KeyroomKeyroom

Draft. Attorney review required

This is a placeholder scaffold, not a finalized agreement, and not legal advice. A licensed attorney must review and complete it (and every [bracketed] field) before it governs any user. Do not treat it as in force.

Privacy Policy

Effective July 20, 2026 · Stevesaiguide. Covers Keyroom and Boardroom.

What we collect

  • Account data: your email address (used for magic-link sign-in) and which door you signed up on.
  • Your work: learning progress, saved playbook entries, and your voice-profile settings.
  • AI inputs and outputs: the prompts and details you submit to the assistant, skills, and lessons, and the drafts generated from them.
  • Usage and device data: pages viewed, features used, and basic device/browser information, for product analytics.
  • Diagnostics: error and performance data to keep the Service working.

How we use it

To provide and personalize the Service (build your path, score your work, sync across devices), to send you the sign-in link and essential service messages, to operate metering and billing, to improve the product, and to keep it secure. We do not sell your personal information.

AI processing

Your inputs are sent to Anthropic’s Claude API to generate output. Anthropic’s Commercial Terms of Service (Section B) state that “Anthropic may not train models on Customer Content from Services,” which covers both your inputs and the generated outputs. Do not enter information you are not authorized to share; you are responsible for the content you submit. [Verified against Anthropic Commercial Terms 2026-07-20; sign Anthropic’s Data Processing Addendum for the account.]

Service providers (sub-processors)

  • Cloud hosting and database: [hosting provider] / PostgreSQL.
  • Transactional email (sign-in links): Resend.
  • Error and performance monitoring: Sentry.
  • AI model provider: [provider].
  • Payments (when live): Stripe.

Cookies and local storage

We use a signed session cookie for sign-in and local storage to keep your progress on your device. We use limited analytics; [describe any analytics cookies and opt-out].

Retention

We keep account and work data while your account is active. After you delete your account or ask us to, we remove your data within 30 days, except limited records we must keep for legal, tax, or security reasons. Backups are purged on a rolling 90-day cycle.

Your choices and rights

You can request access to, correction of, or deletion of your data at [email protected]. California residents have rights under the CCPA/CPRA to know, delete, and correct their information and to opt out of its sale or sharing; we do not sell personal information. If you are in the EU or UK, you have rights under the GDPR/UK GDPR. [Attorney to finalize jurisdiction-specific disclosures.]

Security

We use reasonable technical and organizational measures to protect your data. No system is perfectly secure.

Children

The Service is for business use by adults and is not directed to anyone under 18.

Changes and contact

We will post updates here and update the effective date. Questions: [email protected].