Founding Operator Program
Privacy Policy
This policy explains how Klona handles information submitted through the website, account creation, founding program, and member workspace.
Updated August 19, 2026
Information we collect
Account creation collects your first name, email address, password-protected account, WhatsApp number, and selected country or calling code. Hiring and affiliate applications collect the contact and professional details shown on those forms. We also save the time and policy version connected to your 18+, Terms, and Privacy confirmation.
How we use information
We use this information to create and secure your account, show the correct member workspace, contact you about the founding option you choose, provide support, understand product demand, prevent misuse, and improve Klona's roadmap.
WhatsApp and direct contact
By providing a WhatsApp number during account creation, you allow Klona to contact you about account access and the bootcamp. Plan buttons can open a prefilled WhatsApp message; you decide whether to send it. Your use of WhatsApp is also governed by WhatsApp's own terms and privacy practices.
Storage and service providers
Account, application, and first-party analytics records are stored with infrastructure providers such as Supabase and our hosting provider. Public browsers submit forms to Klona's server; they cannot write application tables directly or read other applicants' submissions. Sensitive founder views require an approved admin account and two-step verification.
How information is shared
We do not sell applicant information. We may share information with service providers that help us operate Klona, when required by law, to protect users and the service, or as part of a legitimate business reorganization subject to appropriate safeguards.
Retention and deletion
Raw first-party analytics events and anonymous session records are scheduled for deletion after 90 days. We retain application and account information while reasonably needed for access review, service delivery, safety, recordkeeping, or legal obligations, and periodically review rejected or inactive applications for deletion. You may request account or application deletion, subject to records we must retain for legitimate legal or operational reasons.
Your choices
You may ask to access, correct, or delete the personal information associated with your application. You can also tell us to stop application-related WhatsApp communication. Local privacy rights may provide additional choices depending on where you live.
Security and age restrictions
We use server-side validation, restricted database permissions, rate limiting, audit history, and two-step verification for sensitive admin access. To prevent abuse, a one-way keyed hash derived from network information may be retained briefly in a private rate-limit store; the raw address is not written to our analytics tables. No internet service is completely secure. Klona is intended for adults only and does not knowingly accept applications from anyone under 18.
First-party analytics
For public acquisition pages, we record page paths without query strings, funnel events, a random tab-session identifier, external referrer hostname, selected UTM campaign fields, coarse device category, browser family, operating-system family, viewport range, and browser locale. We exclude admin, dashboard, login, application-status, and password-recovery routes. We use these records to understand traffic and conversion; we do not use them to follow you across unrelated websites.
Short-lived form draft
The signup form temporarily keeps your first name, email, WhatsApp number, and selected calling code in session storage so an interrupted form is not immediately lost. This draft stays only in that browser tab, is removed after successful submission, and is normally cleared when the tab closes. Your password and acceptance checkboxes are not saved in the draft.
Data controller
Klona is responsible for the personal information described in this policy. Privacy requests can be made by replying to a Klona application email or WhatsApp conversation.
Contact
Privacy requests can be made through the same email or WhatsApp conversation associated with your founding application. Klona will verify the requester before disclosing or deleting account data.