Keelstead
Back to Home

Privacy Policy

Last Updated: 11/17/2025

At Keelstead, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

1. Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide to us:

  • Account Information: Email address, name, organization name
  • Payment Information: Processed securely through Stripe (we do not store full credit card numbers)
  • Contract Documents: The contracts and documents you upload for analysis
  • Communications: Messages you send us through support or contact forms

1.2 Automatically Collected Information

When you use our service, we automatically collect certain information:

  • Usage Data: Pages visited, features used, time spent, analysis history
  • Device Information: Browser type, operating system, IP address
  • Cookies: We use cookies to maintain your session and improve your experience

2. How We Use Your Information

We use the information we collect to:

  • Provide and maintain our AI-powered contract analysis service
  • Process your uploaded contracts and generate analysis reports
  • Manage your account and subscription
  • Send you important updates, notifications, and support messages
  • Process payments and prevent fraud
  • Improve our service and develop new features
  • Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We may share your information only in these circumstances:

3.1 Service Providers

We work with trusted third-party service providers who help us operate our service:

  • Anthropic: AI language model for contract analysis
  • Stripe: Payment processing
  • AWS: Cloud infrastructure and file storage
  • Email Service Provider: Transactional emails (SendGrid or AWS SES)

3.2 Legal Requirements

We may disclose your information if required by law, court order, or government regulation.

3.3 Business Transfers

If Keelstead is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Your Contract Data

Data Security & Confidentiality

Your uploaded contracts are treated as strictly confidential. We use encryption both in transit and at rest to protect your sensitive documents. Only you and authorized members of your organization can access your contracts.

4.1 AI Processing

When you upload a contract, we send it to Anthropic's Claude AI service for analysis. Anthropic's data processing practices are governed by their own privacy policy. We do not use your contracts to train our models.

4.2 Data Retention

We retain your contracts and analysis results as long as your account is active. You can delete individual analyses or your entire account at any time through your settings.

5. Data Security

We implement industry-standard security measures to protect your information:

  • Encryption of data in transit (HTTPS/TLS)
  • Encryption of data at rest (AES-256)
  • Secure authentication (magic link authentication)
  • Regular security audits and monitoring
  • Access controls and logging

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Privacy Rights

6.1 Access and Portability

You have the right to access and download your data at any time through your account.

6.2 Correction

You can update your profile information through your account settings.

6.3 Deletion

You can delete individual analyses or your entire account. Account deletion is permanent and will remove all your data within 30 days.

6.4 Opt-Out

You can manage your email notification preferences in your account settings.

7. Cookies and Tracking

We use cookies and similar technologies to:

  • Keep you signed in
  • Remember your preferences
  • Understand how you use our service
  • Improve service performance

You can control cookies through your browser settings, but disabling cookies may affect service functionality.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

9. Children's Privacy

Our service is not intended for users under the age of 18. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected
  • Right to know if personal information is sold or disclosed
  • Right to say no to the sale of personal information
  • Right to access your personal information
  • Right to request deletion of your personal information
  • Right to non-discrimination for exercising your rights

Note: We do not sell your personal information.

11. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

  • Right of access to your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Rights related to automated decision-making

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of the service after changes constitutes acceptance of the new Privacy Policy.

13. Contact Us

If you have questions about this Privacy Policy or want to exercise your privacy rights, please contact us: