Privacy Policy

1. INFORMATION WE COLLECT

We collect two categories of information: Personal Information and Non-Personal Information.

We collect Personal Information only when you voluntarily provide it, such as when you:

• Create an account or profile
• Subscribe to our Services
• Contact customer support
• Sign up for newsletters or communications
• Participate in surveys or feedback requests

We may also collect information from third-party sources to enhance our Services, such as publicly available business information or social media profiles you choose to connect.

2. HOW WE USE YOUR INFORMATION

We use your Personal Information to:

• Create and maintain your account
• Provide, operate, and improve our AI case study generation Services
• Generate professional, SEO-optimized case studies from your transaction data
• Process payments and manage subscriptions
• Communicate about your account, Services, and support requests
• Send newsletters, updates, and promotional materials (with your consent)
• Personalize your experience and case study recommendations
• Detect and prevent fraud or unauthorized access
• Comply with legal obligations and enforce our Terms of Service

We use Non-Personal Information to:

• Analyze usage patterns and improve our Services
• Measure the effectiveness of our marketing campaigns
• Generate statistical reports and insights
• Optimize Website performance and user experience

3. INFORMATION SHARING AND DISCLOSURE

We do not sell, rent, or trade your Personal Information to third parties. We may share your information only in the following circumstances:

4. DATA SECURITY

We implement industry-standard security measures to protect your Personal Information, including:

• Encryption of data in transit and at rest
• Secure server infrastructure and access controls
• Regular security audits and monitoring
• Employee training on data protection practices

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security, and you use our Services at your own risk.

5. YOUR CHOICES AND RIGHTS

6. INTERNATIONAL DATA TRANSFERS

KeyStory operates globally and may transfer your information to countries other than your own. We ensure appropriate safeguards are in place for international transfers, including:

• Standard contractual clauses with service providers
• Compliance with applicable data protection frameworks
• Adequate security measures for cross-border data transfers

7. EUROPEAN ECONOMIC AREA (EEA) RIGHTS

If you are located in the EEA, you have additional rights under the General Data Protection Regulation (GDPR), including:

• Right to access your Personal Information
• Right to rectification (correction) of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

To exercise these rights, contact us using the information provided below. You also have the right to lodge a complaint with your local data protection authority.

8. CHILDREN'S PRIVACY

Our Services are not intended for children under 13 years of age. We do not knowingly collect Personal Information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete such information promptly.

9. THIRD-PARTY LINKS

Our Website may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

10. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically to reflect changes in our practices, Services, or legal requirements. We will notify you of material changes by:

• Posting the updated Policy on our Website
• Sending email notifications to registered users
• Displaying prominent notices on our platform

The updated Policy becomes effective on the date specified, and your continued use of our Services constitutes acceptance of the changes.

11. DATA RETENTION

We retain your Personal Information for as long as:

• Your account remains active
• Necessary to provide our Services
• Required by law or for legitimate business purposes
• Needed to resolve disputes or enforce agreements

When we no longer need your information, we will securely delete or anonymize it.

12. CONTACT INFORMATION

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

13. DATA DELETION REQUESTS

To request deletion of your Personal Information:

• Submit a written request to privacy@keystory.ai with the subject line "Data Deletion Request"
• Include your account information and specify which data you want deleted
• We may request additional verification of your identity
• We will process your request within 30 days and confirm completion

Please note that we may retain certain information as required by law or for legitimate business purposes, and we will inform you of any such retention.