Privacy Policy

Information we collect

We collect the following categories of information:

• Information you provide. When you request a demo, contact sales, or email us, we collect your name, work email address, company name, team size, and anything you include in your message.
• Information collected automatically. When you visit the Site, our privacy-first analytics record aggregate, non-identifying usage data such as page views, referring site, approximate region, and device or browser type. Our web servers also process limited technical data (including IP address) to deliver and secure the Site.
• Customer data. If your organization becomes a Cleo customer, you may connect tools that contain operational data such as product usage, agent traces, and metrics. We process this data only to provide the Services under your instructions, as described in “Data we process on behalf of customers” below.

How we use information

We use personal information to:

• respond to your inquiries, schedule and run demos, and provide support;
• provide, operate, maintain, and improve the Site and Services;
• monitor for, prevent, and address security incidents, fraud, and abuse;
• send you service or transactional messages, and, where you have opted in, occasional product updates;
• comply with legal obligations and enforce our agreements.

Legal bases for processing (EEA and UK)

If you are in the European Economic Area or the United Kingdom, we process your personal information on one or more of these legal bases: your consent; the performance of a contract with you; our legitimate interests in operating and improving our business, balanced against your rights; and compliance with legal obligations.

Cookies and analytics

We keep tracking to a minimum. We use privacy-friendly, cookieless analytics and do not use advertising or cross-site tracking cookies. Any cookies we set are strictly necessary for the Site to function. Because we do not rely on tracking cookies, there is no cross-site profile of you for us to sell or share.

How we share information

We do not sell or rent your personal information. We share it only as follows:

• Service providers. We use a small number of trusted vendors that process data on our behalf, including Cloudflare (website hosting, content delivery, DNS, and privacy-friendly analytics) and Resend (delivery of transactional email such as your demo request). These providers may use your information only to perform services for us.
• Legal and safety. We may disclose information where required by law, regulation, legal process, or governmental request, or where necessary to protect the rights, property, or safety of Axcelner, our users, or the public.
• Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to this Policy.

International data transfers

We and our service providers may process information in countries other than the one in which you live. Where personal information is transferred across borders, we rely on appropriate safeguards, such as standard contractual clauses, where required by law.

Data retention

We keep personal information only for as long as needed for the purposes in this Policy. We retain demo and contact inquiries for as long as reasonably necessary to follow up and for our legitimate business records, then delete or anonymize them. Customer data is retained according to the applicable customer agreement.

Security

We protect personal information using technical and organizational measures, including encryption in transit, access controls, and the principle of least privilege. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your rights and choices

Depending on where you live, you may have the right to access, correct, update, delete, or receive a copy of your personal information, and to object to or restrict certain processing or to withdraw consent. If you are a California resident, you have the right to know what personal information we collect, to request its deletion, and to opt out of the sale or sharing of personal information; we do not sell or share personal information as those terms are defined under California law.

To exercise any of these rights, email us at the address below. We will respond within the timeframe required by applicable law, and you will not be discriminated against for exercising your rights.

Data we process on behalf of customers

When we provide the Services to a customer organization, that organization is the controller of the operational data it connects to Cleo, and we act as a processor that handles the data under the customer's instructions and our customer agreement. A Data Processing Addendum is available to customers on request. If your data was provided to us by a customer, please direct privacy requests to that organization.

Children's privacy

The Site and Services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

Third-party links

The Site may link to third-party websites and services that we do not control. This Policy does not apply to those third parties, and we encourage you to review their own privacy policies.

Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above, and if the changes are material we will provide a more prominent notice. Your continued use of the Site or Services after an update means you accept the revised Policy.