Privacy Policy

KLYXA International LLC

Effective Date: April 2025

1. Introduction

KLYXA International LLC (“KLYXA”, “we”, “us”, or “our”) is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, process, and safeguard the personal data of users (“User”, “you”, “your”) of our online platform available at klyxa.com and associated services (collectively, the “Platform”). This Policy applies to both Users making bookings and the independent service providers (“Operators”) listing services on the Platform.

Please read this policy carefully. By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with our policies and practices, please do not use the Platform.

2. Data Controller

The data controller responsible for your personal data is:

KLYXA International LLC

1209 Mountain Road Pl NE STE N

Albuquerque, New Mexico 87110

United States of America

For any privacy-related questions or requests, please contact us via our contact form: https://klyxa.com/contact or email us at [Insert Dedicated Privacy Email Address, e.g., [email protected], if available].

3. Information We Collect

We collect information to provide and improve our Platform and services. The types of personal data we collect depend on your interaction with us (e.g., whether you are a User making a booking or an Operator listing services):

3.1 Data You Provide Directly:

Account Information: Name, email address, phone number, password (hashed).
Booking Information (Users): Details of reservations made, dates, times, specific requests, booking history.
Operator Listing Information (Operators): Business name, contact details, service descriptions, pricing, availability, house rules, bank account or payout details (processed via Stripe Connect), required licenses or permits (if applicable).
Payment Facilitation Information (Operators): Information required to onboard you onto Stripe Connect for payouts, which may include identity verification details processed directly by Stripe. KLYXA may have access to certain details provided via Stripe Connect for platform operation and support.
Communications: Information you provide when you contact customer support, participate in surveys, provide reviews or feedback, or otherwise communicate with us or other users through the Platform.
Optional Information: Information you choose to provide voluntarily, such as a profile picture or billing address.

3.2 Data We Collect Automatically:

Usage Information: Details of your interactions with the Platform, such as pages viewed, features used, searches performed, bookings made, time spent on pages, clicks, and other actions.
Log Data and Device Information: IP address, access dates and times, hardware and software information, device type, device event information (e.g., crashes, browser type), unique identifiers.
Location Information: Approximate location derived from your IP address or more precise location if enabled on your mobile device (with your consent).
Cookies and Similar Technologies: Information collected via cookies, web beacons, pixels, and other tracking technologies (see Section 7 below).

3.3 Payment Transaction Information:

When you make or receive payments through the Platform (Users making bookings, Operators receiving payouts), payment details are primarily collected and processed securely by our third-party payment providers (e.g., Stripe). While we do not store full credit card numbers or CVV codes on our servers, we may receive or store transaction details such as the payment method used, date and time, payment amount, billing postcode, and other related transaction details necessary for processing, record-keeping, and support. Users making payments are also subject to the privacy policies of the respective payment processors.

4. How We Use Your Information

We use the information we collect for various purposes, including:

To Provide and Manage the Platform: Create and manage user accounts, facilitate bookings between Users and Operators, process payments and payouts.
To Communicate: Send booking confirmations, reminders, support messages, administrative information, security alerts, and respond to your inquiries.
To Personalize Experience: Customize content and user experience based on your preferences and interactions.
For Security and Fraud Prevention: Verify identity, monitor for fraudulent or malicious activity, enforce our Terms of Use, and protect the rights and safety of KLYXA, our users, and the public.
For Analytics and Improvement: Analyze usage trends, monitor the effectiveness of our Platform, develop new features, and improve our services.
To Comply with Legal Obligations: Fulfill legal requirements, respond to lawful requests from public authorities, maintain financial records, and resolve disputes.
For Marketing (with Consent): Send promotional messages, newsletters, and information about products or services we think may interest you (you can opt-out at any time).

5. Legal Basis for Processing (for EEA/UK Residents)

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), our legal basis for collecting and using the personal data described above will depend on the personal data concerned and the specific context in which we collect it:

Performance of a Contract: Processing necessary to perform our contract with you (e.g., to provide the Platform services as described in our Terms of Use, facilitate bookings, manage your account).
Legitimate Interests: Processing necessary for our legitimate interests (e.g., for fraud prevention, network security, service improvement, analytics, direct marketing where permitted), provided these interests are not overridden by your data protection interests or fundamental rights and freedoms.
Consent: Where we rely on consent (e.g., for certain marketing communications, use of non-essential cookies), we will obtain it prior to processing. You can withdraw your consent at any time.
Legal Obligation: Processing necessary to comply with our legal obligations (e.g., tax reporting, responding to legal process).

