Privacy Policy

The data controller is Keyrua (operated as an individual enterprise). For any privacy-related inquiries, contact us at info@keyrua.dev.

We collect the following categories of personal data:

• Account data — name, email address, and profile information provided during sign-up via Clerk
• Organization data — organization name and membership information
• Usage data — optional website analytics described below, and service activity recorded to operate and secure your account
• Billing data — payment method details processed and stored by Stripe (we do not store card numbers)
• Technical data — IP address, browser type, and device information collected automatically
• Customer Data — environment variable keys, values (KMS-encrypted when marked sensitive), and project configurations you store in Keyrua

We process personal data under the following legal bases (GDPR Article 6):

• Contract performance — processing necessary to provide the service you signed up for
• Legitimate interests — security monitoring, fraud prevention, and service improvement
• Legal obligation — retention of billing records as required by French tax law
• Consent — optional website analytics (PostHog), enabled only after you accept. You can withdraw consent at any time using Analytics preferences

• To provide, maintain, and improve the Keyrua service
• To authenticate your identity and manage your account
• To process payments and manage subscriptions
• To send transactional emails (account events, billing)
• With your consent, to measure visits and selected actions on our public website, including sign-in and sign-up pages, using pseudonymous identifiers
• To detect and prevent fraud and security incidents
• To comply with legal obligations

We share data with the following sub-processors, each bound by GDPR or equivalent data protection agreements:

• Clerk — authentication and user management (US, SCCs in place)
• Stripe — payment processing and billing (US/EU, SCCs in place)
• Google Cloud Platform — encryption and decryption of sensitive values through Cloud KMS (key location is configured separately from application hosting)
• Cloudflare — web application hosting on Workers and API hosting in Containers
• PostHog — optional public website and sign-in/sign-up page analytics using its EU Cloud ingestion service. Events use a random browser identifier; we do not attach your name, email, organization, project, or secret data

We do not sell your personal data to any third party.

We retain your data for the following periods:

• Account and Customer Data — for the duration of your account, plus 30 days after deletion
• Billing records — 10 years as required by French accounting law (Article L123-22 of the Commercial Code)
• Access logs — 12 months
• Website analytics — PostHog's free plan provides one year of guaranteed event retention, after which data may be archived or deleted under its retention policy. Contact us to request deletion

Under GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of your data
• Right to rectification — correct inaccurate data
• Right to erasure — request deletion of your data
• Right to data portability — receive your data in a machine-readable format
• Right to restrict processing — limit how we use your data
• Right to object — object to processing based on legitimate interests

To exercise any of these rights, contact us at info@keyrua.dev. You also have the right to lodge a complaint with the CNIL (www.cnil.fr).

Optional analytics is disabled until you accept. After acceptance, browser storage retains a random visitor identifier; PostHog's internal session state stays in memory. We measure public and sign-in/sign-up page categories, elapsed page duration, signup-button placement, pricing views, demo interactions, and completed account creation. We do not record sessions, form inputs, private workspace activity, full URLs, query strings, or referrers. IP-based geolocation is disabled; network requests still expose your IP address to the receiving service.

After consent, we may retain approved source, medium, and campaign labels from a tagged link to understand which campaigns bring visitors to signup. We keep the first recognized tagged visit in that tab's session storage. We discard unapproved values and do not infer the source of untagged visits. The original URL and query string are not sent to PostHog.

We remember acceptance and rejection for 180 days. Use Analytics preferences in the website footer to change your choice or withdraw consent. Rejection stops future event capture and removes the local analytics identifiers and campaign labels. Withdrawing consent does not automatically delete events already received by PostHog; contact us for deletion.

Authentication session cookies are strictly necessary for the service to function and cannot be disabled.

The hosted service uses HTTPS. Values marked sensitive are encrypted by the API using Google Cloud KMS before storage. Values marked non-sensitive are stored without KMS encryption. Authorized retrieval decrypts sensitive values in the API, and exports contain plaintext. Keyrua is not a zero-knowledge service. Access to production systems is restricted to authorized personnel only.

In the event of a data breach affecting your personal data, we will notify you and the CNIL within the legally required timeframe (72 hours).

We may update this policy from time to time. We will notify you of material changes via email or an in-app notice at least 14 days before they take effect.

For privacy-related questions or to exercise your rights, contact us at info@keyrua.dev.