Privacy notice
Effective 16 October 2026. Last updated 16 October 2026.
Who we are
Klaza is the controller of the personal data described in this notice. Klaza is based in The Bahamas. Contact: [email protected].
What this notice covers
This notice covers klaza.app: our marketing website and its demo-request form.
It does not cover student data inside the Klaza application. Where a school uses Klaza, that school decides what data is collected and why, and its own privacy notice governs it. We handle that data on the school instruction under a separate agreement.
What we collect
| Data | Why | Basis |
|---|---|---|
| Demo-request form: your name, email, phone (optional), role, school name, country (optional) and approximate number of students (optional) | To reply to your request, arrange a demo and give you a price estimate | Steps you asked us to take; legitimate interest |
| Bot check on the form: your IP address and technical signals from your browser, collected by Cloudflare Turnstile when you use the form | To stop automated spam submissions | Legitimate interest |
| Visit statistics: page visited, referring page, browser and device type, approximate country, collected by Cloudflare Web Analytics | To count visits and see which pages are read | Legitimate interest |
| Server and security logs: IP address, user agent, pages requested | Security and reliability | Legitimate interest |
Please do not enter any information about students in the form. It has no space for it, and we do not need it.
Cloudflare Web Analytics does not use cookies or local storage and does not follow you across other websites. We do not use advertising trackers, behavioural analytics, session recording or third-party marketing pixels. No advertising network receives data about your visit.
Cookies
klaza.app sets no cookies of its own and uses no advertising or analytics cookies. The Cloudflare bot check loads only when you reach the form and may use cookies or browser storage on Cloudflare domains while you use it. We do not control those.
Who we share it with
Service providers acting on our behalf:
| Provider | What they do for us | Data |
|---|---|---|
| Cloudflare, Inc. (United States) | Hosts the website, runs the bot check (Turnstile) and visit statistics (Web Analytics), and routes email sent to our klaza.app addresses | Visit data, form data and email routed to us |
| Google (Gmail) | Hosts the mailbox that receives demo requests and privacy emails | Form fields and your emails to us |
We do not sell personal data, and we have no arrangement under which anyone may use it for their own purposes. Our providers may process data in the United States and elsewhere.
How long we keep it
| Data | Kept for |
|---|---|
| Demo requests | 24 months from our last contact with you, then deleted |
| Server and security logs | 30 days |
| Visit statistics | Aggregate only; kept by Cloudflare under its service terms |
Your rights
You may ask for access, correction, deletion or portability of your data, object to its use, or withdraw consent. Write to [email protected]. We respond within 30 days.
You may complain to your data protection authority. In The Bahamas, that is the Office of the Data Protection Commissioner.
Student data and Student Support AI
If your school becomes a customer, student data is handled under our agreement with the school, not this notice. In short: the application is hosted in the United States, and we do not currently guarantee that data stays in any particular country. If your school uses the optional Student Support AI, limited support-plan details (such as a student first name and goals) are sent to our AI provider, Anthropic, to produce a draft that staff must review.
Changes
Material changes will be posted here with a revised date.