Privacy Policy

2) Information we collect

We collect the following categories of information:

• Account Information: email address, authentication identifiers, and account settings. Passwords (if used) are hashed and never stored in plain text.
• Billing and Transaction Data: subscription status, plan details, invoices, taxes, and payment confirmations. Payments are processed by Paddle (our merchant of record). We do not store full payment card details. See Paddle’s privacy policy: paddle.com/legal/privacy.
• Usage Metrics: counts of actions you perform in the app (e.g., keyword research count, competitor analysis count, exported rows), feature interactions, and timestamps. We use these to operate the service, enforce plan limits, and improve the product.
• Device and Technical Data: IP address, browser type, operating system, and general device identifiers collected via server logs and security tooling to secure and maintain the Services.
• Support and Communications: messages you send to us (e.g., email), and related metadata.
• Cookies and Similar Technologies: cookies and local storage to keep you signed in, remember preferences, and measure product performance. You can control cookies via your browser settings.

3) How we use your information

• Provide, operate, and maintain the Services and core features.
• Authenticate users and secure accounts.
• Process billing, subscriptions, and payments via Paddle.
• Enforce plan limits and fair use policies.
• Provide customer support and respond to inquiries.
• Monitor, prevent, and detect fraud, abuse, and security risks.
• Analyze product performance and improve our Services.
• Comply with legal obligations and enforce our terms.

4) Legal bases (EEA/UK)

If you are in the European Economic Area (EEA) or the United Kingdom (UK), we process personal data under these legal bases:

• Contract: to provide the Services you request and fulfill our agreement with you.
• Legitimate Interests: to secure, improve, and operate the Services in ways that do not override your rights.
• Legal Obligation: to comply with law, tax, and regulatory requirements.
• Consent: for certain optional cookies or messages. You may withdraw consent at any time.

5) Sharing your information

We do not sell personal data. We share information with service providers who help us operate the Services, under contracts that limit their use of the data:

• Payments: Paddle (merchant of record and payment processing). See link above.
• Infrastructure: hosting, databases, logging, email delivery, analytics, and security providers.
• Compliance and Law Enforcement: when required by law or to protect our rights, users, or the public.
• Business Transfers: in connection with a merger, acquisition, financing, or sale of all or a portion of our assets.

6) International transfers

We may transfer, store, and process your information outside your country of residence. Where required, we use appropriate safeguards, such as Standard Contractual Clauses (SCCs), to protect data during international transfers.

7) Data retention

We retain personal data for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type and context.

8) Security

We use administrative, technical, and organizational measures to help protect personal data. However, no method of transmission or storage is completely secure. If you believe your account has been compromised, contact us immediately.

9) Your rights

Depending on your location, you may have rights under data protection laws (e.g., GDPR, UK GDPR, CPRA/CCPA), including:

• Access to the personal data we hold about you.
• Correction of inaccurate or incomplete data.
• Deletion of your personal data when legally required.
• Restriction or objection to certain processing.
• Data portability, where applicable.
• Opt-out of selling or sharing (where applicable under regional laws).

To exercise your rights, contact us at contact@keywordra.com. We may need to verify your identity before fulfilling your request.

10) Cookies

We use cookies to keep you signed in, remember preferences, and understand how the product is used. You can usually remove or reject cookies via your browser settings. Note that removing cookies may affect functionality.

11) Communications

We may send you transactional emails (e.g., account, billing, security). Where required, we will obtain consent for marketing communications. You can opt out of non-essential emails via the unsubscribe link in the email or by contacting us.

12) Children’s privacy

Our Services are not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us personal data, please contact us to request deletion.

13) Third-party links

The Services may contain links to third-party websites or services. We are not responsible for their privacy practices. We encourage you to review the privacy policies of those third parties.

14) Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version with a new “Last updated” date. If changes materially affect your rights, we will provide additional notice where required.

15) Contact us

If you have questions or requests, contact us at contact@keywordra.com.