How we protect your data.

Signing in

You sign in with Google only. We never see or store a password. Your session cookie holds a random token, and we store only a hash of it, so a copy of our database cannot sign anyone in. The cookie is HttpOnly, Secure and SameSite=Lax.

Your Google Ads connection

We read your Google Ads data. We do not change the Ad Account.

We store the refresh token of each Google Connection encrypted with AES-256-GCM, and each token opens only for its own Workspace. We never store the short-lived access tokens that Google gives us.

When you remove a Google Connection or delete your Workspace, we first revoke the token at Google. When Google does not confirm, we delete nothing and ask you to try again.

Connections

Every page uses HTTPS, and we tell browsers to use only HTTPS. Our server accepts web traffic only through Cloudflare, and Cloudflare connects to our server with HTTPS and checks its certificate. Every call that we make to Google, Stripe, OpenAI, Cloudflare and PostDeploy uses HTTPS and checks the certificate.

Our pages cannot be shown inside another site, and a form on another site cannot act in your Workspace.

Payments

You pay on the pages of Stripe, so card numbers never reach KeySend. We store your Stripe customer ID, your Subscription ID and the dates of the period that you paid for. Our Stripe key is a restricted key.

AI

To write Updates and Recommendations, we send OpenAI the numbers and the changes that KeySend detected, the names of your Campaigns, the search terms, keywords, ads and landing pages of a Finding, and the note that you wrote about a Campaign. To translate a text into your language, we first replace each name, number, amount and date in it with a placeholder.

Each request tells OpenAI not to store the answer. We never send your Google account details or a Google token.

Where your data is

KeySend and its database run on a server of OVHcloud in Canada. Each hour we make a backup of the database, encrypt it with age before it leaves the server, and store it in Cloudflare R2 in the United States.

The key that encrypts Google tokens is kept apart from the database and is not in the backups. The key that opens the backups is not on the server. We keep our keys in a password manager.

Our privacy page lists each company that helps us run KeySend and what it does.

How long we keep your data

Your Workspace

While you have Access. When your Trial or your Subscription ends, we keep it for 12 months, so that you can come back. Then, once you have not signed in for 30 days, we delete it as if you deleted it in Settings.

Account history

When you add an Ad Account, we collect up to 24 months of its Account history and then add each new day. We keep 24 months of Account history, Updates, Findings and Recommendations, and each day we delete what is older.

An Ad Account that you remove

We delete its Account history, Updates, Findings, Recommendations, Branding and settings at once. The Google Connection stays.

A Google Connection that you remove

We revoke its token at Google. Then we delete the Google Connection and each Ad Account that you added through it, with all its data.

Permission that you remove at Google

We can no longer read your Google Ads. The data that we already have stays until you delete it in KeySend.

A Workspace that you delete

We revoke each Google token, delete your customer at Stripe, which cancels the Subscription, and delete your User account, your sessions and all the data of the Workspace. We keep only a one-way hash of your Google account ID and the date your Trial started, so that a new Workspace does not get a second Trial. We delete it 24 months after the Trial started. Stripe keeps your payment history.

Backups

Deleted data stays in the encrypted backups until they expire: hourly backups after 48 hours, daily backups after 30 days.

Your rights under the GDPR

Why we may use your data

We use your data to provide the service that you signed up for: to monitor your Ad Accounts, write your Updates and send your emails. That is our contract with you.

See your data

KeySend shows you the data of each Ad Account, and the Export gives you its numbers and Updates as a PDF file. For a copy of all the data that we hold about you, email us.

Correct it

Your name and email address come from Google, and we update them each time you sign in. You change the profile and the Branding of an Ad Account in its Settings, and the note of a Campaign in its settings.

Delete it

Delete your Workspace or remove a Google Connection in Settings. Remove an Ad Account in its Settings.

Object or stop

Remove a Google Connection to stop us reading its Google Ads. Turn off the Weekly email and the Alerts in the Settings of each Ad Account. To object to any other use of your data, email us.

Ask or complain

Email [email protected]. A person reads it, and we answer within one month. You can also complain to the data protection authority of your country.