Workflow & Automation · keye.coKeye
Graded against 811 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
No lens is bandable yet — banding requires fully verified documents with on-criteria findings. The gap is shown honestly, never estimated.
“in developing, improving, or promoting our Services, including when we train our models. This may include the processing of Account Information, Content, Social Information, and Technical Information. See here for instructions on how you can opt out of our use of your information to train our models.”
Partially verified: Privacy Policy assessed. Everything below comes only from what was read in full.
Watch: Privacy and data use
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Defines the scope of the Privacy Policy, identifies the covered entity ('Keye, Inc.' and affiliates), and establishes that the policy governs collection and use of Personal Information when users interact with Services; also incorporates the Terms of Use and Master Services Agreement as forming the entire agreement.
Extends the aggregated-data clause to permit use of such data for business analysis, marketing, and sharing with partners or clients, characterizing it as no longer personal information and grounding it in legitimate interests.
Grants individuals the right to receive their personal information in a transferable format and have it transferred to a third party (data portability right).
How to read this page: Overall risk rates what Keye's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Partially verified — Privacy Policy — Verified (read in full, 102 findings). Findings below are from fully-read, verified documents only; remaining core documents are pending capture.
Terms not yet captured
AIRIN has not yet captured a gate-verified Terms of Service document for this platform.
- Privacy PolicyVerified - read in full - 102 citationsstaticLast captured 2026-07-21
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Introduces contractual-obligations processing, permitting use of personal information to manage contracts, invoicing, and support for clients and business partners based on contract performance.
" • Contractual Obligations: If you are a client or business partner, we may use your"
Continues contractual-obligations clause and adds a fraud-prevention and security use case, permitting monitoring of account activities and security measures based on legitimate interests to protect service integrity.
" personal information to fulfill our contractual obligations, including managing contracts, invoicing, and providing support as agreed upon in our business relationship. The lawful basis for this processing is the perfor..."
Extends the aggregated-data clause to permit use of such data for business analysis, marketing, and sharing with partners or clients, characterizing it as no longer personal information and grounding it in legitimate interests.
" create statistical or research reports, which do not personally identify you. This information may be used for business analysis, marketing, and sharing with partners or clients. The lawful basis for processing aggregat..."
Grants individuals the right to be free from discrimination for exercising any of their privacy rights.
" • The right to be free from discrimination relating to the exercise of any of your privacy"
Obliges the company to implement commercially reasonable technical, administrative, and organizational measures to protect Personal Information from loss, misuse, unauthorized access, disclosure, alteration, or destruction, while simultaneously disclaiming responsibility for the security of internet and email transmissions and for circumvention of security measures.
" We implement commercially reasonable technical, administrative, and organizational measures to protect Personal Information both online and offline from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. Howev..."
Commits the company to implementing commercially reasonable security measures for Personal Information but disclaims liability for security failures inherent to internet and email transmission, and disclaims responsibility for circumvention of privacy or security measures on the service.
" We implement commercially reasonable technical, administrative, and organizational measures to protect Personal Information both online and offline from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. Howev..."
Grants a conditional permission to share personal information with business partners and affiliates when necessary for contract performance, service provision, or legitimate business interests such as co-branded services.
" our business partners and affiliates, but only when it is necessary for the performance of a contract, the provision of services, or as part of a legitimate business interest. For example, we may share data with a partner org..."
Grants permission to share personal information with an acquiring entity in a merger, acquisition, or sale, based on legitimate interests, with a commitment to keep data protected under this privacy policy.
" business, the sharing of personal information with the acquiring entity or parties involved in the transaction may be based on legitimate interests, as it's necessary for the legitimate interests pursued by us or the acquirin..."
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
" in developing, improving, or promoting our Services, including when we train our models. This may include the processing of Account Information, Content, Social Information, and Technical Information. See here for instructions on how you can opt out of our use of your information to train our models."
Asserts legitimate interests as the legal basis for training the company's models using user data including Account Information, Content, Social Information, and Technical Information, and references an opt-out mechanism, indicating users can limit this use — partially user-favorable in that an opt-out exists.
AI-generated interpretation, not legal advice.
