Privacy Policy

Who we are

Keystone is an AI-native third-party risk management (TPRM) platform built for GRC professionals. This policy explains how we handle personal data collected through our website at mykeystone.io, specifically through the demo request form.

We are committed to handling your data with care, transparency, and respect.

What data we collect

When you submit a demo request, we collect the following information:

• Your work email address
• Your company name
• Your role
• Any information you choose to share in the "Tell us about your program" field
• How you heard about us

We do not use cookies, tracking pixels, analytics tools, or third-party advertising networks on this website. We collect no data beyond what you explicitly submit in the form.

Legal basis for processing

We process your personal data on the basis of your explicit consent, given when you check the consent box before submitting the demo request form. You may withdraw your consent at any time by contacting us. Withdrawal does not affect the lawfulness of any processing that took place before that point.

How we use your data

Your information may be used for the following purposes:

• To schedule and conduct a product demonstration
• To respond to questions you raise about the platform
• To follow up if we are unable to reach you on the first attempt
• To send you updates, product news, and other marketing communications from Keystone

You may opt out of marketing communications at any time by emailing us at privacy@mykeystone.io or by using the unsubscribe link included in any communication we send.

How long we keep your data

We retain your information for as long as necessary to fulfil the purposes described in this policy, including ongoing marketing communications, unless you request deletion or withdraw your consent. You may ask us to delete your data at any time by contacting us at privacy@mykeystone.io.

Who has access to your data

Your data is accessible only to Keystone team members involved in sales, product demonstrations, and marketing. We use Formspree to receive form submissions. Formspree acts as a data processor on our behalf and is bound by appropriate data protection obligations. Their privacy policy is available at formspree.io/legal/privacy-policy.

We do not sell or share your personal data with any third party for their own independent purposes.

Your rights

Depending on your location, you may have the following rights regarding your personal data:

• Right to access the personal data we hold about you
• Right to correct inaccurate or incomplete data
• Right to request deletion of your data
• Right to withdraw consent at any time
• Right to opt out of marketing communications
• Right to lodge a complaint with your local data protection authority

To exercise any of these rights, email us at privacy@mykeystone.io. We will respond within 30 days.

Changes to this policy

If we make material changes to this policy, we will update the date at the top of this page. For changes that meaningfully affect how we process your data, we will notify you directly by email where possible.