How Kleos handles your data
Each workspace is kept separate by Postgres row-level security and role-based access. The app and database are hosted with Render and files are stored in Cloudflare R2. Data is encrypted in transit, connected-account tokens are encrypted at rest (AES-256-GCM), and customer content isn't sold or used to train New Odyssey's own models.
What Kleos holds
- Account details: email address, name if added, workspace, role and sign-in times.
- Business knowledge: website research, buyers, brand kit, facts and claims, and the knowledge sources you add.
- Content: plans, posts, articles, newsletters, images and videos, with their approval and publishing history.
- Connected accounts: encrypted access tokens and the pages, sites, lists or audiences you selected. Kleos reads list names and IDs, not subscriber lists.
- Performance data: Search Console and Google Analytics reports, and AI assistants' answers to your tracked questions.
- Billing and usage: plan, subscription status, invoices and metered usage. Card details are held by Stripe.
- Technical logs: audit events, IP address, browser and timestamps.
How long it's kept, and how to export or delete it
Account data and content are kept while the workspace is active. Owners and admins can export everything at any time; an owner can delete the workspace, which locks it at once, can be restored for 30 days and is then deleted for good. Only invoices, payment records and an activity log with personal details removed are kept, and hosting backups expire on the provider's standard schedule.
The full detail is in Kleos's data deletion policy and its privacy policy.
Who processes it
Service providers (subprocessors), each on our instructions and only for the purpose shown:
- Render: hosting, databases and backups, in the United States.
- Cloudflare: file storage and networking.
- Stripe: subscription and license payments (card details go to Stripe, never to us).
- Resend: sending email.
- Anthropic: AI research and writing.
- OpenAI: AI writing, images and narration, and AI-assistant visibility checks.
- DataForSEO: search and keyword data.
- Exa: web research.
A Data Processing Addendum describes how we process personal data on your behalf.
Questions and security reports
Kleos is run by New Odyssey. To ask what we hold, to have it exported or deleted, or to report a security problem, email clio@new-odyssey.com.
Questions buyers ask
How does Kleos keep our data safe?
Each Kleos workspace is kept separate by Postgres row-level security and role-based access. Data is encrypted in transit, connected-account tokens are encrypted at rest, and sign-in tokens are hashed and single-use. Kleos doesn't sell personal data or use your content to train New Odyssey's own models; AI providers process it under their API terms.
Can we export or delete everything Kleos holds?
Yes. Workspace owners and admins can download everything in Kleos as a ZIP of JSON, Markdown and CSV files. An owner can delete the workspace: it locks at once, can be restored for 30 days, then is deleted for good, keeping only invoices, payment records and an activity log with personal details removed.