Privacy Policy

Last updated: September 17, 2026

Meet the operator and explore our security approach →

1. Introduction

KeyKeeper.world ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our secure email service.

2. Message Security

KeyKeeper uses different protections for standard mail and optional OpenPGP messages:

  • Standard email, drafts and metadata are accessible to the service.
  • OpenPGP message bodies can be encrypted with recipient keys before sending.
  • OpenPGP protection depends on who manages the private keys; agent integrations may use server-managed keys.
  • Disk encryption uses server-managed keys and is not end-to-end encryption.

3. Information We Collect

3.1 Account Information

When you create an account, we collect:

  • Email address ([email protected])
  • Hashed sign-in passwords and encrypted mailbox credentials
  • Optional display name
  • PGP public key fingerprint

3.2 Usage Information

We collect minimal usage data:

  • Login timestamps (for security purposes)
  • Email metadata (sender, recipient, timestamp, subject line)
  • Credit usage for AI agent accounts
  • Daily account-level indicators of inbox use and message reading through the web interface, REST or MCP. These activity summaries contain no message contents and help us measure service use without advertising trackers.
  • IP addresses and server access logs for operations and abuse prevention
  • Approximate session locations: when you open your device list, IPstack receives your public IP address to estimate its city and country. Email addresses, passwords and message contents are not sent for this lookup.
  • Profile photos you upload are stored by KeyKeeper for your account display. We remove embedded image metadata and do not automatically query Gravatar.

3.3 Payment Information

We store credit balances, credit transactions, payment references and subscription records. Card subscriptions and mail-credit top-ups use Stripe. Native USDC top-ups use unique addresses on Polygon; blockchain transactions are public. Card details are handled by Stripe, not stored by KeyKeeper.

4. How We Use Your Information

We use the collected information to:

  • Provide and maintain the email service
  • Authenticate users and prevent unauthorized access
  • Detect and prevent spam, abuse, and fraud
  • Process cryptocurrency payments and credit management
  • Improve our services and user experience
  • Comply with legal obligations

5. Data Storage and Security

We implement industry-standard security measures:

  • Optional OpenPGP encryption for supported message bodies
  • Hashed sign-in passwords and encrypted mailbox credentials
  • Security fixes and dependency updates
  • Two-factor authentication (2FA) support
  • Secure HTTPS connections for all web traffic

6. Data Retention

We retain your account data for as long as your account is active. Encrypted messages are stored according to your account settings. Operational logs and backups may retain data beyond account deletion; a fixed deletion period is not currently guaranteed. You may request account deletion at any time.

7. Third-Party Services

KeyKeeper does not share your data with third-party advertisers or data brokers. We may use essential service providers (hosting, infrastructure) who are contractually bound to protect your data and may not use it for any other purpose.

8. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your account and data
  • Export your data
  • Object to data processing
  • Withdraw consent at any time

9. Cookies and Tracking

We use minimal, essential cookies for authentication and session management. We do not use tracking cookies, analytics cookies, or advertising cookies. You can disable cookies in your browser, but this may limit functionality.

10. Children's Privacy

KeyKeeper is not intended for users under 13 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will delete it immediately.

11. International Users

Our services are operated globally. By using KeyKeeper, you consent to the transfer of your information to countries where we operate. We ensure appropriate safeguards are in place to protect your data.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through a notice on our website. Your continued use of the service after changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions or to exercise your rights, please contact us at:

Email: [email protected]
Security Issues: [email protected]