Privacy Policy

1. Who we are

Klarion is operated by Effect Studios. This Privacy Policy explains how we collect, use, share, protect, retain, and delete information when you use the Klarion web dashboard, Android app, gateway features, live location links, websites, and related services.

Klarion is built for businesses that need to turn mobile-money payment SMS alerts into structured, auditable payment records. If you use Klarion on behalf of a business, that business controls the payment and SMS data in its workspace. Effect Studios processes that data to provide Klarion. For account-user data, website data, and support communications, Effect Studios is responsible for the privacy practices described here.

2. Information we collect

The exact information depends on how you use Klarion. We may collect the following categories of information:

• Account and identity information: name, email address, password credentials, verification codes, Google sign-in identifiers, authentication tokens, account status, and security events.
• Business workspace information: business name, country, currency, timezone, contact phone, setup status, workspace roles, permissions, team invitations, and user membership records.
• Location information: location names, addresses, notes, Google Place IDs, and GPS coordinates that an owner or admin adds for a business location.
• Gateway phone and device information: device labels, generated device identifiers, provider or network, receiving number, wallet label, app version, SMS permission status, receiver status, network state, heartbeat times, delivery counts, telemetry, diagnostics, IP address, and device credential status.
• SMS and payment information: SMS sender, SMS body, received time, service center, SIM or subscription metadata where available, message hashes, parser results, payment amount, currency, provider, payer name, payer phone, transaction ID, reference, confidence score, duplicate state, source IP, and related payload data.
• Dashboard activity and analytics: payment filters, exports, shared live-link access, last accessed time, operational analytics, and audit records needed to secure and run the service.
• Support and communications: messages you send us, transactional email delivery data, password reset events, login OTP events, and invitation emails.
• Technical information: browser type, device type, session cookies, error logs, security logs, and information needed to protect, debug, and improve Klarion.

3. SMS permission and payment messages

The Klarion Android app may request SMS access so a gateway phone can receive incoming mobile-money payment notifications and forward them securely to your Klarion workspace. SMS access is core to Klarion's payment monitoring service.

A gateway phone may receive messages that are not payment notifications. Those messages can still be forwarded to Klarion if they arrive on the gateway phone. We process them only to classify the message, prevent duplicates, troubleshoot delivery, protect the service, and improve payment parsing. They are not used for advertising, credit scoring, lending decisions, or sale to third parties.

We recommend using a dedicated business phone or SIM for Klarion so personal messages do not enter the service. Workspace owners are responsible for connecting only phones, numbers, and wallets they are authorized to monitor.

4. How we use information

• To create accounts, verify email addresses, support Google sign-in, and manage sessions.
• To create and manage workspaces, locations, gateway phones, roles, and permissions.
• To receive SMS events, classify messages, create payment records, and show payment activity in the dashboard.
• To provide analytics that help owners understand payments, locations, providers, and gateway health.
• To send transactional emails such as verification codes, password resets, login codes, setup reminders, and invitations.
• To secure the service, investigate abuse, validate device signatures, detect duplicates, and maintain audit logs.
• To provide support, troubleshoot issues, improve parser quality, and maintain product reliability.
• To comply with legal, regulatory, accounting, tax, security, and dispute-resolution obligations.

5. Google services

Klarion may use Google services for Google sign-in and location search. When you sign in with Google, we receive the account information needed to authenticate you, such as your Google account identifier, verified email address, and profile name. When you use location search, Klarion may process addresses, place IDs, and coordinates for business locations.

We use Google user data only to provide or improve visible Klarion features, such as sign-in, account setup, and location management. We do not sell Google user data, use it for ads, transfer it to advertising platforms, or use it to determine creditworthiness or lending eligibility.

6. How we share information

We do not sell personal information. We may share information in these limited ways:

• Within your workspace: owners, admins, invited team members, and live location viewers can see information according to the roles, permissions, device access, and shared links configured by the workspace owner.
• With service providers: cloud hosting, databases, monitoring, transactional email, authentication, maps, analytics, and support providers that help us operate Klarion.
• With integrations you configure: if you connect a webhook, API, export, or third-party system, we send the relevant payment data to that destination on your instruction.
• For legal and safety reasons: when required by law, court order, regulator request, security investigation, fraud prevention, or to protect the rights and safety of users, customers, Effect Studios, or others.
• Business transfers: if Effect Studios is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to appropriate safeguards.

7. Security

We use technical and organizational safeguards designed to protect information in transit and at rest. These include authenticated sessions, token-based device access, signed gateway requests, role-based access controls, restricted access to device secrets, audit records, and operational monitoring. No system is perfectly secure, so workspace owners should also protect their passwords, devices, phone numbers, live links, and team permissions.

8. Retention and deletion

We keep information for as long as needed to provide Klarion, maintain auditability, support security, comply with legal obligations, resolve disputes, and enforce agreements. Payment records and SMS evidence may be retained while a workspace is active because they support business reconciliation and audit trails.

Account users can request deletion of their login account. Workspace owners can request deletion of a business workspace and related Klarion-controlled data. After we verify an authorized deletion request, we delete or de-identify applicable personal data from active systems within a commercially reasonable period, subject to legal, security, fraud prevention, backup, accounting, tax, and dispute-resolution needs.

A team member account deletion does not automatically delete business payment records, SMS records, or audit records that belong to the workspace owner. To request deletion, use the instructions on our Account Deletion page.

9. Your choices and rights

Depending on your role and applicable law, you may be able to access, correct, export, or delete certain information. Workspace owners can manage users, roles, locations, live share links, and gateway phones from the dashboard. You can also disable a gateway phone, revoke credentials, or uninstall the Android app to stop new SMS forwarding from that device.

Ghana's Data Protection Act, 2012 (Act 843) provides rights and obligations around the collection, use, disclosure, security, access, correction, and deletion of personal data. You may contact us to exercise rights available to you under applicable data protection law.

10. International processing

Klarion may process and store information in Ghana or in other countries where we or our service providers operate. Those countries may have data protection laws that differ from the laws where you live or where your business operates. When we transfer information, we use safeguards appropriate for the nature of the data and the service being provided.

11. Children

Klarion is a business service and is not directed to children. Do not create a Klarion account or use Klarion if you are under 18 or do not have authority to use it for a business.

12. Changes to this policy

We may update this Privacy Policy as Klarion changes or as legal requirements change. If a change materially affects how we use personal information, we will take reasonable steps to notify users, such as by posting the updated policy, sending email, or showing an in-product notice.

13. Contact us

For privacy requests, account deletion requests, or questions about this policy, contact:

Effect Studios / Klarion
support@klarion.io