Privacy Policy

Account information: when you sign up, we collect your email address for login (via one-time passcode) and any business details you provide, like your page handle, display name, and avatar.

Connected accounts: if you connect Google Calendar or Zoom, we store the access tokens and account info needed to provide that connection’s features (for example, syncing calendar availability or creating meeting links).

AI apps and API keys: if you connect an AI app to your account, like Claude or ChatGPT, or create an API key, we record which app or key it is, the permissions you approved, and when it was last used. The credentials it uses are stored only in hashed form, never as readable text.

Content you create: the pages, blocks, products, and bookable units you build, along with any leads, bookings, or purchases made through your page.

Payment information: if you sell products or take bookings, payments are processed by Stripe. We do not store card numbers ourselves.

Usage data: basic technical data like IP address, browser type, and pages visited, used to keep the service reliable and secure.

Product and site analytics: we use PostHog to understand how Keepp’s marketing site, blog, and dashboard are used, so we can improve them. Where the law requires your consent, we ask first and record nothing until you answer. Everywhere else, and when you accept, PostHog keeps an identifier in your browser so it can recognize you when you come back. If you decline, it counts your visit with a server-side hash that rotates daily and stores nothing on your device. Once you’re logged into your Keepp dashboard, analytics for that session are tied to your account so we can understand product usage over time.

Advertising measurement: when you reach Keepp from one of our ads or a tagged link, we note where you came from: the ad’s click identifier, the link’s campaign tags, a referral code, and the page that sent you. We keep this in your browser for 30 days and store it with your account if you sign up, so we can tell which ads and links bring people to Keepp. We also tell Google Ads when someone signs up or starts a paid plan, along with the plan’s price, so it can measure our ads. This follows the same choice as analytics: where consent is required, nothing is kept or sent until you accept.

Storefront analytics: when someone visits your published page, we record basic usage events (page views, clicks, searches) on our servers, keyed to an identifier derived from the visitor’s connection and browser with a secret that changes daily, so it cannot follow them from one day to the next. We don’t use cookies or store anything on their device for this, and we share this data with you as the page owner so you can see how your page is performing.

We use the information above to operate and improve Keepp: authenticating you, rendering your page, processing bookings and purchases, sending transactional emails (like booking confirmations), and responding to support requests. We do not sell your personal information.

When you connect an AI app, it can read and change your Keepp account within the permissions you approved on the connection screen: for example your pages, products and bookable offerings, which services you have connected, and your plan. It acts on your instructions.

The app’s provider (for example Anthropic for Claude, or OpenAI for ChatGPT) receives what the app reads from Keepp, and handles it under its own privacy policy. These providers are not our service providers: you choose to connect them.

We don’t receive your conversation with the app, only the requests it makes to Keepp. We log basic details of those requests, like when they were made, to keep the service secure and working.

When you or an app give us a link to an image for your page or catalog, we download the image and store a copy with your content.

Removing Keepp from the app stops it from using your account. You can also email us to cut off an app’s access.

Storefront pages measure traffic entirely on our servers. Nothing is stored on your device when you visit one, so there is nothing there to consent to or clear.

Our marketing site, blog, and dashboard use PostHog for analytics. Where consent is required, we ask before storing anything: accept and PostHog keeps a persistent identifier so we can recognize a returning visitor; decline and it identifies your session with a server-side hash that rotates daily, storing nothing on your device at all. Either way we record the same small record of your choice, a__ph_opt_in_outentry in local storage, so we don’t ask again on every page.

The same choice covers advertising measurement. When analytics is on, our site loads the Google Ads tag, which can set cookies to link a sign-up or a paid plan back to the ad that led to it, and we keep akeepp.attributionentry in local storage for 30 days to remember the ad or link you arrived from. When analytics is off, the Google Ads tag is not loaded and that entry is removed.

You can change your answer at any time below, which brings the consent prompt back.

We share information with service providers who help us run Keepp, and only what each one needs to do its job: Stripe (payments and payouts), Google and Zoom (if you connect those accounts), Cloudflare (media storage), Microsoft Azure (email delivery and AI-assisted content processing), PostHog (product analytics), Sentry (error diagnostics), and Google Ads (measuring our own advertising, as described above). We do not sell your personal information. Google Ads receives the click identifier and conversion details needed to measure our ads, and handles them under Google’s own terms.

If you connect an AI app, we also share with it what you allow it to read, as described above.

We keep your account information and content for as long as your account is open. If you ask us to delete your account, we delete your personal information and content within 30 days of your request, except records we’re required to keep, such as transaction records for tax and accounting.

Server logs are kept for 90 days and then removed. Database backups are kept for 90 days and then removed, so information you delete can remain in a backup until that backup is removed.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, or to object to certain uses of it. To exercise any of these rights, contact us at the email below. For now, account and data deletion requests are handled by emailing us directly rather than a self-serve tool. We may transfer information internationally to provide the service, using appropriate safeguards where required.

Keepp is not intended for anyone under 18. We don’t knowingly collect information from children, and we’ll delete any such information if we become aware of it.

You can update your account information from your dashboard and disconnect any connected channel at any time. To delete your account and associated data, email us at the address below and we’ll take care of it.

We may update this policy from time to time. We’ll change the date at the top of this page when we do, and for material changes we’ll make reasonable efforts to let you know.

Questions about this policy? Reach us at contact@thinslatelabs.us.