Privacy Policy
Kleos is an SEO & AEO scanner at heykleos.dev. This page describes what we collect when you use it, what we do with it, and what we deliberately do not do. The short version: we keep an account, your scans, and a billing relationship — and nothing about you is tracked, profiled, or sold.
What we collect
Your account: an email address, an optional name, and — if you sign in with Google or GitHub — the basic profile those providers share (your email and display name). Passwords are handled by our authentication provider and are never visible to us.
Your scans: the URLs you submit, the reports Kleos generates from them, and the project structure you arrange them in.
Billing: handled entirely by Stripe. We store your subscription status and Stripe's customer reference; your card number never touches our systems.
Operational logs: standard server logs (IP address, request path, timestamps) kept briefly for security and debugging.
What we do not do
No advertising trackers, no third-party analytics scripts, no pixels. The only cookies Kleos sets are the session cookies that keep you signed in.
We do not sell or share your data for marketing, and we never will without asking you first.
How we use it
To run your scans and show you the results, to operate your account and subscription, to send transactional email (sign-up confirmations, password resets, receipts), and to answer support requests. That is the complete list.
Who processes it for us
Kleos runs on a small set of infrastructure providers, each processing only what their role requires: Supabase (authentication and database), Stripe (payments), Resend (transactional email), Vercel and Fly.io (hosting and scan execution).
Scanning other people's sites
Kleos fetches publicly reachable pages of URLs our users submit, the way a search-engine crawler would, and analyses how those pages present to search and AI systems. We do not attempt to access anything non-public. If you operate a site and have concerns about it being scanned, contact us and we will resolve it.
Retention and deletion
We keep your data while your account exists. Ask us to delete your account and we will remove it along with your scans, keeping only what payment regulations require Stripe-side.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it — whether or not a GDPR-style law applies to you, we treat these as things any user is entitled to. Ask through the contact form and we will act on it.
Changes and contact
If this policy changes materially we will note it here with a new date. Questions, access requests, and deletion requests all go through the contact form at heykleos.dev/contact.