سياسة الخصوصية
This policy explains what personal data Keyloom collects, why, and what you can do about it. The controller is Keyloom, reachable at [email protected].
What we collect
- Account: name, email, password (stored only as a secure hash), language, email preferences, two-factor settings.
- Plugin devices: the name of each computer you connect and when it was last used, so you can disconnect it.
- Activity: items you favorite, download and apply (one “use” per item per month), searches that found nothing (to show what people want), requests and votes.
- Security: a one-way hash of your IP address on uses (to detect fake uses), and standard server logs kept for a short time.
- Payments: PayPal handles payments. We receive your subscription status, the amounts and fees, and the PayPal email of the payer. We never see your card or bank details.
- Creators: public creator name, bio, portfolio links, the items you upload (including frames sent for automatic tagging), payout PayPal email, earnings and payouts.
Why we use it
- To run your account, the plugin and Premium (contract).
- To pay creators fairly and prevent abuse (contract and legitimate interest).
- To keep the service secure and fix problems (legitimate interest).
- To send service emails: verification, security alerts, receipts, review results, payouts. Plugin update emails can be turned off in Settings.
- To meet legal and accounting duties (legal obligation).
We do not sell your data and we do not use advertising trackers.
Who helps us
- Our web host (Namecheap) — servers and database.
- Cloudflare — file storage (R2) and the bot check on forms (Turnstile).
- PayPal — subscriptions and creator payouts.
- Mailgun — sending emails.
- Anthropic — suggests titles, tags and translations from preview frames when a creator publishes, and rewrites searches that found nothing. Only the item frames and texts are sent, not your account data.
Some of these providers are outside your country. They are bound by contracts that protect your data.
Cookies
We only use cookies needed for the site to work: your login session, security (CSRF) and your light/dark theme choice. No analytics or advertising cookies.
How long we keep it
- Account data: while your account is open, then deleted within 30 days of closing it.
- Payment, earnings and payout records: as long as accounting law requires (usually up to 10 years).
- Unfinished uploads: deleted after 7 days. Login codes for the plugin: minutes.
Your rights
You can ask to see, correct, export or delete your data, object to some uses, or complain to your data protection authority. Write to [email protected]; we answer within 30 days. Most profile details can also be changed directly in Settings.
Changes
If we change this policy in an important way, we will email you before it applies.