Privacy Policy

Introduction

Welcome to Keeper! And thanks for visiting our privacy policy (the “Policy”). 

Jensen Technology, Inc. dba Keeper (referred to in this Policy as "Keeper" "we" "us" or "our") respects your privacy. We appreciate your trust, and we will continue to work hard to earn it. We know that you care about your personal information and how we use and share it. 

To better protect you, this Policy will outline, describe and summarize the types of information we may collect from you or that you may provide to us when you visit our website at www.devkeeper.kinsta.cloud or any subdomain thereof (the “Website”), or when using or purchasing a subscription to, or otherwise using, any online product or service offered by us in existence now or in the future (collectively, and together with the Website,  our “Services”), and the procedures we may use to collect, use, maintain, protect, and/or disclose this information. 

Please read this Policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, do not use the Services. By accessing or using the Services, you agree to the terms of this Policy. This Policy may change from time to time as described below. Your continued use of the Services after we make changes is deemed to be acceptance of those changes, so please check the Policy periodically for updates.   

Scope of Application

This Policy supplements other notices and privacy policies and is not intended to override them. This Policy does not apply to information collected by us offline or through any other means, including on any other website operated by us or any third party that may link to or be accessible from or through the Services.

By using our Services, you agree to be bound by this Policy and that we may proceed with the gathering and processing of your personal data on the terms outlined below. 

This Policy applies to the following individuals: 

• Visitors of the Website with whom Keeper does not have a contractual relationship
• Customers who use our Services, including client representatives, and such customer’s clients
• Independent contractors who use our Services
• Suppliers who provide products or services to Keeper
• Candidates
• Prospects
• Participants of webinars, conferences, trade events, surveys, etc.

References to “you” or “your” are to you as an individual using our website or otherwise contacting us (whether on behalf of yourself, or another individual, or organization). 

Information We Collect 

Keeper collects information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device (collectively, “Personal Information”), about those individuals who use its Services, whether by Keeper’s customers or by the clients of Keeper’s customers. This Personal Information can be used on its own or in combination with other information to identify you, and may include information such as name, title, company name, address, telephone number, or e-mail address.. In particular, we may collect the following categories of Personal Information in connection with your use of the Services:

Groupings of Personal Information	Description
Contact Data	physical/post addresses, email addresses, and phone numbers
Identity Data	first name, last name, job title, company, location, signature, social security number, physical characteristics or description, aliases, unique personal identifier, account name, and protected classification characteristics under California Law (e.g., age, race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability or sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions))
Financial Data	bank account, payment card details (credit card numbers, expiry date, card security code)
Transaction Data	details about payments to and from you and other details of products and services you have purchased, obtained, or considered, or other purchasing or consuming histories or tendencies
Contractual Data	information about the products or services we provide you
Technical Data	high-level information on the devices and technology you use including IP address, login data, browser type and version, timezone, operating system
Locational Data	approximate information about where you are, including country and IP address. This may come from your mobile phone or the place where you connect a computer to the internet. It may also include locations where you used your credit card.
Usage Data	includes information about how you use our website, products, and services
Marketing and Communications Data	includes your preferences to receiving marketing from us and our third parties, and your communication preferences
Public and third-party records	Information about you that is in public records and information about you that is publicly available on the internet.
Consents	any permissions, consents, or preferences that you give us
Other information	any other information you choose to provide to us through all available channels, participating in user/customer surveys, or otherwise visiting and interacting with our Website and/or Services

 

For the avoidance of doubt, personal information shall not include (a) publicly available information from government records, (b) any personal information which is anonymized or de-identified, or (c) information excluded from the scope of the California Privacy Rights Act of 2020 (“CPRA”). Keeper may also collect and use non-personal information to analyze the effectiveness of our Services and to improve our Services. We may collect non-personal information through the Services and through cookies, as described in more detail below.

How We Collect Personal Information From You

We use multiple methods to collect Personal Information from you. Please note that we may collect Personal Information through other channels in the future, and the types of Personal Information we may collect from you can vary according to the method through which it was attained. The following are ways we currently collect Personal Information from you:

• Through Creating an Account and Interacting with the Services. 

