Klaviyo

Klaviyo says some analytics data is processed using generative AI and machine-learning technologies.

Behavioral marketing data is a core input to the platform, so product-improvement and analysis uses remain broad.

Klaviyo distinguishes controller processing from customer data it handles on behalf of customers.

The company documents privacy rights and processing categories instead of obscuring AI-related use in product copy.

Customers can decide whether to funnel large amounts of behavioral and messaging data into the platform.

Klaviyo discloses sale or sharing of certain categories for business and marketing partners, ad networks, analytics providers, and social networks.

The platform's cross-channel marketing model naturally expands how many outside systems can receive user-level data.

Klaviyo documents processor roles, privacy rights, and the categories of data it handles.

Customers can decide which ecommerce, CRM, messaging, or analytics systems to connect.

Opt-out and privacy-rights paths exist for affected users where applicable.

Klaviyo collects analytics, digital behavioral data, and web interaction data for marketing and service purposes.

Sale/share disclosures and ad-network relationships keep the tracking posture far below a privacy-first analytics tool.

Users can exercise opt-out and privacy rights where applicable.

Customers can choose consent settings and message-channel rules rather than having a fixed one-size-fits-all tracking setup.

The privacy materials clearly acknowledge digital behavioral data and web interaction data.

Retention periods are determined by processing purposes, customer instructions, and legal needs rather than one universal timeline.

Marketing logs, audience data, and compliance records can persist longer than end users expect.

Privacy rights include access, deletion, correction, and portability routes.

Customer instructions play a role in how some platform data is retained.

Consent and suppression choices can reduce how much future marketing data accumulates.

End-user privacy still depends on each Klaviyo customer's tracking and consent implementation.

The platform's ad-tech and partner-sharing model means controls are meaningful but not exhaustive.

Customers can manage account details, contacts, campaign settings, SMS consent, and suppression.

Opt-out and privacy-rights mechanisms are documented for affected users.

Customers can choose which systems and behavioral data flows feed the platform.

Suppression and consent tooling can materially reduce unwanted messaging and future data use.