Privacy Policy

1. Who we are

This website (www.keyorix.com) is operated by Keyorix S.L., a company registered in Spain ("Keyorix", "we", "us"). Keyorix S.L. is the controller of the personal data described in this policy. You can reach us about privacy at privacy@keyorix.com.

2. What this policy covers

This policy covers this website and the forms on it. The Keyorix software itself is self-hosted: when you run it, your secrets and data stay in your own infrastructure and are not sent to us. The software sends no telemetry and makes no license-check calls.

3. Information we collect

We only collect what you choose to send us through a form on this site:

• Your name, email address and, optionally, your company name
• Your message, and what you are interested in
• For Vault health scan requests, the optional report.json file you attach. It contains findings and configuration metadata about your Vault, never secret values.

We do not use analytics, advertising or tracking cookies. Our hosting provider records standard technical data (such as IP address, browser type and time of request) in its server logs to operate and secure the site.

4. Why we use it and our legal basis

• To answer your request and, if you ask for it, to prepare an offer or agreement (GDPR Art. 6(1)(b))
• To keep the website secure and running (our legitimate interest, Art. 6(1)(f))
• To send you occasional product updates, only if you have agreed to it (consent, Art. 6(1)(a)). You can withdraw consent at any time.

5. Service providers

We use a small number of providers who process data on our behalf:

• Netlify, Inc. hosts this website and processes form submissions. Netlify may process data in the United States; such transfers rely on the safeguards the GDPR requires, such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
• Google Fonts (Google LLC) delivers the fonts used on this site. Your browser requests them from Google's servers, which receive your IP address.

We do not sell or rent your personal data.

6. How long we keep it

We keep form submissions for as long as we need them to handle your request and any resulting business relationship, and delete them no later than 24 months after our last contact with you, unless the law requires us to keep them longer.

7. Your rights

You have the right to access, correct or delete your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time. To exercise these rights, email privacy@keyorix.com.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

8. Open-source contributions

Keyorix is an open-source project. If you contribute to our repositories or take part in our community on GitHub, your contributions and associated metadata (such as your GitHub username) become part of the public record under GitHub's own terms.

9. Changes to this policy

We may update this policy from time to time. We will post the new version on this page and update the "Last updated" date.