Privacy Policy

1. Introduction

KeyBay.io ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

2. Information We Collect

2.1 Information You Provide

We collect information that you provide directly to us:

• Email Address: Used for order confirmation, delivery, and customer support
• Payment Information: Processed securely through Stripe (we do not store card details)
• Order History: Information about your purchases and transactions
• Communication Data: Messages you send to our support team

2.2 Automatically Collected Information

When you visit our Platform, we automatically collect:

• Usage Data: Pages viewed, time spent, navigation paths
• Device Information: Browser type, operating system, device identifiers
• IP Address: For security and fraud prevention
• Cookies and Similar Technologies: See Section 7 for details

2.3 Information We Do NOT Collect

• We do not require account registration or passwords
• We do not collect sensitive personal information (e.g., SSN, biometric data)
• We do not track your activity across other websites

3. How We Use Your Information

We use your information for the following purposes:

3.1 Service Delivery

• Process and fulfill your orders
• Deliver Access Rights to your email
• Send order confirmations and status updates
• Provide customer support

3.2 Platform Improvement

• Analyze usage patterns to improve our Platform
• Monitor and prevent fraud and abuse
• Ensure security and technical functionality
• Conduct internal research and analytics

3.3 Communication

• Respond to your inquiries and requests
• Send important service announcements
• Notify you of changes to our policies

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who help us operate the Platform:

• Stripe: Payment processing (subject to Stripe's privacy policy)
• Supabase: Database and backend services
• Resend/SendGrid: Email delivery services
• Vercel: Hosting and content delivery

These providers are contractually obligated to protect your information and use it only for providing services to us.

4.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal process (e.g., subpoena, court order)
• Enforcement of our Terms of Service
• Protection of our rights, property, or safety
• Prevention of fraud or illegal activities

4.3 Business Transfers

If KeyBay.io is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data transmission is encrypted using SSL/TLS
• Secure Storage: Data is stored on secure, access-controlled servers
• Payment Security: PCI-DSS compliant payment processing through Stripe
• Access Controls: Limited employee access to personal information
• Regular Audits: Periodic security assessments and updates

6. Data Retention

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations (e.g., tax, accounting records)
• Resolve disputes and enforce our agreements

Typical Retention Periods:

• Order information: 7 years (for financial compliance)
• Email addresses: Until you request deletion or 2 years of inactivity
• Usage analytics: 2 years in aggregated form

7. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

7.1 Types of Cookies

• Essential Cookies: Required for the Platform to function (e.g., session management)
• Analytics Cookies: Help us understand how users interact with the Platform (Google Analytics, Vercel Analytics)
• Performance Cookies: Improve Platform speed and responsiveness

7.2 Cookie Management

You can control cookies through your browser settings. Note that disabling certain cookies may limit Platform functionality.

8. Your Privacy Rights

Depending on your location, you may have the following rights:

8.1 General Rights

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Objection: Object to certain processing of your information
• Portability: Receive your data in a structured, machine-readable format

8.2 GDPR Rights (EU/EEA Users)

If you are in the European Union or European Economic Area, you have additional rights under GDPR:

• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority
• Right to restriction of processing in certain circumstances

8.3 CCPA Rights (California Users)

California residents have the right to:

• Know what personal information is collected, used, shared, or sold
• Delete personal information held by us
• Opt-out of the sale of personal information (we do not sell data)
• Non-discrimination for exercising privacy rights

8.4 How to Exercise Your Rights

To exercise any of these rights, please contact us at:

9. Children's Privacy

Our Platform is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete that information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that such transfers comply with applicable data protection laws through:

• Use of Standard Contractual Clauses (SCCs)
• Ensuring adequate data protection safeguards
• Compliance with EU-US and Swiss-US Privacy Shield principles where applicable

11. Third-Party Links

Our Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Significant changes will be communicated via email or Platform notification.

Your continued use of the Platform after changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: