Privacy notice

What we collect and why

Mailing list. If you subscribe, we store your e-mail address, the page you subscribed from, and the time of confirmation. We use it only to send the messages you asked for. Legal basis: consent. You can withdraw it with the unsubscribe link in every message; unconfirmed addresses are deleted after 7 days.

Account. If you sign in, we store your e-mail address, your organization name, and a log of sign-ins. Legal basis: performance of the service you requested. We do not store passwords. Sign-in uses one-time links.

Repositories. If you connect GitHub, we store the repository names and identifiers you granted access to. During a scan, your repository is cloned into memory, analysed, and discarded within minutes. Source code is never written to disk or stored. We keep the scan results (dependency names, versions, dates) and the fingerprint of each finding.

Payments. Purchases are processed by Polar Software Inc. as merchant of record. We receive a subscription identifier and status; we never see card details.

Technical logs. The web server keeps access logs with IP addresses for 14 days for security and debugging.

Who processes data on our behalf

OVH (hosting, United Kingdom), Hetzner Online (encrypted backups, Finland), Resend (transactional e-mail, EU region), Polar (payments), GitHub (repository access). Each processes data under its own agreement with us.

Retention

Mailing list: until you unsubscribe. Account and scan data: until you delete your organization or 12 months after the last sign-in. Audit events: 24 months. Backups: 5 weeks.

Your rights

You can ask for a copy of your data, correct it, delete it, or object to its processing by writing to privacy@keelbench.com. You can also complain to your national data protection authority; in Poland that is the Urząd Ochrony Danych Osobowych.

Cookies

Public pages set no cookies. Signed-in pages use one session cookie required to keep you signed in. There is no analytics or advertising tracking.