Privacy Policy

Last updated: September 6, 2026

Note on this document: this is a working draft prepared to accurately reflect Keyring's actual data practices as of the date above. It has not been reviewed by an attorney or privacy specialist. Before relying on it for real paying customers, have it reviewed by a lawyer — particularly around state-specific data privacy law (e.g. CCPA) if applicable to your customer base.

1. What We Collect

Account information: your name, email, phone, and company, provided when you're onboarded.
Google account data: with your explicit consent via Google's OAuth flow, we access your Gmail (to read recent messages and create drafts), Google Calendar (to read and create events), and a Keyring-specific folder in your Google Drive (to process files you place there and store text-message drafts). We request only these scopes — not full account access.
Client and listing data: information you or the Service enter about your clients, listings, and interactions, used to power the Service's features.
Voice-matching samples: past emails or texts you provide so AI drafts can be matched to your writing style.
Usage data: events like logins, draft generation, edits, and feature use, collected to improve the product and detect issues (e.g., whether AI drafts are landing well) before they become support problems.

2. How We Use It

We use this data solely to provide and improve the Service for you: generating draft communications and listing copy, syncing your calendar, matching your voice, flagging potential factual or Fair Housing issues before you send something, and understanding how well the product is working so we can fix problems.

3. Google User Data

Keyring's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Gmail, Calendar, or Drive data for advertising, and we do not sell this data to third parties. Data read from these APIs is used only to provide the features you've signed up for.

4. Where Your Data Lives

As of this writing, Keyring runs on infrastructure operated directly by its founder — not a large third-party cloud provider. Your data (client records, listings, encrypted OAuth tokens, usage events) is stored in a Postgres database on that infrastructure. OAuth refresh tokens are encrypted at rest. AI processing for drafts and chat runs on a locally-hosted language model (Ollama) rather than being sent to an external AI API — meaning your interaction and client data isn't transmitted to a third-party AI provider for this purpose. This is an early-stage operational setup; if that changes (e.g., a move to hosted cloud infrastructure), this policy will be updated to reflect it.

5. Sharing

We do not sell your data. We do not share it with third parties except: (a) Google, as required to provide the Google-connected features you've enabled, (b) service providers who help operate the Service under confidentiality obligations, or (c) if required by law.

6. Your Client's Data

If you enter information about your own clients into Keyring, you are responsible for having the appropriate basis to do so under applicable law. We process that data on your behalf as part of providing the Service to you.

7. Data Retention and Deletion

We retain your data for as long as your account is active. You may request deletion of your account and associated data at any time; we will delete it except where retention is required for legal or legitimate business record-keeping purposes.

8. Security

We take reasonable measures to protect your data, including encrypting OAuth tokens at rest and restricting access to the systems that store your data. No system is perfectly secure, and we cannot guarantee absolute security.

9. Children's Privacy

Keyring is a business tool intended for licensed real estate professionals and is not directed at children. We do not knowingly collect data from anyone under 18.

10. Changes to This Policy

We may update this policy from time to time. We'll update the date at the top of this page when we do.

Questions about this policy, or want your data deleted? Contact us through the channel provided at signup.