You will be required to establish an account with Keeper in order to utilize Keeper and its Services. If you wish to establish an account to gain access to the Services, you will be required to provide us with information (including Personal Information and non-personally identifiable information). In addition, we may obtain your Personal Information from you if you identify yourself to us by sending us an email with questions or comments, when you participate in any interactive features of the Services, when you sign up for our emails, mobile messages, or social media notifications, when you make a purchase or otherwise provide us with payment information, when you write a product review, leave comments, suggestions, or other input, and when you otherwise provide Personal Information to us (e.g., shipping and billing addresses, payment details including credit card details, username and passwords, and geolocation information).

 

• Information We Collect Automatically. 

• Usage Information: We track and collect Personal Information through your interactions with our Services, such as the pages you visit, the features and tools you utilize, and your navigation patterns within Keeper and our Services. This also covers the tasks you engage in, browsing activities and patterns, the projects and teams you access, and your communications with us and others within the Services.
• Device and Connection Details: Detailed information about the devices you use, such as your computer, smartphone, or tablet, is collected. This includes your device type, operating system, browser specifics, connection quality, and settings. Your IP address and crash reports are also recorded to approximate your location for a tailored service experience.
• Cookies and Behavioral Analytics: Our use of cookies, web beacons, and other tracking technologies allows us to gather data on your online activities over time and across different platforms, and allows us to analyze the data for certain trends and statistics regarding online activities (e.g., behavioral tracking). This includes page views, usage durations, the location of users, and patterns on our site as well as third-party websites. This information, often non-personal but sometimes linked to your Personal Information, aids us in understanding user behavior, assessing service popularity, and enhancing content delivery.  Keeper makes available a comprehensive Cookie Notice that describes the cookies and tracking technologies used on Keeper website and provides information on how users can accept or reject them. To view the notice, just click Cookie Notice.
• Statistical and Diagnostic Data: Log files and other diagnostic tools collect anonymized data such as user IP addresses, browser types, and domain names. This statistical information is crucial for administering our services, analyzing trends, and ensuring system integrity. When such non-personally identifiable information is associated with personal data, it is treated with the highest privacy standards as outlined in our Privacy Policy.

• Information We Receive From Other Sources. 

We may receive Personal Information about you from various third parties (including public sources) worldwide as set out below:

• Technical Data from parties such as:
  • analytics providers;
  • search information providers; and
  • advertising networks.
• Contact, financial and transaction information from providers of technical and payment services, such as Stripe, our payment processor and partner. 
• Identity and contact information from data brokers or aggregators.
• Identity and contact information from publicly available sources such as LinkedIn

 

How We Use and Process the Information We Collect 

We use information we collect about you or that you provide to us, including any of your Personal Information, for the following reasons. We do not sell Personal Information to anyone and only share it with third parties who are facilitating the delivery of our Services.

Why We Use the Information (Our Reason)	Legal Basis
To oversee our relationship with you and for general communication, such as informing you about updates to this Policy and inviting you to review our Services or participate in surveys, and to generally fulfill or meet the reason you provided the information.	Undertaking required to fulfill our contract with you. Essential for our legitimate interests (e.g., maintaining our records accurately and analyzing how our services are used). Based on your explicit agreement to share your data with us.
For enrolling you as a new client, creating, customizing, and securing your account with us, contacting you for service demonstrations booked through our website, and tailoring the demonstration to your needs.	Undertaking required to fulfill our commitment to provide Services to you. Based on your explicit agreement to share your data with us.
To offer timely assistance, such as supporting our services or addressing your inquiries.	Crucial for our legitimate interests (e.g., to provide efficient service) and for your legitimate interests (e.g., to receive timely help). Based on your explicit agreement to share your data with us.
To handle your account and any purchased subscriptions, enable service login, and personalize your service experience.	Undertaking required to fulfill our contract with you. Based on your explicit agreement to share your data with us.
For processing and completing your orders, requests, purchases, transactions and payments, which includes processing any paid subscription fees and any additional charges, processing and forwarding payments for services to our payment provider, preventing transactional fraud, and pursuing payment of outstanding debts.	Undertaking required to fulfill our contract with you. Essential for our legitimate interests (e.g., to collect debts owed to us). Based on your explicit agreement to share your data with us.
To manage, improve and secure our business and website, which includes troubleshooting, data analysis, conducting research and analysis, testing, system upkeep, fraud prevention, support, reporting, and hosting of data.	Essential for our legitimate interests (e.g., business operation, IT services provision, fraud prevention). Necessary for compliance with legal obligations.
To provide you with relevant website content and advertisements, to send marketing communications and other information regarding products, services, and promotions, and to evaluate the effectiveness of our advertising campaigns.	Essential for our legitimate interests (e.g., to understand how our services are used, to develop our offerings, to expand our business, and to plan our marketing strategy).
To utilize data analytics for enhancing and improving the effectiveness of our website, products/Services, marketing strategies, customer relationships, and experiences.	Essential for our legitimate interests (e.g., to categorize our customers for our products/services, to keep our website current and appealing, to develop our business, and to plan our marketing strategy).
To offer recommendations and suggestions for services or products you might find interesting, based on your purchases or subscription.	Essential for our legitimate interests (e.g., to evolve our products/services and expand our business).

