Privacy Policy

KeywordPilot ("we", "us") is the independent team behind this site. This policy explains what data this website handles and what your rights are. We wrote it to be read, not to cover ourselves in fog.

What we collect

Your account. We store the email address you sign in with, the hashed sign-in code while it is valid, when you confirmed the address, and your IP address for abuse prevention. There is no password to store. If a teammate invites you to a seat, the owner of that account sees the address they invited.

Your work. Projects, seed keywords and the keyword plans produced for them, so you can reopen and export them. Your research is visible to you and to teammates on the same account, and to nobody else.

Payments. Card details are entered on Stripe's own checkout screen and never reach our servers. Stripe is the payment controller for that step and tells us the customer id, which plan you are on and whether it is active. Invoices and card changes live in Stripe's billing portal.

The free demo. The seed keyword you type is sent to our server and forwarded to Google's Gemini API to generate the result. Popular seeds and their results are cached temporarily so repeated searches are fast. Demo inputs are not linked to your identity and we do not build profiles from them. The same model service produces plans inside a paid account, where they are stored against your project.

Server logs. Like almost every website, our servers keep short-lived technical logs (IP address, URL, user agent) for security and debugging.

What we do not do

• We do not sell or rent your email address or any other data.
• We do not resell your keyword data or share research between accounts.
• We do not run third-party advertising trackers on this site.

Why we process it (legal bases)

Under the GDPR: performance of our contract with you (Art. 6(1)(b)) for your account, your saved work and your subscription; our legal obligation (Art. 6(1)(c)) for invoicing and accounting records; and our legitimate interest (Art. 6(1)(f)) in operating, securing and improving the service, which covers logs and abuse prevention.

Who else touches the data

Infrastructure and email providers under data-processing agreements, Google (Gemini API) for generating keyword plans, and Stripe for payments. We host in the European Union.

How long we keep it

Account and saved work: while your account exists, and we delete it on request. Billing records: as long as accounting law requires, which in Poland is five years. Technical logs: up to 30 days. Demo caches: hours, not days.

Your rights

You can ask for a copy of your data, correct it, or have it deleted at any time. Email [email protected] and we will confirm completion in writing. You may also complain to your local data-protection authority; ours is the Polish UODO.

Changes

If this policy changes materially we will note the new date at the top and, if you have an account, tell you by email.