Privacy policy

Last updated: 1 November 2026 · version 2026-11-01-v3

This translation is provided for convenience; the Spanish version prevails.

What data we process, what for, who we share it with and how to exercise your rights. It applies to Klusted (web app, mobile and desktop apps, API console and waitlist), Pat (thepat.io), Melty Clocks Ads and the Melty Clocks website.

In short. Melty Clocks offers three products: Klusted (AI that brings models together), Pat (a personal assistant on Telegram, WhatsApp and the web) and Melty Clocks Ads (a portal for businesses to advertise). We keep what we need to provide the service and charge for it. To answer you, your text and files travel to the AI provider of the model you use. The free plan is paid for by ads: every reply carries a “Sponsored” block with text and a link, chosen only from your question at that moment and the area you tell us. We do not profile you, we do not sell your data, and we never show ads on health, mental health or political topics, or to minors. There are never ads on WhatsApp. Anyone who does not want ads uses a paid plan. You can ask for access, correction or deletion by writing to support@klusted.com (Klusted and Pat) or support@meltyclocks.com (Melty Clocks and Melty Clocks Ads).

1. Controller and contact

The data controller is Melty Clocks, which runs Klusted (klusted.com and app.klusted.com, mobile and desktop apps, API console), Pat (thepat.io) and Melty Clocks Ads (meltyclocks.com and app.meltyclocks.com).

Either address serves for privacy questions and to exercise your rights. This policy is common to the three products. Each has its own part; what is not said in a product's part, the general rules apply.

2. What data we process and why

DataPurposeLegal basis
Account: name, email, password (stored encrypted in an irreversible way), sessions and linked devices.Create and protect your account, identify you and sign you in.Performance of the contract
Age of majority: your confirmation that you are 18 or over and the date you gave it.Be able to give you the free plan, which is for adults only.Performance of the contract
Content: your messages, files, images, voice audio, projects, generated results, memory Klusted keeps for you and custom instructions.Provide the service: answer you, remember context, create content and let you come back to it.Performance of the contract
Teams: organisation, role, invitations, members and team usage.Manage teams, permissions and team billing.Performance of the contract
Payments and usage: plan, balance, transactions, amounts, invoices, payment status and the consents you give when you buy. Stripe handles card data; we never see it in full.Charge you, deduct from your balance, show your usage, issue invoices, apply spending limits and handle refunds.Performance of the contract and legal obligation (tax and commercial)
API keys and connections: keys you create in the console (stored protected), provider accounts and services you connect yourself.Make the API, the connections and the tools you turn on work.Performance of the contract
Daily use of the free plan: counters of the day's messages, images, agent tasks and Pat messages.Apply the free plan's daily caps.Performance of the contract
“No ads” and area: your “No ads” choice (on or off), the date of the last change and the area you decide to give.Provide those features.Performance of the contract
Free trial of “Pat without ads”: an encrypted mark (hash) of your phone number, the trial's start and end dates and its status.Only so that the 7-day trial is not repeated with the same account or number. An encrypted mark of your number for 12 months so that the free trial is not repeated. We do not keep the number in plain text for this purpose.Legitimate interest (preventing abuse of the trial)
Notifications: notification identifier of your phone or desktop.Send you the notifications you turn on.Consent (you can turn them off on your device or in Settings)
Security and technical: IP address, activity and security logs, usage limits, device and browser data.Protect the service and accounts, prevent fraud and abuse, apply limits and diagnose errors.Legitimate interest (security of the service)
Support and feedback: the messages you send us and the comments you choose to send from the app.Answer your questions and improve the service.Performance of the contract and legitimate interest
Waitlist: email, date of request and confirmation of your consent (see section 9).Manage the list and tell you when access is available.Consent
Pat (thepat.io): phone number or Telegram username, WhatsApp, messages, voice notes, photos and documents, thread, routines, Pat's email and what it reads from the services you connect (see section 10).Let Pat assist you on the web, Telegram and WhatsApp, and do what you ask with the services you connect.Performance of the contract and, for each service you connect, your consent

We do not use your earlier conversations, your files, your memory or the content of your connected accounts for advertising, and we do not sell your data. On the free plan, the question you ask at that moment is used, only to choose and adapt the ad for that reply (see “Contextual ads: how they work”, in section 3). We do not make decisions that legally affect you based solely on automated processing.

