How Klara Nova handles your data

This Privacy Policy explains what information Klara Nova collects, how it is used, and the choices available to you when using the application.

Last updated: 17 May 2026

Information we collect

Account information, such as your name, email address, profile image, authentication provider, account status, role, and sign-in security settings.
Workspace content you create or import, including notebooks, pages, markdown content, page metadata, tags, custom properties, uploaded images, publishing settings, and revision history.
Integration data when you connect third-party services, including Google Drive account metadata, OAuth scopes, encrypted access tokens, imported document metadata, source links, sync status, and imported document content.
Billing and subscription information handled through Stripe, including customer identifiers, subscription status, price identifiers, billing periods, and related payment events.
Usage, diagnostics, and analytics data, including product interactions, server logs, error events, storage usage, public content views, referrers, and device or browser information.

How we use information

To provide and secure your account, notebooks, pages, integrations, publishing tools, subscriptions, and support workflows.
To import, convert, search, display, sync, and update documents you choose to bring into Klara Nova.
To process subscriptions, enforce plan limits, manage storage, and maintain billing records.
To monitor application health, troubleshoot errors, understand product usage, prevent abuse, and improve Klara Nova.
To comply with legal, security, accounting, and operational obligations.

Third-party services

Google is used for sign-in and Google Drive document imports when you choose to connect it. Klara Nova requests only the scopes needed for the integration features shown in the product.
Stripe is used for billing, subscriptions, checkout, customer portal access, and payment-related webhooks.
PostHog may be used for analytics, product telemetry, server events, and diagnostic logs when configured by the application administrator.
Infrastructure providers, databases, storage services, email or support tools, and observability services may process data as needed to run the application.

How we protect data

Sensitive integration tokens are encrypted before storage.
Notebook and page content is encrypted at rest when application encryption keys are configured.
Access to private workspace data requires authentication, and admin-only areas are restricted by user role.
You can disconnect integrations, revoke sessions, manage multi-factor authentication for local accounts, and delete or deactivate your account from available account settings.
No method of storage or transmission is perfectly secure, but Klara Nova is designed to reduce unnecessary access and keep sensitive data scoped to the features you use.

Publishing and sharing

Private notebooks and pages are visible only to authenticated users with the right access.
If you publish a page or notebook, the selected content, author information, public slug, descriptions, tags, and related public metadata may be visible to others.
Public content may be indexed only when you enable indexing for that content and your plan allows it.
You are responsible for ensuring that content you publish does not include private, confidential, or third-party information you do not have permission to share.

Retention and deletion

Klara Nova keeps account, workspace, billing, integration, and log data for as long as needed to provide the service, maintain security, comply with obligations, and resolve disputes.
Deleted pages may be retained in a soft-deleted state for recovery or audit purposes until permanently removed according to operational retention practices.
Disconnecting an integration removes active tokens for that provider, but imported pages and metadata may remain until you delete them.
Account deletion is intended to permanently remove your account and associated data, subject to backups, legal obligations, fraud prevention, billing records, and operational retention requirements.

Your choices

You can update your profile information, security settings, connected integrations, billing portal access, publishing settings, and account status from within the product where those features are available.
You can export your account data from the account export endpoint made available in the product.
You can choose not to connect Google Drive, not to publish content, and not to enable indexing for public content.
You can request access, correction, deletion, or portability of personal data by contacting the Klara Nova team through the support or contact channel provided in the product.

Changes to this policy

We may update this Privacy Policy as Klara Nova changes. When we make material changes, we will update the date on this page and may provide additional notice inside the product.

Questions

If you have questions about this Privacy Policy or how Klara Nova handles data, contact the Klara Nova team through the support or contact channel provided in the product.

Back to home Manage account