← Keystone / Legal / Privacy

DRAFT — NOT YET IN EFFECT. Working draft for attorney review before launch (GDPR + US state privacy laws; Polar is merchant of record for EU/US tax and payment data). Not legal advice.

Keystone Privacy Policy

Draft v0.1 · 2026-07-01 · Steinforth Studio

The short version: Keystone is local-first. Your projects are processed on your machine and never sent to us. We hold the minimum needed to run accounts and licenses — basically your email — and we never train models on your data.

1. What we collect, and why

Data	Where it lives	Why
Account email + purchase records	Polar (merchant of record)	Account, checkout, invoices, VAT/sales tax, subscription management
License records (key, tier, activations, machine fingerprints)	Keygen (licensing service)	Issue and validate licenses, enforce seat/activation limits
Waitlist / contact-form email	Netlify Forms + Resend	Launch and product emails you asked for; unsubscribe anytime
Support emails	Our mailbox	Answering you
Opt-in telemetry (feature usage, crash diagnostics)	Only if you turn it on	Improving the product; excludes project content by default

2. What we deliberately do NOT collect

Your project files. Drawings, models, site data, documents, and generated deliverables are processed and stored locally on your machine.
Your API keys. Model keys (Claude, OpenAI, Gemini, OpenRouter, etc.) are stored locally on your machine and used directly against the provider. They never transit our servers.
Training data. We do not train global or shared AI models on customer data. Ever, unless you sign a separate written data license.
Payment card data. Handled entirely by Polar and its payment processors; we never see card numbers.

3. Third-party AI and data providers

When you run agents, the Software sends the relevant prompt/context directly from your machine to the provider you configured (e.g. Anthropic, OpenAI, Google, OpenRouter) under your own account and their privacy terms. Free public data sources (OpenStreetMap, FEMA, USGS, PVGIS, Bing imagery, etc.) receive the site coordinates needed to answer the query. Choose providers whose terms fit your firm's confidentiality obligations.

4. Telemetry — opt-in, content-free

Telemetry is off by default. If you opt in at first run (or later in settings), we receive anonymous feature-usage events and crash diagnostics. Telemetry excludes project content by default: no addresses, prompts, drawings, file names, or client information. Opting out never limits the product.

5. Legal bases & your rights

We process account and license data to perform our contract with you; marketing emails only with consent. Depending on your location (GDPR, UK GDPR, US state laws) you may have rights to access, correct, export, or delete your personal data, and to object to processing. Write to us and we will action it with our processors (Polar, Keygen, Resend, Netlify). [ATTORNEY: confirm controller/processor roles with Polar as MoR, DPA links, retention schedule, and EU representative requirement.]

6. Retention & security

Purchase and tax records are retained as required by law (held by Polar). License records persist while your license exists. Waitlist data is deleted on unsubscribe. All processor connections use TLS; local app data stays in your OS user directory under your machine's protections.

7. Changes & contact

We will post changes here with a new date, and email account holders about material changes. Contact: steinforthstudio@gmail.com · Steinforth Studio · steinforthstudio.com

Keystone EULA · Product