Klaviyo
Klaviyo · Uncategorised · US · www.klaviyo.com
Last verified 2026-09-16
Entry
services/klaviyo.yamlTraining on your data (default tier)
Not stated
Retention
Contract data retained for the contract term plus a limited period
Data residency
Stored in the United States and other operating locations
Vendor data-handling terms
Training on your data (default tier)
Not stated
The notice says some data is processed using AI, including generative AI, but does not say whether customer data trains models.
Retention
Contract data retained for the contract term plus a limited period
“Where we are processing personal data is based on contract, we generally will retain your personal data for the duration of the contract”
Data residency
Stored in the United States and other operating locations
“Your personal information may be transferred to and stored in locations outside Australia where we and our third-party service providers have operations, including in the United States, where Klaviyo, Inc.”
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| klaviyo.com | app | observed |
Assessment
Business: medium
Reasoning: A marketing automation platform with generative AI features. Data is held for the contract term and stored in the United States; whether customer data trains models is not stated.
Flags: Training-use not stated · US processing · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Documented. Terms verified against the Klaviyo Privacy Notice where stated.
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.