 

• Marketing and Communication.

We may also use your Personal Information to send you newsletters, promotional messages, and other targeted advertisements, marketing communications, or other information we think might interest you through email, phone, or mail. To tailor our offerings, we analyze your information we gather to tailor your experience of the Services and identify products, services, and offers that might be relevant for you. If you've engaged with us by requesting information or purchasing Services without opting out, you'll receive these communications. However, you can opt out of these types of communications at any time by following the “unsubscribe” link located in our marketing email or by contacting us directly at the email address provided at the end of this Policy. Please note, opting out of marketing communications doesn't stop transactional or service-related messages from us.

• Third-Party Marketing. 

Keeper evaluates and modifies our use of various advertising networks, which may change from time to time. In this section you’ll find all the advertising networks that Keeper currently uses and instructions for opting out of them. 

We use the following advertising networks from time to time:

• Google AdWords and Display Network. Keeper uses the re-marketing features of interest-based advertising of Google AdWords that delivers you advertisements that will be of particular interest to you, based on your browsing and activity history interacting with the Website and Services. These advertisements will appear on third-party websites around the web. Google uses specific cookies to allow them to serve these ads around the web, and you may prevent this type of advertising by deleting the appropriate Google cookie through your browser, though this may not be permanent. For a more permanent solution, you may opt out of such Google advertising by adjusting your Google ad settings or using the WebChoices online opt-out tool.
• Facebook Custom Audience. Keeper uses Facebook Custom Audience to display advertisements to you on Facebook or in Facebook Messenger that will be of interest to you, and by visiting or using the Website you consent to this use. Facebook may collect or receive information from the Website and Services and other applications and websites and use that information to provide measurement services and targeted ads. If you do not want to receive such Facebook advertisements, you can opt-out of such advertising by adjusting your Ad Preferences settings while logged in to Facebook.
• LinkedIn Advertising. Keeper uses LinkedIn Advertising to display advertisements to you on LinkedIn that will be of interest to you, and by visiting or using the Website you consent to this use. LinkedIn may collect or receive information from us and use that information to provide measurement services and targeted ads. If you do not want to receive such LinkedIn advertisements, you can opt-out of such advertising by following LinkedIn's instructions or using the WebChoices online opt-out tool.

You may also opt out of various third-party marketing efforts via the Digital Advertising Alliance’s tool available at optout.aboutads.info, which lets you opt-out of interest-based ads on websites, and by configuring your browser settings and/or mobile settings to restrict third-party cookies and/or the use of the advertising ID associated with your mobile device for interest-based advertising purposes.

 

Sharing Information with Third Parties. 

The Personal Information Keeper collects from you is stored in one or more databases hosted by third parties located in the United States. These third parties do not use or have access to your Personal Information for any purpose other than cloud storage and retrieval. On occasion, Keeper engages third parties to send information to you, including information about our products, services, and events. A list of our third-party sub processors can be found here: Subprocessors. By agreeing to this Policy, you acknowledge that one or more of our third-party subprocessors may utilize artificial intelligence (AI)-powered services. For more information on which subprocessors may use such AI-powered services, please visit our Trust Center. 

We reserve the right to disclose Personal Information to our service providers, the government, law enforcement agencies, or other third parties under certain circumstances where a formal request has been made (such as in responding to a court order, law, legal process, including to respond to any government or regulatory request, subpoena, or judicial proceeding) as we, in our sole and absolute discretion, deem necessary and appropriate. We may also disclose your Personal Information to enforce or apply our Terms of Use Agreement, or if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of us, our customers, or others.

