Keepfor.me Privacy Policy

1. Overview

This Privacy Policy explains how Keepfor ("Keepfor Cloud", "Keepfor.me", "we", "us", or "our") collects, uses, stores, and protects personal data when you visit https://keepfor.me or use the Keepfor Cloud hosted service available at https://app.keepfor.me ("Service").

Keepfor is architected from the ground up around strict tenant isolation, data minimization, and user data ownership. Whether you use the hosted cloud service or inspect our open-source codebase, our privacy commitments are transparent and binding.

2. Information We Collect

A. Account and Authentication Data

• Email address: Used as your unique account credential, for critical service alerts, and for opt-in weekly reading digests.
• Password hash: Cryptographically hashed using PBKDF2-HMAC-SHA256 (100,000 iterations) or Argon2. We never store, handle, or log plain-text passwords.
• Session tokens: Cryptographically secure, random tokens stored in database session records to maintain your authenticated state.
• Personal Access Token (PAT) hashes: Tokens created for API or Model Context Protocol (MCP) integrations are hashed with SHA-256 upon generation. Raw tokens are displayed once and never retained in plain text.
• Account metadata: Timestamps of account creation and last active session.

B. User Content and Library Data

• Submitted URLs: Web addresses submitted for extraction and bookmarking.
• Extracted content: Clean, parsed HTML and text representations extracted from submitted pages.
• User annotations: Personal notes, highlights, tags, reading status (unread, reading, archived), and reading progress metadata.
• Vector embeddings: Mathematical vector representations derived from article text chunks using Cloudflare Workers AI embeddings, used solely for semantic search and question answering within your own library.

C. Billing and Subscription Data

• Subscription identifiers: Customer ID and subscription IDs managed through Stripe, Inc.
• Plan metadata: Current plan tier (Trial, Personal, Pro), billing intervals (monthly or annual), and subscription status.
• Payment card details: Payment methods and card numbers are processed directly by Stripe, Inc. Payment card details never pass through, touch, or reside on Keepfor servers.

D. System Telemetry and Audit Logs

• Request telemetry: Standard HTTP request logs recording request ID, tenant ID, route path, status code, and latency for performance and edge diagnostics.
• Operator audit logs: Immutable records of administrative security actions, such as subscription lifecycle changes or account deactivations.
• Log hygiene guarantee: System request logs and diagnostic logs never contain saved article content, extracted clean text, notes, or user email addresses.

3. Purposes of Data Processing

We process your data solely to provide, operate, and maintain the Service:

1. Content ingestion and reader view: Fetching web pages you submit, stripping ads and clutter, and formatting clean reader articles.
2. Search and indexing: Indexing your saved content for instant keyword matching via SQLite FTS5 and semantic similarity via Cloudflare Vectorize.
3. AI assistance features: Generating concise article summaries, suggesting relevant tags, and answering natural language questions about your saved library using Cloudflare Workers AI.
4. Transactional and digest emails: Sending password reset tokens, account verification links, and scheduled weekly digests if explicitly enabled in your account settings.
5. Billing administration: Managing trial periods, subscription renewals, plan upgrades, and invoices via Stripe webhooks.

4. Data Retention and Deletion

• Active retention: Your library data and account information are retained for the duration of your active subscription or account lifecycle.
• Data portability and export: You can export your full library, metadata, tags, and notes at any time in standardized JSON or archive formats directly from your settings panel.
• Permanent account deletion: When you delete your account through the settings dashboard:
  • All database records (saved items, notes, tags, chunks, tokens) are purged from your tenant data shard.
  • All cached HTML blobs and export archives are deleted from Cloudflare R2 object storage.
  • All vector embeddings are removed from Cloudflare Vectorize.
  • All active sessions and control-plane records are permanently destroyed.
  • Any active Stripe recurring subscription is immediately terminated.

5. Third-Party Subprocessors

To run high-performance, globally distributed infrastructure, Keepfor engages third-party infrastructure providers that maintain strict data security and privacy certifications:

• Cloudflare, Inc.: Global serverless edge compute (Workers), relational databases (D1), object storage (R2), vector index (Vectorize), and edge inference (Workers AI).
• Stripe, Inc.: PCI-DSS Level 1 certified payment processing, customer billing portal, and recurring subscriptions.
• Resend, Inc.: Transactional email infrastructure for verification links, password resets, and user-requested digest emails.

6. Your Rights (GDPR, CCPA, and Global Regulations)

Regardless of your geographic location, Keepfor honors comprehensive data subject rights:

• Right of access: Request confirmation and details of personal data held about you.
• Right to portability: Download a full, machine-readable export of your library content and metadata at any time.
• Right to rectification: Correct inaccurate account information directly in your user profile.
• Right to erasure ("Right to be Forgotten"): Permanently delete your account and all associated library content at will.
• Right to restrict or object: Unsubscribe from digest notifications or opt out of specific optional features at any time.

7. Contact Information

If you have questions about this Privacy Policy, wish to exercise your data protection rights, or need assistance with privacy inquiries:

• Email: [email protected]
• Data Controller: Keepfor
• Official Website: https://keepfor.me