" Keye, Inc. (together with our affiliates, “Keye”, “we”, “our” or “us”) respect your privacy and are committed to keeping secure any information we obtain from you or about you. This Privacy Policy describes our practices with respect to Personal Information we collect from or about you when you use our website, applications, and services (collectively, “Services”). Our privacy policy (“Privacy Policy”), the Terms of Use, and, as applicable, the Master Services Agreement between us and your employer comprise the entire agreement governing access to and use of the Website and Software (collectively, the “Agreement”). By visiting our website or using the Software, you agree to the Agreement. If your employer entered into an MSA with us, then you represent that you are an authorized user of the Website and the Software and will abide by the terms of the Agreement. Capitalized terms not defined in this policy shall have the meaning set forth in our Terms of Use. Any person accessing, browsing, or otherwise using our website or Software, either manually or via an automated device or program, is a “User” for purposes of this Notice."
Defines the scope of the Privacy Policy, identifies the covered entity ('Keye, Inc.' and affiliates), and establishes that the policy governs collection and use of Personal Information when users interact with Services; also incorporates the Terms of Use and Master Services Agreement as forming the entire agreement.
AI-generated interpretation, not legal advice.
" create statistical or research reports, which do not personally identify you. This information may be used for business analysis, marketing, and sharing with partners or clients. The lawful basis for processing aggregated and anonymized data is legitimate interests and the fact that this data is no longer considered personal information."
Extends the aggregated-data clause to permit use of such data for business analysis, marketing, and sharing with partners or clients, characterizing it as no longer personal information and grounding it in legitimate interests.
AI-generated interpretation, not legal advice.
" • Transfer your Personal Information to a third party (right to data portability)."
Grants individuals the right to receive their personal information in a transferable format and have it transferred to a third party (data portability right).
AI-generated interpretation, not legal advice.
" The Service may contain links to other websites not operated or controlled by Keye, including social media services (“Third Party Sites”). The information that you share with Third Party Sites will be governed by the specific privacy policies and terms of service of the Third Party Sites and not by this Privacy Policy. By providing these links we do not imply that we endorse or have reviewed these sites. Please contact the Third Party Sites directly for information on their privacy practices and policies."
Disclaims responsibility for the privacy practices of third-party sites linked from the service, clarifying that information shared with those sites is governed by their own policies and not this Privacy Policy, and that providing links does not constitute endorsement.
AI-generated interpretation, not legal advice.
" We may share your personal information with third-party service providers who assist us in delivering our products and services. These service providers may include [[service providers (e.g., cloud hosting providers, payment processors, customer support tools, customer relationship management systems, analytics providers, and security services)]]. We will only share the minimum necessary data required for them to perform their specific tasks. All service providers are contractually obligated to: Process personal data only for the purpose of providing the agreed-upon services and not for their own benefit. Implement appropriate technical and organizational security measures to protect personal data. Comply with applicable data protection laws (e.g., GDPR, CCPA) and relevant security standards. If we transfer personal data outside of legally recognized jurisdictions (e.g., the EU/EEA), we ensure that appropriate safeguards, such as Standard Contractual Clauses (SCCs) or Data Processing Agreements (DPAs), are in place. The lawful basis for sharing data with service providers is typically the performance of a contract or, in some cases, legitimate interests, provided that these interests do not override your data protection rights. "
Establishes obligations on third-party service providers, including limiting data sharing to the minimum necessary and contractually requiring providers to process personal data only for agreed-upon service purposes, which is protective of users by restricting secondary use.
AI-generated interpretation, not legal advice.
" our business partners and affiliates, but only when it is necessary for the performance of a contract, the provision of services, or as part of a legitimate business interest. For example, we may share data with a partner organization involved in co-branded events or services. Sharing data with business partners and affiliates may be necessary for the performance of a contract or based on legitimate interests, especially when these partnerships are essential for delivering integrated or co-branded services."
Grants a conditional permission to share personal information with business partners and affiliates when necessary for contract performance, service provision, or legitimate business interests such as co-branded services.
AI-generated interpretation, not legal advice.
" have provided your explicit consent for such sharing. We will always request your consent before sharing your data for specific purposes. If you have provided explicit consent for sharing your personal information with specific third parties, the lawful basis for sharing is your consent."
Grants permission to share personal information with third parties only upon the user's explicit prior consent, establishing consent as the lawful basis and requiring consent before each such sharing.
AI-generated interpretation, not legal advice.
" In certain circumstances we may provide your Personal Information to third parties without further notice to you, unless required by the law: "
Grants a permission to disclose personal information to third parties without further notice to the user in certain circumstances unless required by law, which is a user-impactful disclosure right for the operator.
AI-generated interpretation, not legal advice.
