1. Introduction
This Privacy Policy explains how FINGERPOWER DIGITAL TECHNOLOGY LLC (“we”, “us”, or “our”) collects, uses, and shares information when you use Kept AI at www.keptai.com and app.keptai.com (the “Service”). By using the Service you agree to the practices described below.
2. Information we collect
- Account information: name, email address, and a password hash when you sign up. If you use optional Google sign-in, we receive the email and name Google provides for that account.
- Billing information: limited payment metadata such as last four digits, expiration, and billing ZIP. Full card numbers are handled by Stripe and are never stored on our servers.
- Project data you submit: brand names, prompts, competitor names, website URLs, product catalogs, and notes you enter so we can sample AI answers and produce analytics.
- Sampled AI answers: model outputs collected through our sampling providers for the prompts you track.
- Gateway edge logs: if you route a domain through Kept Gateway, we record a de-identified visitor hash, path, referrer, and robot classification. We do not store IP addresses or raw User-Agent strings for this purpose. Retention is at most 180 days.
- Language-demand counts: the marketing site records daily aggregate counts of language preference and page language. These rows contain no visitor identifier, IP, full URL, or User-Agent.
- Support messages: the content of emails you send to our contact addresses.
3. How we use information
- To provide, maintain, and improve the Service;
- To process payments and prevent fraud;
- To send transactional email such as receipts, security alerts, and service notices;
- To respond to support requests;
- To operate Kept Gateway analytics and language-demand aggregates;
- To comply with legal obligations.
We do not sell your personal information. We do not use advertising or analytics cookies on www.keptai.com.
4. Processors
We share information only with processors that perform functions on our behalf:
- Cloudflare — hosting, Workers, D1, KV, R2, Email Routing, and edge logs.
- Stripe — payment processing. Card numbers do not pass through our systems.
- Supabase — application database, hosted on AWS us-east-1.
- DataForSEO, cloro.dev, and Scrapeless — AI answer sampling.
- OpenRouter and its upstream model providers, including Anthropic, OpenAI, and Google — prompt generation, classification, and Agent conversations.
- Resend — transactional email.
- Google — optional sign-in.
We may also disclose information to legal authorities when required by law, or to a successor in a merger or asset sale, subject to this policy.
5. Cookies
- keptai_language on www.keptai.com — 1 year, language preference. Choosing “Follow browser” deletes it.
- kept_attr_src on www.keptai.com — 30 days, records the advertising or source parameters that brought the visit. Used for attribution analysis.
- kept-auth* on app.keptai.com — HttpOnly session cookies for sign-in.
- Stripe Checkout and Customer Portal set their own cookies on Stripe-hosted pages.
There are no advertising or analytics cookies on the marketing site. You can disable cookies in your browser; sign-in and language preference will not persist without them.
6. Data retention
- Account data: until you request deletion.
- Gateway edge logs and language-demand aggregates: up to 180 days.
- Sampled AI answers and project analytics: for the life of the project.
- Stripe keeps invoices under its own policy.
7. International transfers
We are based in the United States. If you access the Service from outside the U.S., your information is processed in the U.S. and in other jurisdictions where our processors operate. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses. A data processing addendum is available on request at privacy@keptai.com.
8. Your rights
Depending on your jurisdiction, you may have the right to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing. Email privacy@keptai.com. We will respond within 30 days.
California residents have additional rights under the CCPA/CPRA, including the right to know the categories of personal information we collect and disclose. We do not sell or share personal information for cross-context advertising.
EU/UK residents have rights under the GDPR / UK GDPR. Our lawful bases include performance of a contract, legitimate interests in operating the Service, consent where required, and compliance with legal obligations.
9. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
10. Security
We use TLS in transit, access controls, and encryption at rest where our processors provide it. No method of transmission or storage is completely secure.
11. Changes
We may update this Privacy Policy from time to time. The “Last updated” date reflects the most recent revision. Material changes will be announced by email or in-app notice.
12. Contact
FINGERPOWER DIGITAL TECHNOLOGY LLC 5609 Balsam St Arvada, CO 80002, US Email: privacy@keptai.com