We use a third-party payment processor and a third-party shipping agent to ensure the payment and delivery of your purchased products. We may use other third parties for other services from time to time. These third parties have no authority to use your Personal Information for their own promotional purposes, but these third parties will have access to your Personal Information in order to help complete transactions on our behalf.

Except as otherwise set forth herein, we do not otherwise disclose your Personal Information to non-Keeper persons or businesses for their independent use unless: (1) you request or authorize it; (2) it’s in connection with Keeper-hosted and Keeper co-sponsored conferences as described above; (3) the information is provided to comply with the law (for example, compelled by law enforcement to comply with a search warrant, subpoena, or court order), enforce an agreement we have with you, or to protect our rights, property or safety, or the rights, property or safety of our employees or others; (4) the information is provided to our agents, vendors or service providers who perform functions on our behalf or who perform requested services that we do not provide directly; (5) to address emergencies or acts of God; (6) to our affiliates; (7) to a buyer or other successor in the event of  a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Information held by us about the Service users is among the assets transferred; (8) to fulfill the purpose for which you provide the Personal Information; or (9) to address disputes, claims, or to persons demonstrating legal authority to act on your behalf. We may also gather aggregated data about our Services and website visitors and disclose the results of such aggregated (but not personally identifiable) information to our partners, service providers, advertisers, and/or other third parties without restriction.

The Keeper website connects with third party services such as Facebook, LinkedIn, Twitter and others. If you choose to share information from the Keeper website through these services, you should review the privacy policy of that service. If you are a member of a third party service, the aforementioned connections may allow that service to connect your visit to our site to your personal data.

Our Website may contain links to other websites or other third-party platforms. We do not endorse or otherwise accept responsibility for the content or privacy policies of those sites and platforms. However, we encourage you to read the privacy policies of each website you visit prior to disclosing your Personal Information.

Transferring Personal Information to the U.S.

Keeper is a remote first organization. Information we collect about you will be processed in the United States. By using Keeper’s services, you acknowledge that your personal information will be processed in the United States. The United States has not sought nor received a finding of “adequacy” from the European Union under Article 45 of the European Union’s General Data Protection Regulation (the “GDPR”). Pursuant to Article 46 of the GDPR, Keeper implements appropriate safeguards by entering binding, standard data protection clauses, enforceable by data subjects in the EEA and the UK. These clauses have been enhanced based on the guidance of the European Data Protection Board and will be updated when appropriate.

Depending on the circumstance, Keeper also collects and transfers Personal Information to the U.S. with your consent; to perform a contract with you; or to fulfill a compelling legitimate interest of Keeper in a manner that does not outweigh your rights and freedoms. Keeper endeavors to apply suitable safeguards to protect the privacy and security of your personal data and to use it only consistent with your relationship with Keeper and the practices described in this Policy. Keeper also enters into data processing agreements and model clauses with its vendors whenever feasible and appropriate. Since it was founded, Keeper has received zero government requests for information.

For more information, please review our security policies, or if you have any questions, please contact us at privacy@keeper.com

Protection of Your Personal Information 

You may contact us personally, by telephone, mail, over the Internet or other electronic medium, through the contact information provided below. We have implemented appropriate technical and organizational security measures designed to keep your Personal Information secure and to protect the Personal Information we hold from misuse, loss, unauthorized access, modification or disclosure. However, please also remember that we cannot guarantee that the internet itself is 100% secure. Although we will do our best to protect your Personal Information, transmission of Personal Information to and from the Service is at your own risk. WE DO NOT REPRESENT, WARRANT AND/OR GUARANTEE THAT PERSONAL INFORMATION WILL REMAIN SECURE, and we cannot and do not guarantee, and you should not expect, that your Personal Information or private communications will always remain private. You should only access the Service within a secure environment. In the event there is a breach of security, confidentiality, or integrity of stored Personal Information or we are made aware that your Personal Information could be jeopardized, we will take all necessary measures to communicate these issues to you so that you can take steps to protect yourself.

