Privacy policy
Effective September 8, 2026
Klenoa (“Klenoa”, “we”, “us”) is a business based in Ontario, Canada, that helps small and medium service businesses find and fix the constraint that is holding them back. This policy explains what we collect when you use klenoa.com, why we collect it, who processes it on our behalf, and the choices you have. We follow Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and the ten fair information principles it sets out.
What we collect
We only collect what the diagnostic and our follow-up need. In plain terms:
| What | When and why |
|---|---|
| The problem you describe and your answers | When you run the free diagnostic. This is what the diagnosis is built from. Answers may include figures about your business (for example leads per month or job values). |
| Business context | Your industry and the type of business, chosen at the start, so the questions and the report fit your situation. |
| Contact details | Your first and last name, business name and email address when you ask for your report, and optionally a phone number. We use these to save your report, send you its link, and follow up about the constraint it found. |
| Booking details | The date, time and time zone you choose if you book a call, plus your contact details, so we can hold the slot and send a confirmation. |
| Implementation requests | A record that you asked Klenoa to implement the fix from a report, so we can follow up. |
| Technical information | Standard server logs (IP address, browser type, time of request) kept briefly for security, to protect the service against abuse, and to keep it running. Our analytics (below) do not use cookies and do not identify you. |
What we do not do
- We do not sell, rent or trade your information to anyone.
- We do not use advertising trackers, and we do not set cookies on klenoa.com. That is why you did not see a cookie banner.
- We do not use your answers to train artificial-intelligence models, and our AI provider does not either (see below).
- The service is for businesses and is not directed at anyone under 18.
How the diagnostic uses artificial intelligence
Klenoa’s diagnostic uses an AI language model to interpret what you write, choose the next question, and draft the report. To do that, the text you enter is sent to our AI provider, Anthropic, under commercial terms that prohibit them from using your inputs to train their models. The report you receive is generated from your answers together with published research and Klenoa’s own methods; it is an informed estimate, not a measured fact, and the report says so where it matters.
Who processes your information for us
We use a small number of service providers to run klenoa.com. Each receives only what it needs for its job and is bound by contract to protect it.
| Provider | What it does |
|---|---|
| Vercel | Hosts the website and provides cookieless, anonymised visitor statistics (page views, referring sites, country, device type). No personal identifiers are stored. |
| Supabase | Stores diagnostic sessions, reports, contact details and bookings in a managed database. |
| Anthropic | Processes the text of your diagnostic to produce the diagnosis and report, as described above. |
| Mailgun | Sends the email with your report link and any booking confirmation. |
These providers operate in the United States as well as Canada, so your information may be stored or processed outside Canada, where it can be subject to the laws of that country. We choose providers with strong security practices and contractual protections, but we cannot offer a guarantee about foreign law.
Your report link
Your saved report lives at a private address that includes a random code. Anyone who has that link can open the report, so treat it like a document: share it with the people you want to see it. We keep reports out of search engines. If you want a report taken down, email us and we will remove it.
How long we keep it
We keep diagnostic sessions, reports and contact details for as long as they are useful to you and to our follow-up with you, and delete them when you ask. Server logs are kept for a short period for security and then discarded. When we delete your information, it is removed from our systems and from our providers’ systems within their normal deletion windows.
Your choices and rights
You can, at any time and at no cost:
- ask what personal information we hold about you and receive a copy;
- ask us to correct anything that is inaccurate;
- ask us to delete your report, your diagnostic answers and your contact details;
- withdraw consent to follow-up contact — reply to any email from us, use the unsubscribe link in any marketing email, or simply tell us.
Email hello@klenoa.com and we will respond within 30 days. We may ask you to confirm that you are the person the information is about. If you are not satisfied with how we handled a request, you can complain to the Office of the Privacy Commissioner of Canada.
How we protect it
All traffic to klenoa.com is encrypted. Access to stored information is restricted to Klenoa and protected by authentication, database-level access rules and request limits designed to prevent abuse. No method of storage or transmission is perfectly secure, and we will tell you if a breach affecting you ever occurs.
Changes to this policy
When the product changes in a way that affects what we collect or how we use it, we will update this page and its effective date. Material changes will be noted here so you can see what moved.
Contact
Klenoa · hello@klenoa.com