Privacy Policy

Effective Date: April 21, 2026  ·  Last Updated: April 27, 2026

1. Introduction

Keylodger ("Keylodger," "we," "us," or "our") provides a property information management service that helps property owners, short-term rental hosts, real estate investors, and property managers organize and retrieve operational property details quickly.

This Privacy Policy explains what information we collect, how we use it, when we share it, and how you can exercise your rights with respect to your information.

By using Keylodger, you agree to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Account Information

When you create a Keylodger account, we collect:

• Full name — provided at registration
• Email address — used for account authentication and transactional communications
• Password — if you register with email and password; your password is processed and stored by our authentication provider (Supabase) and is not stored in plaintext by Keylodger

If you register or log in using Google OAuth, we receive the information Google provides as part of the authentication flow, which typically includes your name, email address, and profile picture URL. We do not receive your Google password.

2.2 Property and Operational Data

When you use Keylodger, you may enter and store property information, including:

• Property addresses and basic details
• Partner and maintenance contacts
• Lock codes and access device information
• WiFi network names and passwords
• Mortgage, utility, insurance, HOA, and tax account information
• Listing platform links and account details
• Property notes and documents
• Property photos

This information is yours. It is stored privately in your account and is not visible to other users.

2.3 Profile and Billing Information

We maintain a profile record associated with your account that includes your subscription tier, subscription status, and a reference to your billing record in our payment processor (Stripe). We do not store your full payment card details. Payment processing is handled by Stripe.

2.4 Usage and Technical Information

We automatically collect limited technical information when you use the service:

• Session authentication tokens, stored in your browser's local storage by our authentication provider
• Standard server-side logs generated by our hosting infrastructure (Vercel) and database infrastructure (Supabase), which may include IP addresses and request metadata

We use the Meta Pixel, an advertising measurement tool provided by Meta Platforms, Inc. The Meta Pixel collects information about actions you take on our site — specifically, account registration and subscription purchase events — and sends that data to Meta to help us measure the effectiveness of our advertising campaigns. The Meta Pixel may set cookies in your browser and may collect your IP address and browser information. Meta's use of this data is governed by Meta's Privacy Policy (facebook.com/privacy/policy).

2.5 Error and Diagnostic Information

If we activate error tracking in the future, we will update this Privacy Policy before doing so. If error tracking is activated, it may capture information about errors that occur while you use the service, which could include technical context about your session.

2.6 Information You Do Not Provide

We do not purchase or receive data about you from third-party data brokers. We do not infer sensitive attributes about you from your usage. We use Meta Pixel only for conversion measurement (to understand whether our ads lead to registrations or subscriptions) — not to build behavioral advertising profiles within Keylodger.

3. How We Use Your Information

We use the information we collect to:

• Create and authenticate your account
• Provide, maintain, and improve the Keylodger service
• Process your subscription and manage billing through Stripe
• Send you transactional emails, such as account verification links and password reset emails
• Enforce our Terms of Service and protect the security and integrity of the service
• Respond to your questions or support requests
• Comply with applicable legal obligations

We do not sell your personal information. We do not use your property data to train machine learning models or for any purpose other than providing the service to you.

4. How We Share Your Information

We share your information only in the following circumstances:

4.1 Service Providers

We use a limited number of third-party services to operate Keylodger:

Each of these providers has their own privacy practices. We share only the information necessary for each provider to perform its function.

4.2 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or when we believe in good faith that disclosure is necessary to protect our legal rights, protect your safety or the safety of others, or respond to a legal claim.

4.3 Business Transfers

If Keylodger is acquired, merged with another company, or undergoes a similar business transaction, your information may be transferred as part of that transaction. We will notify you of any such change via email or a prominent notice on the service.

4.4 With Your Consent

We may share your information for any other purpose with your explicit consent.

5. Data Storage and Security

5.1 Where Your Data Is Stored

Your data is stored by Supabase on infrastructure located in the United States. Files and images you upload are stored in Supabase Storage. The Keylodger application is hosted on Vercel, which operates infrastructure globally.

5.2 Security Measures

We take reasonable technical and organizational measures to protect your information from unauthorized access, loss, or disclosure. These include:

• All data in transit is encrypted using HTTPS/TLS
• Authentication is handled by Supabase, which implements industry-standard security practices
• Your property data is access-controlled with row-level security — only you can access your own data
• Sensitive fields in your property data are hidden by default and revealed only on demand within your authenticated session

No security measure is perfect. We cannot guarantee absolute security.

5.3 Your Responsibility

You are responsible for maintaining the confidentiality of your account credentials. We recommend using a strong, unique password. Do not share your password.

6. Data Retention

We retain your account and property data for as long as your account is active.

If your subscription lapses or you downgrade to the free plan, your data is not automatically deleted, but access to certain features or properties may be restricted based on your plan limits.

If you request account deletion (see Section 9), we will delete your personal information within 45 days of your verified request, except where we are required to retain it for legal or legitimate business purposes (such as billing records).

We may retain aggregated, de-identified information that cannot reasonably be used to identify you indefinitely.

7. Cookies and Tracking Technologies

We use the following cookies and tracking technologies:

• Meta Pixel (advertising measurement): We load the Meta Pixel script on our site. Meta may set cookies in your browser (including the _fbp and _fbc cookies) to measure whether our Meta ads led to registrations or purchases. These cookies are set by Meta, not by Keylodger. You can opt out of Meta's use of cookies for advertising purposes through your Meta ad preferences or via the Digital Advertising Alliance opt-out tools at optout.aboutads.info.
• Session tokens: Our authentication provider (Supabase) stores session tokens in your browser's local storage — not cookies — to keep you logged in. These are essential for the service and are not used for advertising.
• Infrastructure cookies: Your browser or hosting infrastructure may set basic technical cookies (such as load balancer or security cookies). These are strictly necessary for the service to operate.

8. Children's Privacy

Keylodger is not directed to children under the age of 13 (or under 16 in certain jurisdictions). We do not knowingly collect personal information from children. If we learn that we have collected information from a child under the applicable age, we will delete it promptly. If you believe a child has provided us with personal information, please contact us.

9. Your Rights and Choices

Depending on your location, you may have certain rights with respect to your personal information:

• Access: You may request a copy of the information we hold about you
• Correction: You can update your name and email address from your account settings
• Deletion: You may request deletion of your account and personal information. Keylodger does not currently offer a self-serve account deletion option. To request deletion, contact us at the email address in Section 11. We will process your request within a reasonable time.
• Data portability: You may request an export of the data you have stored in Keylodger
• Opt-out of communications: You may opt out of non-essential emails. Transactional emails (such as password reset emails) cannot be opted out of without deleting your account

10. International Users

Keylodger is operated from the United States. If you access the service from outside the United States, your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your home jurisdiction.

By using Keylodger, you consent to this transfer and processing.

11. Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, contact us at:

Email: hello@keylodger.com

We will respond to requests within a reasonable time.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a prominent notice on the service before the changes take effect. The "Last Updated" date at the top of this page indicates when the policy was most recently revised.

Your continued use of Keylodger after changes take effect constitutes acceptance of the updated policy.