Ads you see (free plan and free Pat)

DataPurposeLegal basis
Your current question (the message in progress, not your history, attachments or memory) and the area you give us (for example, your city, in Settings or in the question itself).Choose an approved ad that fits what you ask, adapt its wording to your question, and decide that no ad is shown if the topic is sensitive. The question is not kept for advertising: it is used at that moment and discarded.Legitimate interest: funding the free plan with contextual advertising, without profiles, without keeping the question and without sensitive data. You accepted it when you created your free account and you can object (section 6).
Impression record: ad ID, date and time, product and channel (web, app, desktop, Pat), approximate area and your internal account ID. It does not include the text of your question.Count impressions, apply a daily ad limit, avoid repeating the same ad and work out what the advertiser owes.Legitimate interest (measurement, limits and billing advertisers)
Click record: click ID, date and time, ad, IP address and browser technical data (shortened or hashed, see section 5).Count valid clicks, filter fake or repeated clicks (fraud) and bill.Legitimate interest (fraud prevention) and legal obligation as regards billing
Reports about an ad: your report or comment.Handle you and remove unsuitable ads.Legitimate interest and legal obligation

We do not use profiles or interest segments, mobile advertising IDs, data from other services, email, calendar, files, or anything Pat reads from Google, GitHub, Stripe or your Mac.

Melty Clocks Ads (advertisers: businesses and professionals)

DataPurposeLegal basis
Account: name, email, phone, password (stored encrypted in an irreversible way), sessions and role within the company.Create and protect the advertiser's account.Performance of the contract
Advertiser company: the data the advertiser itself enters when signing up at app.meltyclocks.com (legal name, tax and VAT ID, address and invoicing details, contact person).Verify the advertiser, invoice and apply VAT. Company data belongs to the company; that of its representative is personal data.Performance of the contract and legal obligation (tax and commercial)
Ads: text, destination links, approved-facts sheet the AI may use, review and approval history.Review and approve the ad, show it and handle reports.Performance of the contract and legitimate interest (content control)
Conversation with the portal's AI assistant.Help you write and adjust the ad.Performance of the contract
Payments: prepaid balance, top-ups, cost per click, invoices and payment status. Stripe handles card data.Charge, deduct from the balance, invoice and refund what applies.Performance of the contract and legal obligation
Results: impressions, valid and invalid clicks, cost and aggregated area. Never data identifying the people who saw or clicked the ad.Tell you how the ad is doing and bill.Performance of the contract
Security: IP, access logs and failed attempts.Protect the portal and the balance and prevent fraud.Legitimate interest
Internal panel (restricted access for authorised staff, with a log of actions).Approve ads, handle support and watch for fraud.Legitimate interest

Melty Clocks website (meltyclocks.com) and contact form

DataPurposeLegal basis
Name, email and phone you type in the form, the message you add and proof that you accept the terms.Answer your enquiry and, if applicable, open an advertiser account for you.Pre-contract measures at your request and legitimate interest in answering enquiries
The “I want to receive news” box (unticked by default), your email and the date.Send you news of Melty Clocks, Klusted, Pat and Ads by email.Consent, which you can withdraw with the unsubscribe link in every email

The Melty Clocks website uses no cookies, analytics or third-party scripts.

3. Providers that process data

To provide the service we share data with providers that act on our behalf or carry out what you ask for. These are the ones the service uses today:

ProviderPurposeWhat data it receives
OpenAILanguage models, real-time voice, custom voices, images and web search, when you choose or the service uses one of its models.What you send to the model (text, files, images, audio) and the context it needs.
AnthropicLanguage models (Claude) and web search.What you send to the model and the context it needs.
GoogleGemini models, image and music generation.What you send to the model and the context it needs.
xAIGrok models and video generation.What you send to the model and the context it needs.
AI provider that chooses and adapts the adChoose the ad and adapt its wording, on the free plan.Your current question and the area. It does not receive your history or your identity.
StripePayments, subscriptions and invoices, and advertisers' prepaid balance.Email, billing details and amounts (for advertisers, also the company's tax details). Stripe collects card data directly.
HostingerHosting of the service, of Melty Clocks Ads and of the Melty Clocks website, and sending emails (confirmations, account recovery, service notices and replies to the contact form).All service data stored on the server; email addresses and the content of the messages we send you.
ExpoDelivery of notifications to the mobile app (through Apple and Google notification services).Notification identifier and the text of the notification.
Meta (WhatsApp)Pat's WhatsApp channel: receive and send your messages, voice notes, photos and documents.Your phone number and the content of the messages you exchange with Pat on WhatsApp.
TelegramPat's Telegram channel.Your Telegram ID and username, and the content of the messages you exchange with Pat.
Hostinger (Pat's email)Mailbox for Pat's @thepat.io addresses, to receive and send email on your behalf.The emails Pat receives or sends for you, with their attachments.
GitHubRead your repositories and notifications when you connect your account to Pat.What Pat reads from your GitHub account and the actions you confirm.
Google (your account, with Pat)Gmail, Calendar and Drive of the Google account you connect, so Pat can read them and act with your OK. It meets the Limited Use requirements (section 10).What Pat reads from your Google account and the actions you confirm.
Google (Drive)Backups of the service, encrypted before they leave our servers and kept for 30 days.Encrypted copies. Google cannot read their content because the key does not travel with them.

Contextual ads: how they work

4. Transfers outside the European Union

Some providers (for example, the AI providers, Stripe, Expo, Google, Meta or Telegram) process data in the United States or other countries outside the European Economic Area. When this happens, we rely on the safeguards provided by the General Data Protection Regulation: adequacy decisions (such as the EU-US Data Privacy Framework for certified companies) or standard contractual clauses. Open models served for the free plan will not run in China. You can ask us for information about these safeguards at support@klusted.com or support@meltyclocks.com.

5. How long we keep data

6. Your rights

You can exercise at any time your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent where processing is based on it (without affecting the above). You can, in particular, object to your question being used to choose ads (see section 3). Write to support@klusted.com (Klusted and Pat) or support@meltyclocks.com (Melty Clocks and Melty Clocks Ads) from your account email; we will reply within the legal period of one month. If you think we have not handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es) or another competent authority.

7. Security

We apply reasonable technical and organisational measures: encrypted connections, passwords and keys stored protected, encrypted secrets, access control by account and by team, usage limits and encrypted backups. Advertisers' balance and data are protected with the same measures, and the internal panel requires restricted access and logs what is done. No system is infallible; if a breach affecting you occurs, we will tell you as the law requires.

8. Minors

The free plan with ads, which includes free Pat, is for people aged 18 or over only: you confirm it with a box when you start. Payments (plans and balance) are also reserved for people aged 18 or over. For everything else, Klusted can be used from the age of 13; if you are under 14, you need the consent of your parent or legal guardian, as Spanish law requires. We do not knowingly collect data from children under 13, or from children under 14 without that consent; if you believe it has been given to us, write to us and we will delete it.

We do not show ads to minors and we do not profile anyone. We also do not accept ads for betting, alcohol, tobacco, adult content or other sensitive categories (see the Ad policies). Melty Clocks Ads and the contact form on the Melty Clocks website are for adult businesses and professionals only.

9. Waitlist

Information about the waitlist.

Klusted contact

For questions about your data, write to support@klusted.com.

What we use it for

We keep your email, the date of your request and the confirmation of your consent to manage the list and tell you when access is available. Joining does not create an account or a paid subscription. You can withdraw your consent using the unsubscribe link in the emails.

Storage and sending

The Klusted service stores the request and uses Hostinger's email service to send you the confirmation. We do not send your address to the AI models to manage this list. Unconfirmed requests are deleted after 30 days; confirmed ones, when you unsubscribe or after 12 months. We do not use advertising analytics or tracking cookies on this landing page.

Your rights

You can request access, rectification, erasure, restriction or portability of your data and withdraw your consent by writing to support@klusted.com. You can also lodge a complaint with the competent data protection authority.

