Klaibel Privacy Policy
Version: 2.0 · Effective: 20 October 2026
Who is responsible
Parcloud Oy (3154332-3), Vuoritie 7, 21600 Parainen, Finland, runs Klaibel and is the controller of the personal data described here. Contact: contact@klaibel.com.
Visitors and subscribers
Signing in. To sign in you enter your email address and we send you a link. We keep your email address and a record that you are signed in. Emails are sent through Resend. Basis: contract, so that you can use your account.
Pro subscription. Payment is handled by Stripe Checkout and its customer portal. We never see or store card numbers. We receive your email address, company details, the plan and the payment status. Basis: contract, and our bookkeeping duties.
Contact. If you write to us, we keep the message and your address to answer it. Basis: legitimate interest.
Visit counts. We count visits to klaibel.com ourselves, without a cookie. We keep no IP address or browser details, and we cannot recognise you from one day to the next. What we keep are totals per page and the kind of place people came from, such as a search engine. These are deleted after 90 days.
Cookies. One, and only when you sign in. It keeps you signed in for 30 days and is removed when you sign out. Nothing else we run sets a cookie. Stripe sets its own cookies on its payment pages, under Stripe's policy. The bot check on the scan and contact forms may leave a short-lived marker in your browser; it is not used for advertising or profiling.
The sites in the directory
Klaibel reads public web pages, roughly once a week, as a browser loads them. It does not log in anywhere and does not submit forms. robots.txt is respected. For each site it stores the site address, which AI vendor it runs, when the vendor was first and last seen, and the snippet of the page that identified it. It does not store personal data about the visitors of those sites. A site address can in rare cases identify a person, for example a personal website. Basis: legitimate interest in publishing which AI vendors websites run.
Removal. Email contact@klaibel.com from an address at the domain. We hide the site and its subdomains everywhere within a few days, and keep the domain on a suppression list so it is not added again. See klaibel.com/data-policy.
Where data is kept, and by whom
Data is stored in Google Cloud Firestore in the europe-north1 region (Finland). The companies that process data for us are:
- Google Cloud, for hosting and the database,
- Stripe, for payments,
- Resend, for sign-in emails,
- Cloudflare, for the bot check (Turnstile) on the scan form on the home page and on the contact form.
Where a processor transfers data outside the EEA, the transfer relies on the EU-US Data Privacy Framework or Standard Contractual Clauses.
How long we keep it
- Account and subscription details: while the account exists, plus the period needed to export your data on request.
- Bookkeeping records: as long as Finnish law requires (6 years or more).
- Visit counts: 90 days.
- Messages to contact@klaibel.com: until the matter is closed, then up to 12 months.
- Directory observations: while the site is listed. A removed site is hidden within a few days and the suppression entry is kept.
Your rights
You can ask for access, correction, erasure, restriction or portability of your data, or object to its use. Email contact@klaibel.com. You may also complain to the Finnish supervisory authority, the Office of the Data Protection Ombudsman (tietosuoja.fi), or to your local data protection authority.
Changes
Changes are posted here with a new version and date. Subscribers are told by email about material changes.