← Back to Keeep
Privacy Policy
Last updated: March 26, 2026
Keeep ("we", "us", "our") is committed to protecting your privacy. This policy explains what data we collect, why, and your rights under the EU General Data Protection Regulation (GDPR).
1. Data Controller
Keeep is operated as an Enskild Firma registered in Sweden. Contact: [email protected].
2. What Data We Collect
| Data | Purpose | Retention |
|---|
| Telegram user ID & first name | Account identification | Until account deletion |
| Photos you upload | AI item recognition, inventory storage | Until you delete the item |
| Item data (name, description, price) | Inventory management, listing generation | Until you delete the item |
| Usage counts (recognitions, listings) | Plan limit enforcement | Reset monthly, history kept 12 months |
| Subscription plan & payment status | Service delivery, billing | Until account deletion + legal retention |
| Style examples (if provided) | AI listing personalization | Until you clear it (/setstyle → /skip) |
3. What We Do NOT Collect
- We do not collect your phone number, email, or real name (beyond Telegram first name)
- We do not track your location
- We do not use cookies or web tracking (the bot runs in Telegram)
- We do not collect data from your device
4. How We Use Your Data
- AI processing: Photos are sent to Google Gemini API for item recognition. Google processes the image and returns text results. Google's usage policy applies to this processing. We do not send your Telegram ID or personal data to Google — only the image.
- Storage: Your inventory data (items, descriptions) is stored on our EU-based servers. Photos and media files are stored on Cloudflare R2 (EU jurisdiction) and served via media.keeepit.com.
- Listing generation: Item data is sent to Google Gemini API to generate marketplace listings. No personal data is included.
- Payment: Payments are processed by Stripe via Telegram Payments. We do not see or store your card details.
5. Legal Basis (GDPR Art. 6)
- Contract (Art. 6(1)(b)): Processing necessary to provide the Service you requested
- Legitimate interest (Art. 6(1)(f)): Usage analytics, content moderation, fraud prevention
- Consent (Art. 6(1)(a)): Style learning (you explicitly provide example texts)
6. Third-Party Processors
| Processor | Purpose | Location |
|---|
| Google (Gemini API) | AI image recognition & listing generation | EU/US |
| Telegram | Bot platform, payment processing | EU |
| Stripe | Payment processing (via Telegram) | EU/US |
| Cloudflare | Media storage (R2), website hosting (Pages) | EU |
7. Data Transfers Outside EU
Google Gemini API may process image data on servers outside the EU. This transfer is covered by Google's Standard Contractual Clauses (SCCs) and their EU data processing terms. Only image data is sent — no personal identifiers.
8. Your Rights (GDPR)
You have the right to:
- Access: Request a copy of all your data (use /export in the bot)
- Rectification: Edit any item data in the bot at any time
- Erasure: Delete individual items, or use /deleteaccount to remove all your data permanently
- Data portability: Export your inventory as CSV with photos (/export)
- Restriction: Request we stop processing your data while a dispute is resolved
- Object: Object to processing based on legitimate interest
- Withdraw consent: Clear your style data anytime (/setstyle → /skip)
To exercise these rights, contact [email protected]. We will respond within 30 days.
9. Data Retention
- Active accounts: data retained as long as account is active
- Deleted items: removed immediately from our systems
- Account deletion: all data deleted within 30 days, except payment records retained for legal/tax obligations (7 years per Swedish law)
- Inactive accounts (no activity for 12 months): we will notify you before any data cleanup
10. Browser Extension
The optional Keeep browser extension auto-fills listing forms on supported marketplaces (Blocket, Vinted). The extension:
- Only reads data from your Keeep inventory via our API (authenticated by your Telegram ID)
- Does not track your browsing activity or collect data from other websites
- Only activates on supported marketplace listing pages
- Stores your API connection settings locally in the browser (chrome.storage)
11. Content Moderation
We use AI-powered content moderation to detect prohibited items (weapons, drugs, counterfeit goods, adult content). This is an automated process. If you believe content was incorrectly rejected, contact us.
12. Children's Privacy
Keeep is not intended for users under 18 years old. We do not knowingly collect data from minors. If you believe a minor is using the Service, contact us.
13. Security
We use industry-standard security measures including encrypted connections (HTTPS/TLS), secure server infrastructure, and access controls. However, no system is 100% secure — use the Service at your own discretion.
14. Changes to This Policy
We may update this Privacy Policy. Material changes will be communicated via the Telegram bot. The "Last updated" date at the top reflects the most recent revision.
15. Supervisory Authority
If you believe we are not handling your data properly, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY): www.imy.se.
16. Contact
Data protection questions: [email protected]