Skip to main content

Security and GDPR FAQ

Each answer is short on purpose. The linked documents are the authoritative text.

Do you store my customers' personal data?

Klirry is built not to. From an order it keeps what is needed to compute profit: the amount, the currency, the destination country, the payment method type and the shipping method. Personal details of your buyers are not stored. Details are in the privacy policy.

Who processes my data?

The privacy policy lists who processes data on Klirry's behalf. The terms of that processing are in the data processing agreement.

Where is my data stored, and who are the sub-processors?

Your orders and account data are stored on a server in Falkenstein, Germany (Hetzner). Two vendors are US companies: Stripe (billing) and Sentry (error monitoring, with an EU data location). The list below is taken from the same register as the sub-processor page and the data processing agreement; a change is announced at least 30 days before it takes effect. A vendor marked "Planned" is not in use yet.

VendorPurposeRegionStatus
Hetzner Online GmbHCloud hosting: servers, database, storage volumes and encrypted backupsGermany (Falkenstein)Engaged
Scaleway SASTransactional email only: account, security, trial-reminder and notice mail (never marketing)France (Paris, fr-par)Planned
Functional Software, Inc. (Sentry)Error monitoring and crash reportingEU data location (de.sentry.io); the provider is a US companyPlanned
StripeSubscription billing for customers who do not pay through Shopify: hosted checkout and payment collection. Klirry is the controller of billing data; Stripe is not a sub-processor of the Customer's Order DataStripe's data processing agreement states that personal data is transferred to Stripe, LLC in the United States under its data transfer addendumPlanned until live mode
Sendinblue SAS (Brevo)Newsletter and other marketing email, sent only to people who opted in (double opt-in). Klirry is the controller; Brevo is not a sub-processor of the Customer's Order DataFrance / EUPlanned
Umami (self-hosted)Website analytics for klirry.com marketing pages, only after the visitor's consent (see the cookie section of the Privacy Policy). Runs on Klirry's own server; no third party receives the dataGermany (Falkenstein), on Klirry's own Hetzner serverPlanned

How do I get a DPA?

The data processing agreement is published on this site.

How do I get a copy of my data?

See exporting your data.

How do I delete my account?

See cancelling your account and data deletion.

Does Klirry change anything in my store or ads?

No. Klirry only reads your data, and there is no Klirry pixel to install. The only things it creates in a connected store are its own webhook subscriptions (small notices your store sends Klirry when an order comes in) and, for Shopify, the subscription you approve. See why we never touch your ads.

Last reviewed 2026-10-11