Keper — Privacy Policy
Version: draft-0 · Effective: [date of first publication]
1. Who we are
Keper is operated by [legal entity name], [registered address].
- Data protection officer:
[DPO name],[DPO email]. - Law: we follow the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.
2. Our two roles
Keper holds two kinds of personal data, and our role is different for each:
| Whose data | Examples | Our role |
|---|---|---|
| You and your team | name, email, sign-in and passkey records, what you approve | Controller. We decide how this data is used, to run your account. |
| Your customers | enquiry form submissions, social media messages and comments, reviews | Processor. You are the controller. We process this data only to provide Keper to you, under our data-processing addendum [DPA link]. |
Visitors to your website see a privacy notice on every form that collects their details. The notice says what the form collects, who processes it, and how long it is kept.
3. What we collect about you and your team
- Account details: your name, your email address, your workspace role, and passkeys if you add them.
- Your activity in Keper: what you approve or decline, the settings you change, and your sign-ins. We keep this as a record, because every change Keper makes must be traceable to whoever allowed it.
- Billing records: your plan, the payments you report to us, and our confirmation of them. We don't collect or store card details.
- Support messages: anything you send us.
4. What your business gives Keper
Keper is for public information only (Terms §6). The business information you give us is meant for publication. The main exception is documents you upload so Keper can read them: we delete these after review (see §6).
5. How we use data
We use data:
- to run the service: drafting, publishing, answering your customers and notifying you;
- to keep your account secure: sign-in, spotting a compromised account, and locking an account when that happens;
- to bill you; and
- to support you.
We don't sell personal data, and we don't use it for advertising. We don't use your customers' data for any business other than yours.
6. What we keep, and for how long
| Data | How long we keep it |
|---|---|
| Documents you upload for Keper to read | We read them to build your business information. We delete the file 30 days after its review finishes. We keep only the file name, a fingerprint of the file, and the facts taken from it. |
| Photos and videos | While your workspace uses them. They are erased along with your workspace. You can remove one at any time. |
| Your website design (if you brought your own) | For as long as your workspace exists. It is included in your exit package. |
| Customer enquiries from your website forms | 365 days after each enquiry by default. You can change this in your workspace settings. After that, a daily job deletes them. |
| Restore points (saved copies of your business information and website content) | Automatic ones, taken before each change: 30 days. Weekly and named ones: 1 year. A restore rebuilds your website from one of these. |
| Everything in your workspace, after you cancel or a trial lapses | You can download your exit package for 30 days after your service ends. After that, the workspace is erased. |
| Backups | Encrypted database backups are kept for [backup retention period]. When they expire, data we have erased also disappears from backups. |
This covers files you upload yourself, and files Keper staff upload for you while building your workspace.
The 30-day exit window and the 365-day enquiry period are two different periods, for two different events. The first starts when your service ends. The second applies to each enquiry, counted from when it arrived.
7. Who processes data for us
We use these service providers (sub-processors). This list is generated from the same list the product uses, so it matches what actually runs:
| Provider | What it does |
|---|---|
| Neon | Postgres database hosting |
| Cloudflare | asset storage, custom hostnames, the serving projection, and website traffic counts |
| Resend | owner email delivery and branded sending domains |
| Zernio | social and Google Business Profile publishing |
| OpenRouter | AI model gateway |
| Firecrawl | site import crawling |
| LlamaParse | document text extraction |
| search analytics reads | |
| Amazon Web Services | encrypted database backups |
We will update this list before a new provider starts handling your data.
Visiting Keper's own website. The public pages on our own address load nothing from anyone else: no analytics, no trackers, and no web fonts from a font service. They are served with a content security policy that allows our own address and nothing else, so your browser never reports your visit to a third party. This includes the pages where you read these documents and the app you sign in to.
Transfers abroad. Some of these providers process data outside the
Philippines. [Counsel: the cross-border transfer basis under RA 10173.]
8. Keper staff access
Keper staff can see your workspace in two cases:
- while building it for you, before handover; and
- afterwards, only when you ask.
After handover, every visit is time-limited, and every change made during it is recorded under the staff member's name.
9. Security
- Encryption: data is encrypted in transit, and backups are encrypted.
- Workspace isolation: each workspace's data is kept apart from other workspaces' data at the database level.
- Sign-in: there are no passwords to steal. Sign-in is by email link, with passkeys as an optional second factor.
- Dangerous actions: extra checks protect them.
If there is a personal data breach, we will notify you and the National
Privacy Commission as the law requires. [Counsel: the breach notification procedure and timelines.]
10. Your rights
You have rights under RA 10173:
- to be informed;
- to access your data;
- to correct it;
- to object;
- to have it erased or blocked;
- to data portability; and
- to complain to the National Privacy Commission.
To use any of these rights, email [DPO email]. Your exit package gives
you a portable copy of your workspace at any time after you cancel.
If one of your customers asks us about their data, we will pass the request to you, because you are the controller of their data.
11. Changes
We'll email you before a material change to this policy takes effect.