that token we may read:

• advertiser account metadata (account id, name, currency, status);
• campaign, ad group and ad configuration;
• performance metrics (impressions, clicks, spend, conversions and related reporting fields);
• creative metadata associated with the campaigns you authorize.

We do not collect personal data about the end-users who see those ads.

2.3 Usage data

We collect basic technical information about how you use Klovex — browser type, device type, pages visited, timestamps and IP address — to operate the Service, prevent abuse and improve usability.

3. How we use information

We use the information described above to:

• operate, maintain and improve the Klovex Service, including synchronizing data with the ad platforms you have connected;
• present analytics, reports and management features to you within your Klovex workspace;
• authenticate you, secure your account and prevent unauthorized access;
• respond to your support requests and communicate operational notices;
• comply with legal and regulatory obligations.

4. Use of TikTok data specifically

When you connect a TikTok For Business advertiser account, Klovex accesses TikTok data solely under the access token you authorize and only for the purpose of providing the Service to you. Specifically:

• we access TikTok advertiser data only on behalf of users who have completed the official TikTok OAuth consent flow for the specific advertiser account;
• we do not sell, rent or otherwise transfer TikTok data to third parties beyond what the advertiser has explicitly approved;
• we do not use TikTok data to retarget users, build advertising profiles or train machine-learning models outside of the features you use inside Klovex;
• we comply with the TikTok For Business Developers Terms of Service and applicable platform policies.

You may revoke Klovex's access to your TikTok account at any time either from within Klovex (Settings → Connected accounts → Disconnect) or directly in your TikTok For Business account.

5. Sharing and disclosure

We do not sell personal information. We share information only in the following limited cases:

• Service providers — infrastructure, hosting, database and email vendors that process data on our behalf under a written data-processing agreement (for example, our hosting provider and our managed database provider).
• Legal compliance — if required by law, court order or to protect the rights, safety or property of Klovex, our users or the public.
• Business transfers — if Klovex is involved in a merger, acquisition or sale of assets, your information may be transferred subject to the same protections described in this Policy.

6. Data retention

We retain account information for as long as your Klovex account is active. When you delete your account or disconnect an ad platform, the corresponding access tokens are revoked and the platform data we cached on your behalf is deleted within 30 days, unless we are required to retain specific records to meet a legal obligation.

7. Security

We use industry-standard measures to protect your data: HTTPS everywhere, encryption of access tokens at rest, principle-of-least- privilege access for our team, and audit logging of administrative actions. No system is ever 100% secure, but we treat the security of the data you entrust to us as one of our highest priorities.

8. Your rights

Depending on where you are located (in particular within the European Economic Area), you have rights to access, correct, delete, restrict the use of, or port your personal data, and to withdraw consent at any time. You can exercise these rights by emailing privacy@klovex.xyz; we will respond within the timelines required by applicable law.

9. International transfers

Klovex is based in Poland (European Union). Some of our service providers may process data outside the EU. Where that is the case we rely on appropriate safeguards (Standard Contractual Clauses or equivalent mechanisms) to protect your information.

10. Children

Klovex is a business-to-business product. It is not directed to children under 16 and we do not knowingly collect data from them.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email.

12. Contact

Klovex
Registered in Poland
Email: privacy@klovex.xyz