KeepOak
Sign in
Privacy Policy
A summary to help you find your way. The full text below is what applies.
KeepOak uses the information you provide to process signup and billing, operate your account, provide customer support, and protect the service.
What we collect
This includes your name, email address, account and subscription status, and technical records needed to secure and operate the service. KeepOak does not ask for your email password.
How we use it
We use this information to authenticate customers, prevent abuse, communicate about your account, and maintain the reliability and security of KeepOak.
Managed-service access
KeepOak is a managed service, not a zero-knowledge service. Authorized KeepOak operators may access underlying infrastructure or a customer environment when needed for installation, maintenance, updates, recovery, security work, or customer support.
Account and workspace retention
We retain account and billing information while you keep your account, including when you have no workspace subscription. Canceling a workspace does not delete your account or its separate AI wallet. Authentication sessions still have security expiry times.
Where workspace cancellation exports are enabled, the saved export is stored privately outside the retiring computer for 30 days after workspace access ends. Your account shows the exact cutoff. After that cutoff, download access ends and cleanup removes the saved archive. Export links require the appropriate account or restricted recovery authorization.
An explicit account-deletion request revokes normal account access and starts the displayed 30-day deletion grace period. We remove the identified personal and workspace data through scoped cleanup. Our standard retention policy keeps minimal transaction and audit records for seven years for accounting, disputes and compliance; a longer legally required hold may apply. This does not retain your agent conversations, provider secrets or workspace files for seven years.
Who handles your data for us
A small number of companies process data on our behalf, each only for its job: Stripe for payments, receipts and subscription billing; OVHcloud for the dedicated server behind your computer, in United States data centers; Cloudflare for the network, protection and sign-in gateway in front of every KeepOak address; Google for sign-in, only if you choose Continue with Google; Resend for transactional email such as sign-in codes; and, once KeepOak AI credits open, OpenRouter as the model supplier. An AI provider you connect inside an agent is your own choice and bills you directly under its own privacy terms. We do not sell personal data.
Cookies
KeepOak sets one essential cookie to keep you signed in, and stores your display preferences in your browser. We do not use advertising cookies or third-party analytics trackers; if that ever changes, this page will say so first.
Where your data lives
Your account records and your computer are kept in United States data centers. If you use KeepOak from elsewhere, your data is transferred to and handled in the United States.
Your choices
You can ask for a copy of the personal data we hold about you, ask us to correct it, or delete your account yourself from Settings & security. Write to support@keepoak.com from the email address on your account; we answer within 30 days, and we honor the rights your region gives you, including under the GDPR and the California Consumer Privacy Act. If a security incident affects your data, we tell you by email without undue delay. KeepOak is not for people under 18.
Changes and contact
When this policy changes we post the new version here with its date and email you about changes that matter. Questions go to support@keepoak.com.