Skip to content

Privacy Policy

Last updated: October 2026

1. Who is responsible for your data (data controller)

KeenTag is operated by KeenTag (600 N Broad Street, Suite 5 #3414, Middletown, DE 19709, United States). We are the controller of the personal data described here. For any privacy question or to exercise your rights, email support@keentag.com.

2. What we collect

Your account email; the brands, competitors, and prompts you choose to track; the results and history of the scans we run for you; basic usage and billing metadata; if you use the setup preview on our homepage before creating an account: the domain you enter and the suggested category, competitors and buyer questions, plus a salted one-way hash of your IP address (never the address itself) to enforce daily limits. These are deleted after 30 days (backups roll off within their own retention window). Your domain is sent to OpenAI to draft the suggestions, and we read three public files on your site (the homepage, robots.txt and llms.txt) to note things like whether AI crawlers are blocked; that read holds no personal data. Free checks run on our homepage before 6 October 2026 also stored the AI answers and the sources they cited; those are deleted 30 days after the check. And, like any web service, standard request logs (IP address, browser, request id) while you use the site. We do not sell your data.

3. Free check on our homepage

If you run a free check on our homepage, we also store the email address you give us, your domain, the questions asked and the AI answers we collected, so we can email you the report (we send it only by email, to that address) and so its link keeps working. If you tick the follow-up box, we send up to 2 more emails about your report; without the tick you get the report email only. Every email has an unsubscribe link, and you can stop emails from your results page or ask us to delete this data at any time. We keep it for 12 months after your last check. Answers from AI engines to free-check questions are stored without personal data for up to 30 days, to avoid asking the same question twice. If you create an account, it is linked to that account and deleted with it.

4. How we use it, and our legal bases

We process your data to: (1) provide the service — running scans, measuring your AI visibility, generating fix recommendations — and bill your subscription (legal basis: performance of our contract with you); (2) keep the product secure, prevent abuse, and improve it (legitimate interests); (3) run optional product analytics (your consent, which you can withdraw at any time); (4) meet tax and accounting obligations (legal obligation); (5) store free-check results and email you the report you asked for (legitimate interests; you can object or unsubscribe at any time); (6) send up to 2 follow-up emails about that report, only if you ticked the follow-up box (your consent, which you can withdraw at any time with the unsubscribe link); and (7) play a video you choose to start (your consent, given when you press play).

5. Who we share it with (processors)

We use trusted providers to run KeenTag: Vercel (hosting and request logs), Cloudflare Turnstile (bot protection on the homepage setup and the contact form), Supabase (database and authentication), Paddle (payments, as merchant of record — they hold your billing and invoice records), Resend (email), PostHog (product analytics, only with your consent), an error-monitoring service when one is enabled (currently errors are kept in our hosting logs), and the AI engines we measure — OpenAI, Perplexity, and Google. To measure your visibility, your tracked prompts are sent to those AI engines. YouTube (Google) hosts the product videos on our pages; it is contacted only when you press play. We share only what each provider needs to do its job.

6. International data transfers

Several of our processors (including Vercel, OpenAI, Perplexity, Google, and PostHog) are based in the United States, so your data may be transferred there. Where it is, the transfer is protected by the European Commission's Standard Contractual Clauses and/or the provider's certification under the EU–US Data Privacy Framework. You can ask us for more detail on the safeguards for any specific provider.

7. Cookies & analytics

We use essential cookies to keep you signed in. Analytics cookies are optional — they only run after you accept them in the banner, you can decline, and you can change your choice at any time via “Cookie settings” (in the site footer, or in your Account under Privacy & cookies). We do not use third-party advertising cookies.

8. Videos

Some pages include product videos hosted on YouTube, a Google service. We show our own preview image first, and nothing is sent to YouTube until you press play. When you do, the player loads from youtube-nocookie.com (YouTube's privacy-enhanced mode), and YouTube receives your IP address and browser details and may store data on your device, as described in Google's privacy policy. The videos show sample data, not customer data.

9. Data retention

We keep your account and tracking data (brands, prompts, competitors, and scan history) for as long as your account is active. When you delete your account, we erase that data — including scan history and our usage records — from our systems, and it ages out of our database backups within 30 days. Billing and invoice records are held by Paddle, our merchant of record, for the period tax law requires (up to 6 years). Optional analytics data is retained by our analytics provider under a 12-month retention setting and is deleted earlier on request or when you delete your account; hosting request logs are kept for no more than 90 days. Free-check results and the email you gave are kept for 12 months after your last check; results links stop working after 30 days.

10. Your rights

You have the right to access, rectify, export (data portability), restrict, object to, and erase your personal data. You can export your data and permanently delete your account and all associated data at any time from your account settings (a self-serve GDPR erasure). Where we rely on consent, you can withdraw it at any time without affecting prior processing.

11. Right to lodge a complaint

If you believe we have mishandled your data, you can lodge a complaint with your local data protection authority. In the EU and UK, that is the supervisory authority where you live or work. We'd appreciate the chance to resolve it first — email support@keentag.com.

12. Contact

Questions about privacy? Email support@keentag.com.