Privacy statement

1. Controller

KeyPI.app is the controller for data collected through this website. Privacy questions? Email privacy@keypi.app and you will hear from us within one business day. Formal GDPR requests use the same address.

2. Data we process

• —Contact and enquiry data: name, company, email address, phone number, industry and your message, when you use the contact form or the configurator.
• —Configurator data: the modules, scale and options you select, so we can substantiate an indicative investment.
• —Technical data: IP address, browser type and requested pages in server logs, needed for security and availability.
• —Cookie preference: your choice regarding analytics and marketing cookies, stored locally in your browser.

3. Purposes and legal bases

• —Responding to your enquiry and preparing a proposal — basis: performance of, or steps prior to, a contract.
• —Security, abuse prevention and technical operation of the site — basis: legitimate interest.
• —Analytics and marketing cookies — basis: your consent, which you can withdraw at any time.
• —Administration and statutory retention duties — basis: legal obligation.

4. Retention periods

• —Enquiries that do not lead to a project: no longer than 12 months after the last contact.
• —Client files and correspondence: for the duration of the engagement and, where legally required, 7 years thereafter.
• —Server logs: no longer than 90 days.
• —Cookie preference: up to 12 months, or until you change or clear it yourself.

5. Processors and transfers

We only engage suppliers that are necessary to run this site and our services: website and application hosting, the database that receives form submissions, and email delivery. A data processing agreement is in place with each of them. Where data would be processed outside the European Economic Area, this happens solely under the European Commission's standard contractual clauses or an adequacy decision. We never sell your data and do not use it for purposes you would not expect.

6. AI and automated decision-making

No automated decision-making with legal effect takes place on this website. The ROI calculator, maturity scan and configurator run entirely in your browser and produce an indication, not a decision. In the projects we build for clients we apply AI with a human in the loop; per project we record which data a model may see, and we do not train on client data without an explicit agreement.

7. Security

• —Encrypted connections (TLS) for all traffic to and from this site.
• —Role-based access to submissions following the principle of least privilege.
• —Logging and monitoring to detect unusual activity.
• —Data breaches are recorded and, where required, reported to the supervisory authority within 72 hours.

8. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Cookie consent can be withdrawn at any time through the cookie preferences link in the footer of every page. Send your request to privacy@keypi.app and we will respond within 30 days. If our response does not satisfy you, you may lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.

9. Changes

We update this statement when our services or legislation require it. The date above indicates the current version.