Rights Related to Your Personal Information

The GDPR and other countries’ privacy laws provide certain rights for you as a data subject. Under certain circumstances, you have the right to the following:

• Right of access: to obtain a copy of your Personal Information you have provided us or that we hold, together with information about how your Personal Information is processed. If you require details of your Personal Information held by us, we will need to verify your identity before meeting your request, which we will process in a reasonable time;
• Right to rectification: Request correction of the Personal Information that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us;
• Right to erasure: enables you to ask us to delete or remove Personal Information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your Personal Information where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your Personal Information to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request; 
• Right to restrict processing: to object the processing of your Personal Information where we’re relying on a legitimate interest (while we verify or investigate your concerns with this information, for example); 
• Right of data portability: to obtain a portable copy of your Personal Information, or to have a copy transferred to a third party controller; 
• Right to object: object to the further processing of your Personal Information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your Personal Information for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms;
• Rights related to automated decision making including profiling: to object to decisions that are based solely on automated processing or profiling; 
• Request the transfer: We will provide you, or a third party you have chosen, your Personal Information in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use, or where we used the information to perform a contract with you; or
• Withdraw consent: You have the right at any time where we are relying on consent to process your Personal Information. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain services to you. We will advise you if this is the case at the time you withdraw your consent.

In addition to the above, you have the right to lodge a complaint with a supervisory authority for data protection.

To exercise these rights you may contact us either by emailing privacy@keeper.app

We may ask you for additional data to confirm your identity and for security purposes, before disclosing the information requested to you. If you would like to submit a request on behalf of another individual, you may do so by providing proof of authorization by the individual to submit such a request on their behalf. We reserve the right to charge a fee where permitted by law. We may also decline to process requests that jeopardize the privacy of others, are excessive, or would cause us to take any action that is not permissible under applicable laws. Additionally, as permitted by applicable laws, we may need to retain certain Personal Information for a limited period of time for record-keeping, accounting and fraud prevention purposes. Please note also that you may be able to exercise some of these rights without our intervention. For example, if you are a registered Keeper platform user, you can access and update some of your disclosed Personal Information within the platform.

Additional Privacy Rights for California Residents

This Section applies to all users who reside in the State of California and is adopted to comply with the CPRA. This Section does not apply to employment-related personal information collected from California-based employees, job applicants, contractors, or similar individuals.

The CPRA provides consumers (California residents) with specific rights regarding their Personal Information. This Section describes your CPRA rights and explains how to exercise those rights.

• Access to Specific Information and Data Portability Rights

You have the right to request that we disclose certain information to you about our collection and use of your Personal Information over the past 12 months. Once we receive and confirm your verifiable consumer request (see “Exercising Access, Data Portability, and Deletion Rights” below), we will disclose to you:

• The categories of personal information we collected about you;
• The categories of sources for the personal information we collected about you;
• Our business or commercial purpose for collecting or selling that personal information;
• The categories of third parties with whom we share that personal information;
• The specific pieces of personal information we collected about you (also called a data portability request);
• If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:
• sales, identifying the personal information categories that each category of recipient purchased; and 
• disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.

 

• Deletion Request Rights. 

You have the right to request that we delete any of your Personal Information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request (see “Exercising Access, Data Portability, and Deletion Rights” below), we will delete (and direct our service providers to delete) your Personal Information from our records, unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities;
• Complete the transaction for which we collected the Personal Information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, or otherwise perform our contract with you;
• Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.);
• Debug products to identify and repair errors that impair existing intended functionality;
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent;
• Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law;
• Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us;
• Comply with a legal obligation; or
• Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

 

• Exercising Access, Data Portability, and Deletion Rights. 

To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us by sending us an email at the address provided below.

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your Personal Information. You may also make a verifiable consumer request on behalf of your minor child. To designate an authorized agent please email us at the email address provided below and provide your name and phone number as well as the authorized agents’ name and contact information (phone number or email address) and let us know what the scope of the authorized agents’ rights are to act on your behalf. If your authorized agent requests sensitive information about you then we may ask you to provide us with a sworn declaration to further verify your identity.

You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative, which may include your full name, email address, phone number and zip code; and
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.

Making a verifiable consumer request does not require you to create an account with us.

We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

• Response Timing and Format. 

We attempt to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 45 days), we will inform you of the reason and extension period in writing.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.

Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. 

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or unreasonable. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

• Non-Discrimination. 

We will not discriminate against you for exercising any of your CPRA rights. Unless permitted by the CPRA, we will not:

• Deny you goods or services;
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;
• Provide you a different level or quality of goods or services; or
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

 

• “Shine the Light” Law.

California Civil Code Section 1798.83, also known as the “Shine The Light” law, permits users who are California residents to request and obtain from us, once a year and free of charge, information about categories of Personal Information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below.

