Privacy Policy

1. Introduction

KleerCard, Inc. ("the Company," "we," "us," or "our") operates getkieercard.com and the KleerCard spend-card platform (together, the "Service"). KleerCard is a grant-compliance spend management platform built for nonprofit finance teams: we issue spend cards that automatically code every purchase to the correct grant or program fund, catch restricted-fund violations in real time, and generate audit-ready reports for 501(c)(3)s and other grant-funded organizations.

This Privacy Policy explains what personal data we collect from visitors to our website and from users of the KleerCard platform, how we use it, and the rights you have over it. It applies to information collected through the Service and through direct communications with us.

The Company is based at 102 South Tejon Street, Suite 1100, Colorado Springs, CO 80903 and can be reached at [email protected] or +1 (719) 457-0180.

2. Information We Collect

2.1 Information You Provide

We collect information you or your organization submit directly, including:

• Contact details (name, work email, phone number) when you fill out an inquiry form, request early access, or contact support;
• Organization information (nonprofit name, role, grant programs managed) you share during onboarding or account setup;
• Card-issuance data necessary to provision spend cards, including cardholder name and the grant or program codes you assign to each card;
• Transaction data generated when cardholders make purchases using KleerCard spend cards, including merchant name, transaction amount, merchant category code, and the grant code recorded at the moment of purchase;
• The content of any support messages, onboarding feedback, or direct communications you send us.

Because KleerCard serves nonprofit organizations rather than individual consumers, the personal data we hold consists primarily of B2B professional contact data (finance directors, grants managers, cardholders within your organization) and organizational financial-operations data (transaction records, grant allocations, card policies). We do not build consumer behavioral profiles or engage in targeted advertising.

2.2 Information Collected Automatically

When you visit getkieercard.com, we automatically collect limited technical information:

• IP address and approximate location (city and region level, not precise geolocation);
• Browser type, operating system, and device class;
• Pages visited, referring URLs, and time on page;
• Cookie and similar identifiers (see our Cookie Policy).

2.3 Payment Card Program Data

The KleerCard spend card program operates in partnership with a licensed card-issuing bank and card network. Transaction authorization data and card account data are processed by our banking and payment processing partners under their own data security and privacy standards, including applicable PCI DSS requirements. We retain grant-coded transaction records on your organization's behalf as part of the audit-trail feature of the Service.

2.4 We Do Not Knowingly Collect Children's Data

The Service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact [email protected] and we will delete it promptly.

3. How We Use Information

We use the information we collect to:

• Provision and operate the KleerCard spend card and grant-compliance platform for your organization;
• Apply the grant and program codes you configure to incoming transaction records and enforce the card-level spending policies you set;
• Generate grant allocation reports, audit exports, and real-time violation alerts that are the core deliverables of the Service;
• Sync grant-coded transaction data with accounting integrations (such as QuickBooks or Xero) that you have authorized;
• Respond to support inquiries, onboarding questions, and feature feedback;
• Send service updates and, with your consent where required, occasional product communications;
• Detect and prevent fraud, unauthorized card use, or abuse of the platform;
• Comply with legal obligations applicable to us as a payment-services-adjacent software provider.

We do not use cardholder transaction data or grant records for behavioral advertising. We do not sell personal information for monetary value. Where applicable state law treats certain advertising arrangements as a "sale" or "share," see the state-specific section below.

4. Sharing of Information

We share personal information only with:

• Our banking partner and card-network processors, which handle card issuance and transaction authorization as necessary to operate the spend-card program;
• Accounting integration partners (such as QuickBooks or Xero) that you explicitly connect to your KleerCard account, under their own published terms of service;
• Other service providers acting on our behalf (hosting, email delivery, anonymized website analytics) under contractual data-processing terms that restrict use to the services they provide for us;
• Government authorities or regulators, when required by applicable law or necessary to protect the rights, safety, or property of the Company or others;
• A successor entity in the event of a merger, acquisition, or asset sale, subject to this Policy.

We do not sell personal information to third-party data brokers, advertisers, or any other party for monetary value.

5. Cookies and Tracking

We use cookies and similar technologies to operate the site, maintain session state, and measure aggregate usage. We do not use third-party advertising or retargeting cookies. For full details and your opt-out choices, see our Cookie Policy.

6. Data Retention

We retain personal information only as long as needed for the purposes described in this Policy, to satisfy legal and accounting obligations, and to resolve disputes.

• Grant-coded transaction records are retained for the duration of your active subscription and for seven years thereafter, reflecting standard nonprofit fund-accounting documentation requirements and federal grant record-keeping expectations under OMB Uniform Guidance (2 C.F.R. Part 200);
• Contact and inquiry data (website form submissions, support emails) is retained for 24 months from last contact, then deleted or anonymized;
• Server access logs are retained 90 days, then aggregated and purged.

7. Security

We use administrative, technical, and physical safeguards designed to protect your data, including TLS encryption in transit, restricted-access databases with least-privilege access controls, and regular internal access-log review. Card transaction data in transit is handled over encrypted channels at our banking partner layer. We are actively building toward SOC 2 Type II certification as part of our security roadmap; we do not claim current certification.

No security system is perfectly secure. We cannot guarantee absolute protection against all threats and cannot be responsible for breaches resulting from circumstances outside our reasonable control.

8. Your General Rights

Depending on your jurisdiction, you may have rights including the right to access, correct, or delete your personal data, and the right to limit or object to certain processing. To make a request, email [email protected]. We will respond within the timeframe required by applicable law. See the state-specific section below for jurisdiction-specific rights and response deadlines.

9. Colorado Residents (Colorado Privacy Act)

KleerCard is headquartered in Colorado Springs, Colorado, and our platform serves nonprofit organizations throughout the United States, including many operating in Colorado. Under the Colorado Privacy Act ("CPA"), Colorado residents have the following rights with respect to personal data we control.

9.1 Your CPA Rights

• Right of Access: confirm whether we are processing your personal data and obtain a copy.
• Right to Correction: correct inaccuracies, considering the nature and purposes of processing.
• Right to Deletion: request deletion of personal data concerning you.
• Right to Data Portability: obtain a portable copy where technically feasible (up to twice per year).
• Right to Opt Out: opt out of (a) targeted advertising, (b) sale of personal data, and (c) profiling that produces legal or similarly significant effects.

9.2 Universal Opt-Out Mechanism

We honor browser-transmitted universal opt-out signals, including the Global Privacy Control ("GPC"), as a request to opt out of sale and targeted advertising. Configuring GPC in your browser is sufficient - no separate written request is required.

9.3 How to Exercise

Submit a request by emailing [email protected]. We respond within 45 days; one 45-day extension is available where reasonably necessary, with notice to you.

9.4 Appeal

You may appeal a denial by replying to our response email. If we maintain the denial, you may contact the Colorado Attorney General at coag.gov.

9.5 California Visitors

If you are a California resident, you may also exercise the rights granted under the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA"), including the right to know, the right to delete, the right to correct, and the right to opt out of sale or sharing. We do not sell personal information and do not "share" personal information for cross-context behavioral advertising.

To submit a CCPA / CPRA request, email [email protected] with the subject line "California Privacy Request."

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by a new effective date and, where appropriate, a notice on the Service. Continued use of the Service after the effective date of a revised Policy constitutes your acceptance of the changes.

11. Contact

Questions, requests, or complaints can be sent to:

KleerCard, Inc.
102 South Tejon Street, Suite 1100
Colorado Springs, CO 80903
Email: [email protected]
Phone: +1 (719) 457-0180