Privacy and Personal Data Protection Policy

In Summary: Kladim operates on a "Zero-Knowledge" architecture. The files you back up are encrypted with a key determined by you before they ever leave your device. No one, including Kladim staff, can see or read the contents of your files.

1. Identity of Data Controller and Data Processor

In accordance with data protection regulations (such as GDPR and KVKK), the distribution of roles within our system under FARZANEH ABDOLLAHPOUR DEHSHAL (Kladim Cloud Backup) is as follows:

Data Processor: Regarding the file and database contents you back up (User Content), Kladim acts solely as the "Data Processor." The user remains the primary entity responsible (Data Controller) for these data.
Data Controller: Regarding the contact information, billing details, and "Metadata" required for the system to operate that you provide when creating your account, Kladim acts as the "Data Controller."

2. Collected Data (Metadata and Account Information)

To ensure service continuity, billing, and system security, the following data—excluding the actual content—is collected and processed:

Account Information: First name, last name, e-mail address, and billing information.
Metadata: File/folder names, file paths, file sizes, IP addresses, and transaction log records. (These data do not constitute the contents of the files; they are solely technical information necessary for the system to function.)

3. "Zero-Knowledge" Architecture and Content Privacy

Kladim cannot see, read, or analyze your "User Content" (the actual data inside the files) because it is encrypted. The Private Key used for this process is exclusively under the user's control. The user is entirely responsible for the security of this key.

4. Data Retention and Destruction Policy

Kladim retains your data only for the duration of the service:

When your subscription ends or is canceled, the backed-up "User Content" is permanently deleted from operational systems within 30 (thirty) days.
If you do not upgrade to a paid plan at the end of a Trial (Demo) period, the data is similarly destroyed permanently from the system after 30 days.

5. Sharing of Information

Kladim does not sell or share the personal account data and metadata it collects with third parties for commercial purposes. Information may only be shared within the scope of confidentiality agreements with infrastructure providers strictly necessary for the performance of the service, or in response to legal obligations and lawful requests from official authorities.

6. User (Data Subject) Rights

Under applicable data protection laws, users have the right to access, correct, delete, or restrict the processing of their personal data. You can submit your requests or privacy-related inquiries, along with identity verification documents, to the following addresses:

E-Mail (Support): [email protected]
Registered E-Mail (KEP): [email protected]