10. Pat, your right hand (thepat.io)

In short. Pat is your personal assistant: it writes to you on Telegram, WhatsApp or the web, reads what you connect to it and asks for your “Needs your OK” before paying, sending, deleting or publishing. It is off by default and, during the beta, only authorised accounts use it. This section completes the rest of the policy: what it does not say here, the sections above still apply. New section since 31 October 2026. Free Pat (30 messages a day) works only on Telegram and the web, with ads. There are never ads on WhatsApp: Pat on WhatsApp is only part of the 10 EUR a month “Pat without ads” plan (100 messages a day) and only for numbers in the European Economic Area.

What Pat is and who uses it

Pat does not switch on by itself. If your account is not authorised, Pat is not available to you and no service is connected. Every connection you make afterwards (a channel, Google, GitHub, Stripe, email, your Mac or Pat's computer) is optional and you can remove it whenever you like.

Telegram and WhatsApp

Pat plans and free trial

Free Pat (30 messages a day) works only on Telegram and the web, with ads, and is for people aged 18 or over only. The “Pat without ads” plan (10 EUR a month, 100 messages a day) adds WhatsApp, only with numbers in the European Economic Area, and removes the ads. Every paid Klusted plan (Pro, Pro+, Ultra and Teams) includes it at no extra cost. It has a free 7-day trial, no card needed, once per account and per phone number. To stop it being repeated we keep an encrypted mark of your number for 12 months from the start of the trial, also if you delete your account or your number; after that it is deleted. When the trial ends, if you do not subscribe, WhatsApp stops being available and you continue with free Pat, with ads, on Telegram and the web.

Ads in Pat

On the free plan, Pat replies that reach you on the web or on Telegram carry a “Sponsored” block at the top. It is chosen only from your message at that moment and the area you give us; never from what Pat reads from your Gmail, calendar, Drive, GitHub, Stripe, your Mac or Pat's computer, nor from your memory. Alerts, daily briefings and routines that Pat sends you on its own carry no ads, and neither does Pat on WhatsApp. How they work: section 3.

Sign in with your phone

If you have already linked your WhatsApp with Pat, you can sign in by typing your number: we send you a single-use code on WhatsApp (through Meta). We store your number and the code only as a hash, never in plain text. The code expires after 10 minutes, works once and allows 5 attempts. Code requests are deleted within 1 day. The answer is always the same, whether or not you have an account.

Memory and thread; briefings, alerts and routines

Google (Gmail, Calendar and Drive)

If you connect your Google account, Pat can read your email, calendar and Drive files to answer you, summarise your day or look up something you ask for. Automatic reads only work if you turn them on in Settings › Pat. Anything that changes something (sending an email, creating or moving an event, deleting a file) goes through a “Needs your OK”. We store your Google credentials encrypted and you can disconnect them whenever you like: they are revoked at Google and we delete them.

Google user data: Limited Use. Klusted's and Pat's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

GitHub, Stripe and Pat's email

Mac access

If you install the desktop app and share folders, Pat can list and read what is inside those folders, and send you a file through your channel. It cannot change or delete anything on your Mac, and it sees no folder you do not share. The request and the file travel through our servers encrypted and are not kept: the result is deleted as soon as it is read and, if nobody reads it, a sweep deletes it within 1 hour. An image or scanned PDF the model has to see stays in memory for 10 minutes at most. We keep only the names of the shared folders, never the paths.

Pat's computer (a browser on our server)

If you turn it on, Pat uses its own browser, hosted on our server, to do things on websites for you.

Internet search and AI models

Approvals: “Needs your OK”

Pat does not pay, send, delete or publish on its own. It prepares the action and shows it to you. If you do not confirm it within 15 minutes, it expires. We keep the proposed action, encrypted, for up to 7 days. When Pat acts without you writing to it (alerts and routines), it can only read or propose something: it never makes a change without your OK.

How to unlink and delete

11. Cookies

We only use technical cookies and storage; ads do not use cookies. Details in the Cookie policy.

12. Changes to this policy

If we change this policy in a significant way, we will tell you by email or in the app, and 30 days ahead when the change affects what the free plan includes or how your data is used for ads. The current version is the one on this page, with its last-updated date and version number.