Information We Collect

We collect and store only the information necessary to operate, improve, and support the Service. This may include:

1.1 Account Information

• First and last name
• Email address
• Organization or company name
• User role

1.2 Key and Property Information

• Key names, labels, associated notes, and optional metadata
• Property/unit identifiers you provide

1.3 Usage Data (Automatic)

• IP address
• Browser type and device information
• Log and activity data related to application use (for security, diagnostics, and product improvement)

1.4 Optional Submissions

• Support messages, feature requests, or feedback you voluntarily submit

We do not collect financial information, payment data, or unnecessary personally identifiable information (PII).

How We Use Information

We use collected data only to:

• Provide and maintain the Service
• Authenticate users and manage accounts
• Improve app functionality and user experience
• Respond to support requests
• Maintain security and prevent misuse
• Generate anonymized, aggregated usage analytics (non-identifiable)

We do not sell or rent user data and do not use data for advertising purposes.

Data Security

The KeyCliq platform, hosted on Heroku, is designed with multiple layers of security to protect user data:

Data Protection

• Sensitive data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
• Personally identifiable information is minimized and stored only when required.

Access Controls

• Role-based access controls limit data visibility to authorized users.
• Tenant isolation prevents cross-organization data exposure.

Encryption & Secrets Management

• Application secrets and database credentials are securely stored via Heroku-managed configuration and secret storage.
• Regular key and credential rotation is enforced.

Backups & Reliability

• Automated database backups with point-in-time recovery
• Redundant storage for media files with retention policies

Monitoring & Compliance

• Hosting on Heroku leverages compliance frameworks such as SOC 2, ISO 27001, and GDPR-ready infrastructure.

User Authentication & Password Responsibilities

Users are responsible for maintaining the confidentiality of their login credentials and for all activity that occurs under their account. You agree to:

• Use strong, unique passwords and update them periodically
• Not share login credentials with unauthorized individuals
• Notify us immediately if you suspect unauthorized access
• Remove access for former users who no longer require it

We are not liable for unauthorized access resulting from weak passwords, credential sharing, phishing attacks, or user failure to secure authentication methods.

Data Sharing and Third Parties

We only share data with:

• Essential infrastructure or service providers (e.g., hosting, email, and monitoring tools)
• Legal authorities, if required by applicable law

We do not share data with advertisers, data brokers, or unrelated third parties.

Data Retention

We retain user data only for as long as needed to deliver the Service. Upon account deletion, data is removed or anonymized except where limited retention is required for legal, security, or disaster-recovery backup purposes.

User Rights

Users may request:

• Access to their data
• Correction of inaccurate data
• Deletion of stored data and account closure
• Export of data in a commonly used format

Requests can be made via: brittany@keycliq.com

Cookies

We use essential cookies for authentication, security, and app functionality. We do not use tracking or advertising cookies.

Do Not Track (DNT) Disclosure

Some browsers offer a "Do Not Track" (DNT) setting that signals a preference not to be tracked. Because there is currently no industry standard for recognizing or responding to DNT signals, our Service does not respond to DNT requests at this time.

We limit tracking to essential, non-advertising purposes only.

Children's Privacy

The Service is not intended for children under 16. We do not knowingly collect data from minors.

International Storage

Data may be stored in regions supported by our hosting provider. By using the Service, you consent to data transfer and storage in such regions, protected under industry-standard encryption and compliance frameworks.

Policy Updates

We may update this Privacy Policy periodically. Material changes will be communicated in-app or by email notification.

Contact Information

For privacy questions or data requests, contact us at:

brittany@keycliq.com