kkleio
Start trial

Legal

Terms of Service

Last updated: 23 October 2026

1. About these Terms

These Terms of Service ("Terms") are an agreement between MFvAS2 ApS, Klosterport 9, 4., 8000 Aarhus C, Denmark, CVR 43466097 ("Kleio", "we", "us"), and the business that installs or uses Kleio ("you"). They include the Data Processing Agreement in Annex A.

You accept these Terms by installing Kleio, using it, or clicking to accept them. If you accept on behalf of a business, you confirm that you are authorised to bind it. Kleio is for business use only; it is not offered to consumers.

Our Privacy Policy explains how we handle personal data about you and your team. It is information, not part of this contract.

2. The Service

Kleio ("the Service") is an analytics app for Shopify stores. It syncs data from your store and the platforms you connect, calculates metrics such as contribution margin, and lets you and the AI assistants you connect read that data and, where you allow it, make changes to your store.

We may improve, change or remove features. If we remove a core feature you pay for, we will tell you in advance, and you may cancel.

3. Shopify

  • Kleio is provided by us, not by Shopify. We alone are responsible for the app. Shopify is not liable for it and cannot help you install or use it.
  • Kleio depends on Shopify's platform. If Shopify suspends or ends our access to its API, the Service may stop working in whole or in part, and we are not liable for that.
  • Your use of Shopify itself is governed by your agreement with Shopify.

4. Your account and your team

  • Keep sign-in details and AI-agent connections secure. You are responsible for what happens under your account, including by team members you invite.
  • Only connect stores and accounts you are authorised to connect.
  • AI agents. When you connect an AI assistant, it acts on your behalf. Some Kleio tools let it change your store, for example prices, products or discounts. You are responsible for the instructions you give it and for reviewing changes before you ask it to make them. We are not liable for changes made at the request of your AI assistant.

5. Fees and billing

  • Shopify bills you for Kleio on our behalf, under the plan you approve in Shopify. Prices exclude taxes, which Shopify adds where they apply.
  • New subscriptions start with the free trial shown at sign-up, if one is offered.
  • Price changes. We may change our prices. We will tell you before the new price applies, with at least the notice Shopify requires. If you do not accept the new price, cancel before it takes effect.
  • Fees are not refundable, except where section 10 says otherwise or the law requires it.

6. Acceptable use

You must not, and must not let anyone else:

  1. use the Service or our Confidential Information to develop, train, improve, benchmark or market a product or service that competes with Kleio;
  2. copy the Service's features, AI-agent tools, metric definitions or documentation, or reverse engineer, decompile or disassemble the Service, except to the extent the law expressly allows it;
  3. access the Service by automated means other than the interfaces we provide (such as the AI-agent connection), or in volumes beyond normal use of those interfaces;
  4. resell, sublicense or provide the Service to third parties, other than to your own team and the businesses you are authorised to operate;
  5. break the law, infringe others' rights, or upload anything malicious;
  6. probe, disrupt or bypass the security or limits of the Service.

Nothing in these Terms prevents you from developing, marketing or selling competing products or services, provided you do so without using the Service or our Confidential Information.

7. Confidential Information

"Confidential Information" means non-public information about the Service that we disclose to you or that you obtain by using it, including non-public features, AI-agent tool definitions and instructions, prompts, how metrics are calculated, our product plans, non-public pricing and security information. It does not include information that is or becomes public through no fault of yours, that you already lawfully had, or that you develop independently.

You may use our Confidential Information only to use the Service, and must protect it with at least reasonable care. We treat your non-public business data as confidential in the same way.

8. Your data

  • You own your data, including your store data and the reports Kleio produces from it. You give us the rights we need to host, process and display it to provide the Service.
  • Where your data includes personal data, we process it as your processor under the Data Processing Agreement in Annex A.
  • Aggregated data. We may combine data from many stores into anonymised, aggregated statistics that identify neither you, your store nor any person, and use them to operate and improve the Service, including to show benchmarks inside Kleio. We do not transfer them to third parties, and we do not use them, or any of your data, to train or improve AI models.

9. Third-party services

Kleio connects to services we do not control, such as ad platforms, email tools, Google Sheets, Slack and AI assistants. Their terms govern your use of them. We are not responsible for them, for their availability, or for how they handle data you ask Kleio to send them.

10. Suspension and termination

By you

You may stop using Kleio at any time by cancelling your plan or uninstalling the app in Shopify.

By us

  • For any reason. We may end your subscription at any time, without giving a reason. We then refund the unused part of the period you have already paid for.
  • For breach. If you breach section 6 or 7, or breach these Terms in another material way, we may suspend or end your access immediately, without a refund.
  • Suspension. We may suspend access temporarily if it is needed to protect the Service, other customers or your data, or to comply with the law.
  • We may decline to provide the Service to any person, organisation or store, including one linked to an account we have ended.

Getting your data out

  • Uninstalling the app deletes your store data (see Annex A, section 10).
  • If you are established in the EU, you may ask us, before you uninstall, for a copy of your data in CSV: orders and order lines, products and variants, the costs you have entered (product costs, fixed and variable costs), imported ad spend and shipping costs, and your settings. We deliver it within 30 days of your request, at no charge. Keep Kleio installed until you have received it.

Sections 7, 8, 12, 13 and 15 continue to apply after these Terms end.

11. Changes to these Terms

We may change these Terms. For material changes, we will tell you by email or in the app at least 30 days before they take effect, and may ask you to accept them. If you do not agree, you may cancel before the change takes effect. If you keep using Kleio after that date, the new Terms apply.