" To assist us in meeting business operations needs and to perform certain services and functions, we may provide Personal Information to vendors and service providers, including providers of hosting services, cloud services, and other information technology services providers, email communication software, and web analytics services, among others. Pursuant to our instructions, these parties will access, process, or store Personal Information only in the course of performing their duties to us. "
Establishes an obligation that vendors and service providers may only access, process, or store personal information in the course of performing their duties pursuant to the operator's instructions, restricting secondary use and protecting users.
AI-generated interpretation, not legal advice.
" We may share your Personal Information, including information about your interaction with our Services, with government authorities, industry peers, or other third parties (i) if required to do so by law or in the good faith belief that such action is necessary to comply with a legal obligation, (ii) to protect and defend our rights or property, (iii) if we determine, in our sole discretion, that there is a violation of our terms, policies, or the law; (iv) to detect or prevent fraud or other illegal activity; (v) to protect the safety, security, and integrity of our products, employees, or users, or the public, or (vi) to protect against legal liability. "
Grants a broad permission to share personal information with government authorities, industry peers, or third parties for legal compliance, rights protection, policy-violation enforcement, fraud prevention, or safety and security purposes, based on multiple enumerated grounds.
AI-generated interpretation, not legal advice.
" We may disclose Personal Information to our affiliates, meaning an entity that controls, is controlled by, or is under common control with Keye. Our affiliates may use the Personal Information we share in a manner consistent with this Privacy Policy. "
Grants permission to disclose personal information to affiliates, with a restriction that affiliates must use such information consistently with this privacy policy.
AI-generated interpretation, not legal advice.
" • Business Partners and Affiliates: In some cases, we may share personal information with"
Introduces the business-partners-and-affiliates sharing category, permitting data sharing when necessary for contract performance, service provision, or legitimate business interest.
AI-generated interpretation, not legal advice.
" • With Your Consent: We may share your personal information with third parties if you"
Permits sharing of personal information with third parties where explicit user consent has been obtained, requiring that consent be requested before sharing for specific purposes.
AI-generated interpretation, not legal advice.
" Keye does not knowingly collect Personal Information from children under the age of 13. If you have reason to believe that a child under the age of 13 has provided Personal Information to Keye through the Service, please email us at contact@keye.co. We will investigate any notification and if appropriate, endeavor to delete the Personal Information from our systems. If you are 13 or older, but under 18, you must have consent from your parent or guardian to use our Services."
Restricts the collection of Personal Information from children under 13, commits to investigating and deleting such data if inadvertently collected, and conditions use of the service by users aged 13–17 on obtaining parental or guardian consent — protective of minors' data.
AI-generated interpretation, not legal advice.
" We collect Personal Information that is included in Software input and prompts, 3rd party data, data file uploads, and feedback that you and other users provide to our Services. "
States that the company collects Personal Information contained in software inputs, prompts, third-party data, file uploads, and user feedback, establishing the company's data collection practices over user-submitted prompt content.
AI-generated interpretation, not legal advice.
" You can exercise these rights by sending your request to contact@keye.co "
Specifies the procedure for exercising the privacy rights listed above, directing individuals to submit requests to a designated email address.
AI-generated interpretation, not legal advice.
" We collect personal information relating to you (“Personal Information”) as follows:"
Introduces and defines the term 'Personal Information' as information relating to the user, setting the scope for subsequent data collection disclosures.
AI-generated interpretation, not legal advice.
Common questions about Keye's policies
- Does Keye train its AI models on your data?
- Training possible — conditions or opt-outs apply — based on 1 verified finding from Keye's published policy. Informational only, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Keye's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
0 verified clausesClauses in Keye's policies that work in your favour — commitments the platform made to you.
No protective clause has been verified in Keye's published policies yet. That means we did not find one in the documents we read — not that the platform offers nothing.
📋 Rules you must follow
0 verified clausesWhat Keye requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
No user-conduct rule has been verified in Keye's published policies yet.
What the policies actually cover
0 topicsNone of Keye's verified clauses has been assigned a topic yet. The clause-trust review has not reached this platform's findings.
Cross-clause notes
Two verified clauses intersect on the same subject matter: the Privacy Policy, § 9 (Security and Retention) addresses how long content is retained, and the Privacy Policy, Privacy Policy › “Legal Basis for Processing” addresses use of content in connection with model training or service improvement. Both clauses are in force at the same time — read them together.
Automated cross-reference against the published rubric — not legal advice.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause permits sale of personal data or information.
