Privacy Policy
Last updated May 6, 2026
1. Information We Collect
Account Information
When you create a Keylight account, we collect your email address and workspace name. You may also provide a display name and billing information when subscribing to a paid plan.
License Data
We store license records — keys, activation timestamps, device identifiers, and usage metadata — so your app can verify licenses and you can manage them from the dashboard.
Payment Information
Stripe handles all payment processing. Keylight never sees or stores your full credit card details. We only keep what Stripe shares back with us — the last four digits, expiration date, and billing address — for subscription management.
Technical Data
We log standard technical data — IP addresses, browser type, operating system, and API request timestamps — for operational monitoring, abuse prevention, and debugging.
2. How We Use Your Information
- Provide, maintain, and improve the Service
- Process subscriptions and handle billing
- Send service-related notifications (account updates, security alerts, billing notices)
- Provide customer support
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations
3. Data Storage and Security
Infrastructure
Keylight runs on Cloudflare's global edge infrastructure. License data lives in Cloudflare Durable Objects, and account data is stored in a Neon PostgreSQL database. Everything is encrypted in transit via TLS and at rest using industry-standard encryption.
Security Measures
We take reasonable technical and organizational measures to protect your data. That said, no electronic storage method is completely secure, and we cannot guarantee absolute security.
4. Data Retention
Account and License Data
We keep your account and license data for as long as your account is active. If you delete your account, we remove your data within 30 days, except where the law requires us to keep it longer.
Billing Records
Billing records are retained for as long as required by applicable tax and accounting regulations.
5. Third-Party Services
We rely on a small number of trusted providers for payment processing, infrastructure, and database hosting. These providers process your data only as needed to deliver the Service and are bound by their own privacy commitments.
We do not sell your personal information. We do not use your data for advertising.
6. Your Rights
What You Can Request
Depending on where you live, you may have the right to:
- Access — Request a copy of the data we hold about you
- Correction — Request that we fix inaccurate or incomplete data
- Deletion — Request that we delete your personal data
- Portability — Request your data in a machine-readable format
- Objection — Object to certain processing of your data
How to Exercise Them
To exercise any of these rights, email us at [email protected]. We'll respond within 30 days.
8. Children's Privacy
Keylight is not intended for children under 16. We do not knowingly collect personal information from children. If we learn we have, we will delete it.
9. International Data Transfers
Keylight operates on Cloudflare's global network. Your data may be processed in data centers around the world. We ensure appropriate safeguards are in place for all international transfers.
10. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we'll notify you by email or through the Service. Your continued use of Keylight after any changes means you accept the updated policy.
11. Contact Us
Questions about this Privacy Policy? Email us at [email protected].