Privacy Notice

Who this notice covers

Keyfolio operates Keyfolio. This notice applies to visitors, account holders, workspace users, and people whose billing contact details are entered into a Keyfolio workspace. For information handled by a customer in its workspace, that customer is normally the controller and Keyfolio acts on its documented instructions as described in the Data Processing Addendum.

Information we collect

• Account information: name, email address, password credential, authentication and security settings.
• Workspace and billing information: organization, client contact details, invoice records, usage totals, pricing rules, and payment status.
• Provider connection information: connected-provider identifiers, encrypted management credentials, key labels, limits, and usage data needed to perform billing reconciliation.
• Technical and security information: IP address, browser or device information, session identifiers, request logs, and security events.
• Communications: messages and requests sent to us, including support and privacy requests.

Do not enter payment-card data into Keyfolio. Hosted card checkout and connected-account onboarding are provided by Stripe.

How we use information

We use information to provide, secure, maintain, and improve Keyfolio; create and administer accounts; reconcile usage and prepare invoices; process requested payments through Stripe; communicate about account, security, and service matters; enforce our agreements; prevent fraud and abuse; and comply with law. We do not sell personal information or use provider management keys to send model-completion traffic.

Our legal bases

Where data-protection law requires a legal basis, we process information to perform a contract or take steps at your request, for our legitimate interests in operating and securing Keyfolio, to comply with legal obligations, and with consent where required. You may withdraw a consent-based choice at any time, without affecting processing completed before withdrawal.

How we share information

We share information with service providers that help us run Keyfolio, including hosting and database providers, Stripe for payment services, AWS SES for transactional email, and connected providers such as OpenRouter when you direct us to connect or sync data. We may also disclose information to professional advisers, authorities, or counterparties where required by law or in connection with a corporate transaction. We do not rent or sell personal information.

Retention and security

We retain information for as long as your account is active and thereafter only as needed for legal, accounting, dispute-resolution, security, and backup purposes. We use measures designed to protect information, including access controls, encrypted storage for provider management credentials, and authenticated sessions. No service can guarantee absolute security; report suspected unauthorized access promptly.

Your choices and rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, or information about processing. To make a request, email privacy@keyfolio.ai from the address associated with your account and describe the request. We may verify your identity and may retain information where an exception applies. We will not discriminate against you for exercising applicable privacy rights.

Keyfolio does not sell or share personal information for cross-context behavioral advertising. If that changes, we will update this notice and provide any required privacy-choice mechanism.

International transfers and changes

Keyfolio may process information in the United States and other countries where it or its service providers operate. Where required, we use an appropriate transfer mechanism. We may update this notice as our practices or the law changes; material changes will be posted here before they take effect. Questions or complaints can be sent to privacy@keyfolio.ai.