Datenschutzerklärung

1. Responsible person

2. What data we collect

We collect and process the following personal data:

• Account details: Name, E-Mail-Adresse
• Billing details: Firmenname, Anschrift, UID-Nummer (optional)
• Payment details: Werden ausschließlich von Mollie B.V. verarbeitet – wir speichern keine Zahlungsmitteldaten
• Device data: Gerätename, IP-Adresse (anonymisiert), letzter Zugriff
• Usage data: Logs über API-Zugriffszeiten (ohne Inhalte der Tresore)

3. Purpose of data processing

Your data will only be used for:

• Provision and operation of the Keepless service
• Invoicing and payment processing
• Security and protection against misuse
• Transaction emails (account confirmation, receipts)

4. Data Storage & Security

Alle gespeicherten Lizenzen und Secrets werden locally on your device with AES-256 encrypted. The server only stores the encrypted blob - the Key never leaves your device. Server infrastructure: EU server (Laravel Forge / Hetzner).

Shared links

When you share an entry by link in the browser extension, a copy of it is encrypted in your browser. We store only this encrypted copy, the chosen expiry, the number of allowed and completed views, the link to your account, and a hash of the shared entry's identifier, so that its links can be revoked from any of your devices when the entry is deleted for good. The key is only part of the link (after the # sign) and is never sent to us; we cannot read the content. The copy is deleted on its last allowed view, when you revoke the link, or when it expires (at most 7 days; expired links are removed daily).

For recipients, the link page sets no cookies and loads no analytics or third-party services. To prevent abuse we process the IP address when the page is used to limit requests; only a hash value is stored, and it expires after one minute.

5. Data transfer to third parties

We only pass on data:

• Mollie B.V. (Payment processing) – Data protection: mollie.com/privacy
• Authorities if required by law

It will not be passed on for advertising purposes.

6. Your rights (GDPR Art. 15-22)

• Information about stored data
• Correction of incorrect data
• Erasure (right to be forgotten)
• Restriction of processing
• Data portability
• Objection to processing

Zur Ausübung dieser Rechte wenden Sie sich an: support@keepless.app

7. Cookies & Tracking

Keepless only uses technically necessary session cookies for login. There won't be any Tracking or marketing cookies are used. Third-party tracking does not take place.

8. Retention periods

Invoice data is stored in accordance with the statutory retention requirement (7 years). Account details will be deleted after termination and expiry of legal deadlines.

9. Right to complain

Sie haben das Recht, sich bei einer Datenschutzbehörde zu beschweren. In Österreich: Data protection authority (dsb.gv.at). In Germany: responsible state authority.