Opt-Out of Sale/Sharing 

The use of technologies, such as cookies, may constitute a “sale” of personal information under the CPRA. In addition, we may use your personal information in a way that constitutes “sharing” under the CPRA.  You can opt out of the “sale” or “sharing” by clicking on the “Do Not Sell or Share My Personal Information” link at the bottom of our website and selecting your preferences below, or broadcasting the global privacy control signal. Note that due to technological limitations, if you visit our website from a different computer or device, or clear cookies on your browser that store your preferences, you will need to return to this screen to select your preferences and/or rebroadcast the signal. 

For information about your choices regarding Keeper's use of cookies and other similar technologies, see our Cookie Notice.

Data Storage and Retention 

Your Personal Information is stored by the Keeper on its servers, and on the servers of the cloud-based database management services Keeper engages, located in the United States. Keeper retains the information it collects for the duration of the customer’s business relationship with the Keeper and for a reasonable period of time thereafter, to analyze the data for Keeper’s own operations, and for historical and archiving purposes associated with Keeper’s Services; provided, however, that a longer retention period may be required as permitted by law (such as tax, accounting or other legal requirements). Keeper retains Personal Information until such time as Keeper has no ongoing legitimate business need to process your Personal Information and is either purged from Keeper systems or anonymized. If purging or anonymizing your Personal Information is not possible (e..g, because your Personal Information has been stored in backup archives), then Keeper will securely store your Personal Information and isolate it from any further processing until deletion is possible. All Personal Information that Keeper controls may be deleted upon verified request from you or your authorized agents, as more fully described above under “Rights Related to Your Personal Information”. For more information on where and how long your Personal Information is stored, and for more information on your rights of erasure and portability, please contact us at: privacy@keeper.app

Children’s Data 

The Website and Services we provide are not designed for, intended to collect Personal Information from, or directed at, children under age 13 (or, with respect to residents of Europe or where so required by applicable law, under age 16) (the “Consent Age”). So that we may comply with the Children’s Online Privacy Protection Act, if you are under the Consent Age, you are not permitted to provide any information to or on the Website or the Services. Keeper does not knowingly collect or solicit Personal Information from children under the Consent Age. If you are under the Consent Age, do not use or provide any information on the Website or through the Services or any of its features, register on, make any purchases through, or use any of the interactive or public comment features of the Website or Services, or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or user name you may use. If we learn we have collected or received Personal Information from a child under the Consent Age, we will delete that information. If you believe we might have any information from a child under the Consent Age, we ask that a parent or guardian please contact us at privacy@keeper.app. Notwithstanding the foregoing, Keeper may store information about dependents under the Consent Age in connection with the Service where consented to by the appropriate parent or guardian.

Data Protection Officer 

Keeper is a remote first company. Keeper has appointed an internal data protection officer for you to contact if you have any questions or concerns about Keeper’s personal data policies or practices. If you would like to exercise your privacy rights, please direct your query to Keeper’s data protection officer. Keeper’s data protection officer’s name and contact information are as follows:

Keeper: Joshua Musler - dpo@keeper.app

EU Representative 

If you are an individual in the EU, you can also contact George Barry, who is based in the Republic of Ireland and has been appointed as Keeper’s representative in the EU pursuant to Article 27 of the GDPR on matters related to the processing of personal data activities that take place in the EU. To make such an inquiry, please write to George Barry, 4 St Christopher's Rd, Montenotte, Cork, T23 E9TR, Ireland.

UK Representative 

If you are an individual in the EU, you can also contact Alec Lawton, who is based in the United Kingdom and has been appointed as Keeper’s representative in the UK on matters related to the processing of personal data activities that take place in the UK. To make such an inquiry, please write to Alec Lawton, Graigwen, Plasycoed road, Pontypool Torfaen, NP4 6QH, UK.

Agreement to our Terms and Changes to this Policy 

By using our Services, you consent to the collection and use of your Personal Information by Keeper as indicated in this Policy. We reserve the right to modify this Policy at any time. The updated version of this Policy will be indicated by an updated “Last Updated” date below, and the updated version will be effective as soon as it is accessible. If we make material changes to this Policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Policy frequently to be informed of how we are protecting your information.

Questions, Concerns or Complaints 

If you have questions, concerns, complaints, or would like to exercise your rights, please contact us at:

Keeper
2093 Philadelphia Pike #8118 
Claymont, DE 19703
privacy@keeper.app

Last Updated: April 16, 2025.