Privacy Policy

Last updated: August 2026

We are Keyrie SAS ("Keyrie", "we", "us"). This policy explains what personal data we collect, why we collect it, how long we keep it, your rights under the EU General Data Protection Regulation (GDPR), and how to contact us. By using keyrie.eu and our three APIs (Bartavelle, Kite, Goshawk), you consent to the practices described below.

What we collect and why

Data collected	Why (purpose)	Legal basis
Email address you provide at registration	Account creation, issuing your API key, service notifications, password reset.	Contractual necessity (to provide the service); legitimate interest (security).
Contact-form submissions (name, email, message, product, attachments you upload)	Responding to your request, sales follow-up, product feedback.	Legitimate interest (customer support); your consent for marketing follow-up where required.
API usage logs (timestamp, calling IP, endpoint, byte / page / minute counts, errors)	Billing, quotas, security monitoring, debugging, and product analytics.	Contractual necessity (billing/usage); legitimate interest (fraud prevention, stability).
GDPR / attribution parameters (utm_source, utm_campaign) stored in localStorage	Attributing which marketing channel or campaign brought you so we can measure ROI of our funnels.	Legitimate interest (marketing analytics). You can clear or disable this anytime.

No third-party selling

We do not sell, rent, or otherwise monetise your personal data to third parties. We never use your documents, videos, boards, or audio to train any AI model. Usage logs and contact submissions are accessible only to Keyrie staff who need them to run the service.

Data retention

API usage logs: retained for 13 months, then aggregated and deleted.
Contact-form submissions: retained for 24 months from last contact, then deleted unless a contractual relationship is established (in which case the retention period for customer records applies).
Uploaded files & processed output: deleted within 24 hours of job completion unless you explicitly choose long-term project storage. End-to-end / customer-managed encryption keys are not held by Keyrie.
Account data: retained while the account is active and for 12 months after deletion for audit purposes, then fully erased.

Your GDPR rights

Under the GDPR you have the right to:

Access — ask what personal data we hold about you and obtain a copy.
Rectification — correct inaccurate or incomplete data.
Erasure ("right to be forgotten") — request deletion of your data.
Restrict processing — ask us to pause certain uses while a dispute is resolved.
Data portability — receive your data in a structured, machine-readable format.
Object — object to processing based on legitimate interests or for direct marketing (you can unsubscribe from any marketing email in one click).

To exercise any of these rights, email contact@keyrie.eu. We respond within 30 days. You also have the right to lodge a complaint with your local data-protection authority.

Data processing, transfers & storage

Data may be processed both inside and outside the European Economic Area. Where we transfer data outside the EEA, we rely on the EU Commission's Standard Contractual Clauses, or an adequacy decision, and require equivalent protection. You may select EU or US data residency per product on Enterprise plans. See each product's compliance notes: Bartavelle, Kite, Goshawk.

Cookies & tracking

We use Plausible (self-hosted or Plausible.io) for privacy-friendly analytics — no cookies, no personal data, no cross-site tracking. UTM parameters are captured via a short inline script into localStorage purely for campaign attribution and are never shared externally.

Links to other sites

Our pages may link to third-party services (GitHub, Stripe, Formspree). Their content and privacy practices are governed by their own policies.

Changes to this policy

We may update this policy; material changes will be posted here with a revised "Last updated" date and, where required, notified via email.

Contact us

Email: contact@keyrie.eu
Data Protection Officer (EU representative): contact@keyrie.eu

Keyrie SAS — EU / US data residency available. SOC 2 Type II in progress, GDPR compliant, HIPAA/BAA on Enterprise.