Klarity is built for the GDPR end to end: where your data is hosted, on what legal basis it is processed, how long it is kept and what rights your clients retain. This article answers those questions, which you can pass on to your clients with confidence.

Understanding hosting

Your data is hosted in France (Paris region) and never leaves the European Union. It therefore remains subject to the European data protection framework. The privacy text presented to your clients states this hosting point.

GDPR compliance

• Legal basis — processing rests on the explicit consent of the person being coached, collected before any capture.
• Minimization — Klarity keeps only what is necessary: audio is deleted after transcription, only the text and the summary remain.
• Retention periods — defined by type of data. Transcripts and summaries are kept for the duration of the engagement; consent logs are kept for the engagement + 5 years. The details appear in Settings › Privacy & GDPR, section Data retention.
• Individuals' rights — your clients can withdraw their consent at any time; on your side, you can export or delete all of your data.
• Reference documents — legal notice, privacy policy and terms of service are accessible from Klarity's public pages.

Exporting or deleting your data

Under the right to portability, you can generate a full export from Settings › Privacy & GDPR, section Export my data: a ZIP file containing all of your data is sent to you by email. You can also permanently delete your account and all associated data (right to erasure).

Related articles

• How Klarity protects your data
• Security best practices
• The client's consent

Updated on: 18/07/2026