Privacy Policy

This policy explains what information Keepr (“Keepr,” “we,” “us”) collects, why, how we use and protect it, and the choices and rights you have. It applies to keepr.now and the Keepr application. Keepr is operated in Québec, Canada by 9433-7656 Québec inc.

We have designated a Person in Charge of the Protection of Personal Information (the privacy officer required under Québec’s Law 25). You can reach them about anything in this policy, to exercise your rights, or to raise a concern, at privacy@keepr.now or by writing to: Privacy Officer, 9433-7656 Québec inc., 251-251 boul. Taschereau, Brossard (Québec) J4Z 1A7, Canada.

Keepr handles personal information in two distinct roles, and your rights differ slightly in each:

• For your own account information, we are the controller (the “person carrying on an enterprise” responsible for the information). This is the data you give us directly to sign up and use Keepr.
• For the business data you connect, we act as a processor (sub-contractor) on your behalf. When you connect a booking, payments, calendar, or analytics tool, that data may include personal information about your clients. You remain responsible for that information; Keepr only processes it on your documented instructions, to provide the Service. Our obligations in this role are set out in our Data Processing Agreement, which forms part of our Terms.

If you connect a tool, you confirm you have the authority and the necessary consent to share that data with Keepr and to have it processed as described here.

We collect only what we need to run Keepr for you:

• Account information: your name, email address, and authentication details (we support magic-link and Google sign-in).
• Connected business data: when you connect a tool (such as your booking, payments, calendar, or reviews platform), Keepr reads the data needed to do its job: appointments, transactions, customer and review records, calendar events, and related operational data. This may include personal information about your clients, which we process as your sub-contractor (see “Our two roles” above).
• Content you create in Keepr: the decisions, notes, questions, and context you add, which become part of your business’s memory.
• Billing information: handled by our payment processor; we do not store full card numbers.
• Usage and device data: basic logs, IP address, and product analytics used to keep Keepr secure and reliable.

We do not knowingly collect sensitive personal information (such as health or biometric data). Please don’t connect tools whose primary purpose is to store such information without contacting us first.

We use personal information to:

• Provide Keepr’s core service: building your operating memory, forming and updating beliefs, generating briefs, and answering your questions.
• Authenticate you, process payments, and provide support.
• Maintain security, prevent abuse, and debug problems.
• Send you service communications (and, only with your separate consent, product updates).

We use your information only for these purposes. Your consent is sought in a manner that is clear, free, and informed, and given for these specific purposes; you can withdraw it at any time (see “Your rights”). Where we rely on a legitimate commercial interest (such as securing the Service), we balance it against your privacy. We will ask for fresh consent before using your information for a materially new purpose.

Keepr uses automated systems to analyze your connected data and produce analysis, confidence levels, and proposed next steps for you, the business owner, to act on. Keepr surfaces options and reasoning; you make the decisions. To be explicit:

• Keepr does not render decisions that produce legal or similarly significant effects about an individual through exclusively automated processing. If that ever changed, we would inform the affected person and give them the right to know the information and main factors used, to submit observations, and to ask a member of our staff to review the decision, as required by Law 25.
• We do not sell your data. Ever.
• We do not use your business data to train third-party or foundation AI models, and our AI provider does not train its models on data sent through our integration.
• Your data is processed to serve you. It is not pooled to build products for other customers except in aggregated and de-identified form.

We share data only with vetted providers that help us operate Keepr, under contracts that require them to protect it and to use it only on our instructions. By category, these are:

• Hosting & database: to run the application and store your data.
• AI processing: to generate Keepr’s analysis (no model training on your data).
• Email & SMS delivery: to send sign-in links, briefs, and alerts.
• Payments / billing: to process your subscription.
• Authentication & connected platforms: the tools you choose to connect.

An up-to-date list of named sub-processors, and the countries where they operate, is available on request at privacy@keepr.now. We do not permit any of them to use your data for their own purposes.

Keepr and some of our providers process data outside Québec and outside Canada, including in the United States and the European Union. Before relying on a provider outside Québec, we assess whether the information would receive adequate protection (having regard to the sensitivity of the data, the purposes, the safeguards in place, and the legal framework of the destination) and we put appropriate contractual protections in place (such as standard contractual clauses). You may contact our Privacy Officer for more detail about these transfers.

We keep account and connected data for as long as your account is active. If you close your account, we delete or de-identify your personal information within roughly 90 days, except where we must retain certain records longer to meet legal, tax, or accounting obligations, or to resolve disputes. When information is no longer needed for the purposes we collected it, we destroy or anonymize it.

We protect your data with encryption in transit, access controls, and reputable infrastructure providers, and we limit access to those who need it. No system is perfectly secure. In the event of a confidentiality incident presenting a risk of serious injury, we will promptly notify the Commission d’accès à l’information du Québec and the affected individuals as required by law, take reasonable steps to reduce the risk, and record the incident in our register of confidentiality incidents.

You have rights over your personal information, and Keepr honours these for all users:

• Access & portability: request a copy of your data, in a structured, commonly used technological format.
• Correction: fix inaccurate, incomplete, or ambiguous information.
• Deletion: ask us to delete your data, subject to our legal retention obligations.
• Withdraw consent: disconnect an integration or close your account at any time.
• De-indexation / cease dissemination: in the circumstances provided by law, ask us to stop disseminating information or to de-index it.
• Object or restrict: limit certain processing.

To exercise any right, email privacy@keepr.now. We respond within the timeframes set by law. These rights are provided under Québec’s Law 25, Canada’s PIPEDA (and other applicable provincial law), the EU/UK GDPR, and the CCPA/CPRA for California residents. If you are in Québec and are unsatisfied with our response, you may file a complaint with the Commission d’accès à l’information du Québec; elsewhere, with your local data protection authority.

Where Keepr offers privacy settings, we set them to the most privacy-protective option by default. We collect the minimum information needed, and we do not enable optional sharing or non-essential tracking without your action.

We use only the cookies necessary to keep you signed in and to keep the service secure, plus privacy-respecting analytics. We do not use third-party advertising cookies, and we do not use technology that identifies, locates, or profiles you for advertising. Where any such technology were used, we would tell you and offer a means to turn it off.

Keepr is a business tool and is not directed to anyone under 16. We do not knowingly collect information from children.

We may update this policy as Keepr evolves. We’ll revise the “last updated” date above and, for material changes, notify you by email or in the app.

Questions, requests, or privacy concerns? Email our Privacy Officer at privacy@keepr.now or write to 9433-7656 Québec inc., 251-251 boul. Taschereau, Brossard (Québec) J4Z 1A7, Canada.