← Back to Keeep

Privacy Policy

Last updated: March 15, 2026

Keeep ("we", "us", "our") is committed to protecting your privacy. This policy explains what data we collect, why, and your rights under the EU General Data Protection Regulation (GDPR).

1. Data Controller

Keeep is operated as an Enskild Firma registered in Sweden. Contact: [email protected].

2. What Data We Collect

Data	Purpose	Retention
Telegram user ID & first name	Account identification	Until account deletion
Photos you upload	AI item recognition, inventory storage	Until you delete the item
Item data (name, description, price)	Inventory management, listing generation	Until you delete the item
Usage counts (recognitions, listings)	Plan limit enforcement	Reset monthly, history kept 12 months
Subscription plan & payment status	Service delivery, billing	Until account deletion + legal retention
Style examples (if provided)	AI listing personalization	Until you clear it (/setstyle → /skip)

3. What We Do NOT Collect

• We do not collect your phone number, email, or real name (beyond Telegram first name)
• We do not track your location
• We do not use cookies or web tracking (the bot runs in Telegram)
• We do not collect data from your device

4. How We Use Your Data

• AI processing: Photos are sent to Google Gemini API for item recognition. Google processes the image and returns text results. Google's usage policy applies to this processing. We do not send your Telegram ID or personal data to Google — only the image.
• Storage: Your inventory data (items, photos, descriptions) is stored on our EU-based servers (Baserow instance on Hetzner, Germany).
• Listing generation: Item data is sent to Google Gemini API to generate marketplace listings. No personal data is included.
• Payment: Payments are processed by Stripe via Telegram Payments. We do not see or store your card details.

5. Legal Basis (GDPR Art. 6)

• Contract (Art. 6(1)(b)): Processing necessary to provide the Service you requested
• Legitimate interest (Art. 6(1)(f)): Usage analytics, content moderation, fraud prevention
• Consent (Art. 6(1)(a)): Style learning (you explicitly provide example texts)

6. Third-Party Processors

Processor	Purpose	Location
Google (Gemini API)	AI image recognition & listing generation	EU/US
Telegram	Bot platform, payment processing	EU
Stripe	Payment processing (via Telegram)	EU/US
Hetzner	Server hosting, data storage	Germany

7. Data Transfers Outside EU

Google Gemini API may process image data on servers outside the EU. This transfer is covered by Google's Standard Contractual Clauses (SCCs) and their EU data processing terms. Only image data is sent — no personal identifiers.

8. Your Rights (GDPR)

You have the right to:

• Access: Request a copy of all your data (use /export in the bot)
• Rectification: Edit any item data in the bot at any time
• Erasure: Delete individual items or request full account deletion
• Data portability: Export your inventory as CSV (/export)
• Restriction: Request we stop processing your data while a dispute is resolved
• Object: Object to processing based on legitimate interest
• Withdraw consent: Clear your style data anytime (/setstyle → /skip)

To exercise these rights, contact [email protected]. We will respond within 30 days.

9. Data Retention

• Active accounts: data retained as long as account is active
• Deleted items: removed immediately from our systems
• Account deletion: all data deleted within 30 days, except payment records retained for legal/tax obligations (7 years per Swedish law)
• Inactive accounts (no activity for 12 months): we will notify you before any data cleanup

10. Content Moderation

We use AI-powered content moderation to detect prohibited items (weapons, drugs, counterfeit goods, adult content). This is an automated process. If you believe content was incorrectly rejected, contact us.

11. Children's Privacy

Keeep is not intended for users under 18 years old. We do not knowingly collect data from minors. If you believe a minor is using the Service, contact us.

12. Security

We use industry-standard security measures including encrypted connections (HTTPS/TLS), secure server infrastructure, and access controls. However, no system is 100% secure — use the Service at your own discretion.

13. Changes to This Policy

We may update this Privacy Policy. Material changes will be communicated via the Telegram bot. The "Last updated" date at the top reflects the most recent revision.

14. Supervisory Authority

If you believe we are not handling your data properly, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY): www.imy.se.

15. Contact

Data protection questions: [email protected]