12. No professional advice; disclaimers

  • Kleio's figures are calculated from the data available to it and the settings you choose, and may contain estimates. They are not financial, accounting or tax advice.
  • Answers given by AI assistants may be wrong. Check important figures before acting on them.
  • We provide the Service with reasonable skill and care, but "as is". To the extent the law allows, we give no other warranties, express or implied.

13. Liability

  • Neither party is liable for indirect or consequential loss, including lost profits, lost revenue, lost data or loss of goodwill.
  • Each party's total liability under these Terms is limited to the fees you paid for Kleio in the 12 months before the event giving rise to the claim.
  • These limits do not apply to your obligations in sections 6 and 7, or to liability for gross negligence, intent, or anything else the law does not allow to be limited.

14. General

  • We may transfer these Terms to a successor of our business. You may not transfer them without our consent.
  • We send notices to the email address of your account owner. You can send notices to help@getkleio.com.
  • If a provision is found invalid, the rest remains in force.
  • These Terms, including Annex A, are the whole agreement between us about Kleio.
  • Neither party is liable for delays caused by events beyond its reasonable control.

15. Governing law and disputes

Danish law governs these Terms, excluding its conflict-of-law rules. The courts of Denmark, with the District Court of Aarhus (Retten i Aarhus) as the court of first instance, have exclusive jurisdiction.

Annex A — Data Processing Agreement

This Data Processing Agreement ("DPA") forms part of the Terms. It applies when Kleio processes personal data on your behalf. You are the controller and Kleio is the processor. If this DPA conflicts with the rest of the Terms, this DPA prevails; if it conflicts with the Standard Contractual Clauses referred to in section 7, the Clauses prevail.

1. Details of the processing

  • Subject matter and purpose: providing the Service: syncing, storing and calculating analytics on your store data, and making it available to you, your team and the AI assistants you connect.
  • Duration: while Kleio is installed, and until the data is deleted under section 10.
  • Nature: collection, storage, calculation, retrieval, display, transmission at your request, and deletion.
  • Data subjects: your store's customers.
  • Personal data: Shopify customer IDs; the orders linked to them (order numbers, products, prices, discounts, refunds and returns, payment and shipping method, subscription status, whether the customer is new, order dates); each order's fulfilment and shipping costs from ShipHero or the 3PL files you import; shipping country; any personal data you include in discount codes, order tags, shipping method names or custom line item titles.
  • Special categories of data: none. Do not put such data into fields Kleio syncs.

2. Instructions

We process personal data only on your documented instructions. These Terms, your settings, and the requests you or your AI assistant make through the Service are your instructions. We will tell you if we believe an instruction breaks data protection law. If the law requires us to process data otherwise, we will tell you first unless the law prohibits it.

3. Confidentiality

Everyone we authorise to process the personal data is bound by confidentiality.

4. Security

We take the technical and organisational measures required by Article 32 GDPR, including:

  • encryption in transit (TLS) and encryption of access tokens at rest (AES-256-GCM); AI-agent tokens are stored only as one-way hashes;
  • access to production systems limited to the people who need it;
  • an access check on every request, so each merchant sees only their own data;
  • data minimisation: we do not store customer names, emails, phone numbers or addresses;
  • separate development and test databases, holding data from test stores only, never copies of production data;
  • a procedure for detecting, handling and reporting incidents.

5. Subprocessors

  • You give general authorisation for us to use subprocessors. The current list is on our Subprocessors page.
  • We will email your account owner at least 10 days before adding or replacing a subprocessor, so you can object on reasonable data protection grounds. If we cannot resolve your objection, you may end your subscription. If a change is urgent, for example to protect the security or availability of the Service, we may make it straight away and tell you as soon as we can afterwards.
  • We impose the same data protection obligations on each subprocessor as this DPA imposes on us, and remain responsible for their performance.

6. Helping you

  • We help you respond to requests from data subjects exercising their rights. We act on Shopify's customer data request and customer redaction requests within 30 days.
  • We help you meet your obligations on security, breach notification, impact assessments and prior consultation, taking into account the information available to us.

7. International transfers

  • Our servers are in the United States. We transfer personal data there and to subprocessors outside the EEA only with a safeguard under Chapter V GDPR: the EU-U.S. Data Privacy Framework where the recipient is certified, or the European Commission's Standard Contractual Clauses (Decision (EU) 2021/914).
  • If you are established outside the EEA, Module 4 (processor to controller) of those Standard Contractual Clauses is incorporated into this DPA by reference, with Kleio as data exporter and you as data importer. The details in section 1 complete the Clauses' annexes. The Clauses are governed by Danish law, and the courts of Denmark have jurisdiction.

8. Personal data breaches

We will notify you without undue delay, and in any event within 24 hours of becoming aware of a personal data breach affecting your data. We will tell you what happened, the likely consequences and what we are doing about it, and update you as we learn more.

9. Information and audits

On request, we will give you in writing the information needed to show that we meet this DPA. If that information is not enough, or a supervisory authority requires it, you may audit our compliance once every 12 months, at your own cost, with 30 days' notice, through an independent auditor bound by confidentiality, in a way that does not disrupt our business. Audits are limited to compliance with this DPA and do not include access to source code or other customers' data.

10. Deletion at the end

When you uninstall Kleio, we delete your store's personal data once Shopify confirms the uninstall, and in any case within 30 days, unless the law requires us to keep it. If you want a copy of your data, ask for it before you uninstall (section 10 of the Terms).

11. Anonymised data

Data that has been anonymised so that no person can be identified is not personal data, and section 8 of the Terms governs how we use it.

12. Liability

Each party's total liability arising out of or relating to this DPA, including any claim to recover compensation paid to a data subject under Article 82(5) GDPR, is subject to the limitations in section 13 of the Terms. This does not limit either party's liability to data subjects, or any administrative fine imposed on that party.