“rights. We don’t “sell” Personal Information or “share” Personal Information for cross-contextual behavioral advertising (as those terms are defined under applicable local law). We also don’t process sensitive Personal Information for the purposes of inferring characteristics about a consumer.”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“have provided your explicit consent for such sharing. We will always request your consent before sharing your data for specific purposes. If you have provided explicit consent for sharing your personal information with specific third parties, the lawful basis for sharing is your consent.”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“The Service may contain links to other websites not operated or controlled by Keye, including social media services (“Third Party Sites”). The information that you share with Third Party Sites will be governed by the specific privacy policies and terms of service of the Third Party Sites and not by this Privacy Policy. By providing these links we do not imply that we endorse or have reviewed these sites. Please co...”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“We may share your personal information with third-party service providers who assist us in delivering our products and services. These service providers may include [[service providers (e.g., cloud hosting providers, payment processors, customer support tools, customer relationship management systems, analytics providers, and security services)]]. We will only share the minimum necessary data required for them to ...”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“• Business Partners and Affiliates: In some cases, we may share personal information with”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | confidentiality | conditional | MEDIUM | 1 |
| All applicable tiers | privacy data use | worsens | HIGH | 8 |
| All applicable tiers | subprocessors data sharing | conditional | MEDIUM | 5 |
| All applicable tiers | training use | conditional | MEDIUM | 1 |
| Government | privacy data use | conditional | MEDIUM | 1 |
| Government | subprocessors data sharing | conditional | MEDIUM | 1 |
| Standard | privacy data use | conditional | MEDIUM | 1 |
| Standard | subprocessors data sharing | conditional | MEDIUM | 1 |
| Team / Business | privacy data use | conditional | MEDIUM | 3 |
| Team / Business | subprocessors data sharing | conditional | MEDIUM | 3 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
data sharing improved from high/sale or sell to medium/third party or vendor sharing.
“rights. We don’t “sell” Personal Information or “share” Personal Information for cross-contextual behavioral advertising (as those terms are defined under applicable local law). We also don’t process sensitive Personal Information for the purposes of inferring characteristics about a consumer.”Before citation
“The Service may contain links to other websites not operated or controlled by Keye, including social media services (“Third Party Sites”). The information that you share with Third Party Sites will be governed by the specific privacy policies and terms of service of the Third Party Sites and not by this Privacy Policy. By providing these links we do not imply that we endorse or have reviewed these sites. Please contact the Third Party Sites directly for information on their privacy practices and policies.”After citation
Latest stance: third party or vendor sharing on confidentiality
“The Service may contain links to other websites not operated or controlled by Keye, including social media services (“Third Party Sites”). The information that you share with Third Party Sites will be governed by the specific privacy policies and terms of service of the Third Party Sites and not by this Privacy Policy. By providing these links we do not imply that we endorse or have reviewed these sites. Please contact the Third Party Sites directly for information on their privacy practices and policies.”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“The Service may contain links to other websites not operated or controlled by Keye, including social media services (“Third Party Sites”). The information that you share with Third Party Sites will be governed by the specific privacy policies and terms of service of the Third Party Sites and not by this Privacy Policy. By providing these links we do not imply that we endorse or have reviewed these sites. Please contact the Third Party Sites directly for information on their privacy practices and policies.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“In certain circumstances we may provide your Personal Information to third parties without further notice to you, unless required by the law: ”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“We may share your personal information with third-party service providers who assist us in delivering our products and services. These service providers may include [[service providers (e.g., cloud hosting providers, payment processors, customer support tools, customer relationship management systems, analytics providers, and security services)]]. We will only share the minimum necessary data required for them to perform their specific tasks. All service providers are contractually obligated to: Process personal data only for the purpose of providing the agreed-upon services and not for their own benefit. Implement appropriate technical and organizational security measures to protect personal data. Comply with applicable data protection laws (e.g., GDPR, CCPA) and relevant security standards. If we transfer personal data outside of legally recognized jurisdictions (e.g., the EU/EEA), we ensure that appropriate safeguards, such as Standard Contractual Clauses (SCCs) or Data Processing Agreements (DPAs), are in place. The lawful basis for sharing data with service providers is typically the performance of a contract or, in some cases, legitimate interests, provided that these interests do not override your data protection rights. ”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-07-21· verified 2026-07-20verified once — not yet re-verified
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
985 findings first captured First scan: July 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Keye's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Know where the missing document lives?
We haven't yet verified Keye's Terms of Service. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.
Every finding above is a verbatim quote from Keye's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.