Privacy Policy

This Privacy Policy explains how Clario Dev Imob SRL ("KPFY", "we", "us") collects, uses and protects personal data in connection with the KPFY platform (the "Service") available at kpfy.ai. We process data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Romanian law.

1. Data we process

• Account data: name, work email, organization and credentials of users we create for the Service.
• Call data: telephone call recordings, transcripts and derived analytics belonging to the clinics that use our Service, processed on their behalf.
• Advertising data: performance data retrieved through the Google Ads API (campaigns, ad groups, keywords, search terms, conversions, cost) for accounts we are authorized to access, used to correlate advertising spend with call and appointment outcomes.
• Usage data: log data, device and browser information, and cookies necessary to operate and secure the Service.

2. Purposes and legal basis

We process data to provide and improve the Service, to generate call-quality and cost-per-outcome analytics, to secure our systems, and to comply with legal obligations. Our legal bases are performance of a contract (Art. 6(1)(b) GDPR), our legitimate interests in operating and improving the Service (Art. 6(1)(f)), and compliance with legal obligations (Art. 6(1)(c)). Where required, we rely on consent (Art. 6(1)(a)).

3. Google Ads and Google API data

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google Ads data is accessed only for accounts that have authorized us, used solely to provide reporting and optimization features within the Service, never sold, and never used for our own advertising.

4. Sharing and processors

We share data only with sub-processors that help us run the Service (e.g. hosting, speech-to-text transcription and AI analysis providers) under data-processing agreements, and with Google as required to use the Google Ads API. We do not sell personal data.

5. International transfers

Where data is processed outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

6. Retention

We retain personal data only as long as necessary for the purposes above or as required by law, after which it is deleted or anonymized.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict and port your data, and to object to processing. You can exercise these rights by contacting contact@kpfy.ai. You also have the right to lodge a complaint with the Romanian supervisory authority (ANSPDCP).

8. Security

We apply technical and organizational measures appropriate to the risk, including access controls, encryption in transit, and tenant isolation.

9. Changes

We may update this Policy from time to time. Material changes are reflected by the "Last updated" date above.

10. Contact

For any privacy question, contact us at contact@kpfy.ai.