6. Sharing and Disclosure of Your Information

We do not sell your personal data. We may share your information with the following categories of third parties for the purposes described in this policy:

Operators: We share User information (such as name, booking details, contact information needed for the service) with Operators to enable them to provide the reserved services.
Users: We may share limited Operator information (such as business name, general location, service details) with Users as necessary for the booking process.
Payment Processors: We share transaction information with third-party payment processors (e.g., Stripe) to process payments and payouts. These providers have their own privacy policies.
Service Providers: We engage third-party companies and individuals to perform services on our behalf (e.g., website hosting, data analysis, email delivery, customer support tools, security services). These providers have access to your personal data only to perform these tasks and are obligated not to disclose or use it for other purposes.
Legal and Regulatory Authorities: We may disclose your information if required by law, regulation, legal process (like a subpoena or court order), or governmental request, or to protect the rights, property, or safety of KLYXA, our users, or others.
Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company, your personal data may be transferred as part of the transaction. We will notify you via email and/or a prominent notice on our Platform of any change in ownership or uses of your personal data.
Aggregated/Anonymized Data: We may share aggregated or anonymized information that does not directly identify you for industry analysis, demographic profiling, marketing, analytics, and other business purposes.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (like web beacons and pixels) to operate and personalize the Platform, analyze usage, and for marketing purposes.

What are Cookies: Cookies are small text files stored on your device (computer, tablet, mobile phone) when you visit websites.
Types We Use:
- Essential Cookies: Necessary for the Platform to function properly (e.g., user authentication, security).
- Analytics Cookies: Help us understand how users interact with the Platform (e.g., Google Analytics).
- Functionality Cookies: Remember your preferences and choices to provide a more personalized experience.
- Marketing Cookies: Used to deliver relevant advertising (may be set by us or third-party advertising partners, typically requires consent).
Your Choices: Most web browsers allow you to control cookies through their settings preferences. You can typically set your browser to refuse cookies or alert you when cookies are being sent. However, if you disable or refuse cookies, please note that some parts of the Platform may become inaccessible or not function properly. For users in jurisdictions requiring consent (like the EEA/UK), we will request your consent via a cookie banner before setting non-essential cookies.

8. International Data Transfers

Your personal data may be transferred to, stored, and processed in countries outside of the jurisdiction where you reside, including primarily the United States, where our servers are located and our central operations are based. These countries may have data protection laws that are different from the laws of your country.

We take appropriate safeguards to protect your personal data when it is transferred internationally. For transfers of personal data from the EEA, UK, or Switzerland, we rely on mechanisms such as Adequacy Decisions adopted by the European Commission, Standard Contractual Clauses (SCCs) approved by the European Commission, or your explicit consent for specific transfers, ensuring your data is protected to the standards required by applicable law. We also rely on the safeguards implemented by our third-party service providers (e.g., Stripe, cloud hosting providers).

9. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which we collected it, including providing the Platform services, complying with our legal obligations (e.g., tax, accounting, legal reporting), resolving disputes, and enforcing our agreements.

Generally, account information is retained for as long as your account is active and for a reasonable period thereafter for legal or backup purposes. Booking and transaction data may be retained for longer periods as required by law (e.g., typically 6-7 years for financial records). When data is no longer needed, we will either delete it or anonymize it.

10. Your Data Protection Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

Right to Access: Request access to the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete personal data.
Right to Erasure (Deletion): Request deletion of your personal data, subject to certain exceptions (e.g., legal retention requirements).
Right to Restrict Processing: Request restriction of the processing of your personal data under certain conditions.
Right to Data Portability: Request transfer of your personal data to you or a third party in a structured, commonly used, machine-readable format (where processing is based on consent or contract and is automated).
Right to Object: Object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent: Withdraw your consent at any time where we rely on consent as the legal basis for processing.
Right to Lodge a Complaint: Lodge a complaint with a relevant data protection supervisory authority if you believe our processing of your personal data violates applicable law (especially for EEA/UK residents).

To exercise these rights, please contact us using the contact details provided in Section 2. We may need to verify your identity before responding to your request. We will respond to your request within the timeframes required by applicable law.

11. Protection of Minors

The Platform is not intended for or directed at individuals under the age of 18 (or the age of legal majority required to use the Platform as per our Terms of Use). We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected personal data from a minor without parental consent, we will take steps to delete such information promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post any changes on this page and update the “Effective Date” at the top. If we make material changes, we will provide more prominent notice (such as by adding a notice on the Platform homepage or sending you an email notification). We encourage you to review this Privacy Policy periodically.