Privacy Policy
The short version
- Your API keys never leave your computer. Your vault is stored locally and is never sent to us.
- We keep only what we need to sell and validate your license: your email, license key, plan, and license status.
- The app checks in with our license server about once a day, sending your license key and a device identifier.
- Smart search runs entirely on your device. Your search queries aren't sent to us or to anyone else.
- Once a day the app checks that each stored key still works by contacting that key's own provider directly. Keys never pass through our servers.
- Stripe handles payments. We never see your full card number.
- No ads. No selling or renting your data. Ever.
This summary is for convenience. The full policy below is what applies.
1. Who we are
KeyScout is made by SavvyTech Consult LLC, an Oklahoma limited liability company ("SavvyTech," "we," "us," or "our"). This Privacy Policy explains how we collect, use, and share information when you use the KeyScout desktop app for Mac and Windows (the "App"), our website at getkeyscout.com (the "Site"), and related services (together, the "Services").
Questions? Email [email protected].
2. Your vault and API keys stay on your device
KeyScout stores your API keys and related vault data in a local vault on your computer. Your vault and the keys in it are not sent to us, and we cannot see, access, or recover them. Because of this, you are responsible for keeping your device secure and for backing up your vault. If you lose your device or your vault data, we cannot restore it.
3. Information we collect
a. Purchase and license information
When you buy KeyScout Plus or the Founder Pass, or activate a license, we store:
- Your purchaser email address
- Your license key
- Your plan (Free, Plus monthly, Plus yearly, or Founder Pass)
- Your license status (for example, active, canceled, refunded, or revoked)
b. License check-ins
About once a day, the App contacts our license server to confirm your license is valid. Each check-in sends your license key and a device identifier. The device identifier is a random ID generated by the App when it's installed. It is not tied to your computer's hardware serial numbers or other hardware identifiers, and it is used only to enforce the limit of 2 computers per license. It is not used for advertising or to track you across other apps or websites.
Like most web requests, check-ins also log standard request data, such as your IP address and the App version. We use this data only for security and abuse prevention.
c. Smart search runs locally
Smart search runs entirely on your device. Your search queries are not sent to our servers or to any third party. Your plan's smart-search limits are applied within the App.
d. Daily key check
About once a day, the App tests whether each key in your vault still works. It does this by sending each key directly from your device to that key's own provider (for example, OpenAI or GitHub), using the provider's normal API, only to check that the key is still valid. These requests never go through our servers, and we never see your keys or the results. Each provider handles these requests under its own terms and privacy policy, just like any other time you use that key.
e. Waitlist and contact
If you join our waitlist on the Site, we store the email address you provide. If you email us for support, we keep your message and email address so we can respond.
f. Payment information
Payments are processed by Stripe. Stripe collects your payment details directly. We never see or store your full card number. We may receive limited information from Stripe, such as your email, the plan purchased, transaction status, the country you're paying from, and the last four digits of your card, so we can provide your license and handle refunds and support.
g. Basic technical information
Like most online services, our hosting providers may process basic technical data, such as IP addresses and request logs, when you visit the Site or when the App contacts our servers. This is used for security, preventing abuse, and keeping the Services running.
h. No analytics or tracking cookies
We do not use analytics tools, advertising pixels, or tracking cookies on the Site or in the App. Cloudflare, our hosting provider, may process basic server logs as part of delivering and protecting the Site and our servers.
4. How we use information
- To provide, activate, and validate your license and deliver the features of your plan
- To process purchases, subscriptions, refunds, and cancellations
- To send you your license key and important service emails, such as receipts, license, security, and policy-change notices
- To let you know when KeyScout is available, if you joined the waitlist
- To respond to support requests
- To detect and prevent fraud, chargeback abuse, license sharing, and other misuse
- To comply with legal obligations and enforce our Terms of Service
We do not sell, rent, or trade your personal information, and we do not show ads or use your data for advertising.
5. Service providers we use
We share information only with service providers who help us run KeyScout, and only as needed for them to do so:
| Provider | What it does | Data involved |
|---|---|---|
| Stripe | Payment processing, subscriptions, and tax. Stripe may act as merchant of record for some purchases (Stripe Managed Payments). | Payment details, email, billing info, transaction details |
| Cloudflare (Workers and storage) | Hosts our license server and stores license and waitlist records | License key, device identifier, email, plan, status, waitlist emails, basic request logs |
| Resend | Sends license and transactional emails | Email address, email content (such as your license key) |
Where Stripe acts as merchant of record, Stripe is also responsible for its own handling of your information under the Stripe Privacy Policy. The API providers your keys belong to (contacted directly by the App during the daily key check) are not our service providers. Your relationship with them is governed by their own terms.
We may also disclose information if required by law, to protect our rights or the safety of others, or as part of a merger, acquisition, or sale of assets. In that case, the new owner would remain bound by this policy for information collected under it.
6. How long we keep information
- License and purchase records: kept while your license is active, plus up to 7 years afterward for tax and accounting purposes.
- Waitlist emails: kept until KeyScout launches or until you unsubscribe or ask us to delete them, whichever comes first.
- Server logs (such as IP address and App version from check-ins): kept for up to 30 days.
- Support emails: kept as long as needed to help you.
7. Security
We use reasonable technical and organizational measures to protect the limited information we hold, including encrypted connections (HTTPS) between the App and our servers. No system is perfectly secure, and the security of your local vault also depends on the security of your device.
8. Your choices and rights
- Access, correction, deletion: You may ask us for a copy of the personal information we hold about you, or ask us to correct or delete it. Note that deleting your license record may deactivate your license.
- Emails: You can unsubscribe from waitlist or marketing emails at any time. We may still send essential service emails about your license or purchase.
- Your vault: You control your local vault completely, and can delete it by removing the App and its data from your device.
Depending on where you live (for example, the EU/UK or certain U.S. states such as California), you may have additional rights under local law, including the right to object to or restrict processing, data portability, and the right to complain to a data protection authority. To make a request, email [email protected]. We may need to verify your identity, for example by confirming your purchase email, before acting on a request. We will not discriminate against you for exercising your rights.
9. International users
We are based in the United States, and our service providers may process information in the United States and other countries. By using the Services, you understand that your information may be transferred to and processed in countries whose data-protection laws may differ from yours.
10. Children
KeyScout is intended for people 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us information, contact us and we will delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page, update the "Last updated" date, and announce material changes on the Site. Continuing to use the Services after changes take effect means you accept the updated policy.
12. Contact
SavvyTech Consult LLC
Email: [email protected]
Website: https://getkeyscout.com