Keystroke procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Keystroke processes your personal data for the purposes described in this Privacy Policy on servers located in various jurisdictions, including in the United States. While data protection laws vary by country, we apply the protections outlined in this policy to your personal data regardless of where it is processed, and we only transfer data in accordance with legally valid transfer mechanisms. For users in the European Economic Area (“EEA”), when you access the Service, your personal data may be transferred to our United States servers or to other countries outside the EEA and the UK. Where information is transferred outside the EEA or the UK, we require an adequate level of data protection.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ You may disconnect Connected Services at any time through the Service interface. Upon disconnection, Keystroke will cease issuing requests to the Connected Service and will delete stored credentials within a reasonable timeframe. Cached metadata and prior run history may be retained for a limited period as described in our Privacy Policy .” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Keystroke may suspend or terminate access to the Service, including fee-based portions of the Service, for any account for which any amount is due but unpaid. In addition to the amount due for the Service, a delinquent account will be charged with fees or charges incidental to any chargeback or collection of any unpaid amount, including collection fees. If your payment method is no longer valid at the time a renewal Subscription Fee is due, Keystroke reserves the right to delete your account and any information associated with your account without any liability to you.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ Keystroke retains your personal data only for as long as necessary to operate the Service effectively and to support legitimate business needs such as legal compliance, safety, dispute resolution, and enforcement of our agreements. The appropriate retention period varies depending on the purpose for which the personal data was collected, its sensitivity, potential risks associated with its use or exposure, and any applicable legal requirements. Your settings may also influence how long we keep certain types of data. For instance, some temporary interactions with the Service may not appear in your run history and could be stored for a limited duration for purposes related to safety and system monitoring. When personal data is no longer needed, Keystroke and its service providers follow procedures to delete, erase, de-identify, or anonymize it in compliance with applicable laws.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ The Service may include or incorporate optional third-party services, including without limitation extensions, plug-ins, MCP servers, and integrations that you may install yourself (“Third-Party Services”). Keystroke will clearly indicate such content or features as Third-Party Services via prominent notices or descriptions in the Service. If you elect, in your sole discretion, to access or use a Third-Party Service, your access and use of the Third-Party Service is subject to the terms provided by that Third-Party Service, and you remain responsible for complying with those terms. Keystroke does not make any representations or warranties with respect to Third-Party Services.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ To facilitate payment for the Service via bank account, credit card, or debit card, we use Stripe, Inc. and its affiliates (“Stripe”), a third-party payment processor. These payment-processing services are provided by Stripe and are subject to the Stripe terms and conditions and other policies available at stripe.com/legal and Stripe's Global Privacy Policy at stripe.com/privacy (collectively, the “Stripe Agreements”). By agreeing to these Terms, users that use the payment functions of the Service also agree to be bound by the Stripe Agreements, as the same may be modified by Stripe from time to time. You hereby authorize Stripe to store and continue billing your specified payment method even after such payment method has expired, to avoid interruptions in payment for your use of the Service. Please contact Stripe for more information. Keystroke assumes no liability or responsibility for any payments you make through the Service.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Other users and third parties you share information with. Certain features of the Service let you share Inputs, Outputs, agents, workflows, or other resources with teammates, organizations, or third-party applications. Any information you voluntarily share is subject to the recipients' respective terms and privacy practices. With your consent. We may disclose personal data when you give us permission to do so, including through features of the Service designed to share information. Subprocessors. For commercial uses of the Service where Keystroke acts as a data processor, a current list of the third parties we engage as subprocessors is available on request at [email protected] .” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may disclose your personal data in the following circumstances: Service providers and business partners. We disclose personal data to third-party vendors that support our business operations and help us deliver and improve the Service — including cloud and hosting infrastructure providers, AI model providers, sandboxed code execution providers, analytics, customer support, safety monitoring, communications, payment processing, compliance services, and IT providers. These parties process personal data only as necessary to perform services on our behalf, consistent with our instructions and applicable law. AI model providers. To generate Outputs, we send the relevant portions of your Inputs (prompts, context, tool definitions, and similar) to third-party AI model providers. These providers process the data solely for inference and do not use it to train their models. See our Data Use & Privacy Overview for more detail. Connected services. When you authorize Keystroke to read from or write to a third-party service (for example via OAuth, installed apps, webhooks, or an MCP server), we exchange data with that service on your behalf. The third party's own terms and privacy policy govern its use of the data once it reaches their systems. Business transfers. In the event of a merger, acquisition, restructuring, bankruptcy, or other corporate transaction, personal data may be disclosed to counterparties and advisers as part of due diligence or transferred as part of the transaction. ” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ The Service lets you connect external services — including SaaS applications, APIs, MCP servers, source-control systems, messaging platforms, databases, and other third-party infrastructure (collectively, “Connected Services”) — so that your agents and workflows can read, write, or otherwise act on data in those systems on your behalf.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Legal compliance and protection of rights. We may disclose personal data to government authorities or other third parties if we believe doing so is necessary to: (i) comply with applicable laws, regulations, or legal processes; (ii) respond to lawful requests or investigations; (iii) protect the safety, rights, or property of any person; (iv) prevent fraud, security incidents, or other unlawful activity; (v) enforce our Terms of Service or other legal rights; or (vi) protect Keystroke against legal liability. Affiliates. We may share personal data with affiliates — entities that control, are controlled by, or are under common control with us. They may use personal data in a manner consistent with this Privacy Policy. Other third-party services and integrations. The Service may include integrations with or links to third-party websites, applications, or services. If you choose to interact with these third parties, your personal data may be disclosed to them directly and is governed by their own terms and privacy policies. Our linking or integrating with a third party does not imply endorsement or affiliation. Business account administrators. If you create an account using an email associated with an organization (for example, your employer), we may disclose account-related information — such as your email address and account status — to that organization. If you're part of a business or enterprise account, administrators may access and manage your use of the Service, including any Inputs, Outputs, and integration data you produce in that account. ” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ Keystroke reserves the right to determine pricing for the Service. Keystroke will make reasonable efforts to keep pricing information published on the Service up to date. We encourage you to check our pricing page periodically for current pricing. Keystroke may change the fees for any feature of the Service, including additional fees or charges, if Keystroke gives you advance notice of changes before they apply through the Service user interface, a pop-up notice, email, or other reasonable means. Your continued use of the Service after the price change becomes effective constitutes your agreement to pay the changed amount. You will be responsible for all taxes associated with the Service, other than taxes based on Keystroke's net income. Keystroke, at its sole discretion, may make promotional offers with different features and different pricing to any of its customers. These promotional offers, unless made to you, will not apply to your offer or these Terms.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ You may purchase additional products, services, or features that are not individually essential for the functioning of the Service but that Keystroke makes available to its users for enhanced capabilities on a supplemental basis, including usage-based pricing features described in the Service (“Add-Ons”). Add-Ons are deemed part of the Service and governed by these Terms. Fees for Add-Ons include our model- and usage-based pricing features, as described in the Service.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ The Service may include subscription-based plans with automatically recurring payments for periodic charges (each, a “Subscription Service”). The “Subscription Billing Date” is the date when you purchase your first subscription to the Service. The Subscription Service will begin on the Subscription Billing Date and continue for the subscription period that you select on your account (such period, the “Initial Subscription Period”), and will automatically renew for successive periods of the same duration as the Initial Subscription Period (each, a “Subscription Period”) unless you cancel the Subscription Service or we terminate it. If you activate a Subscription Service, you authorize Keystroke or its third-party payment processors to periodically charge, on a going-forward basis and until cancellation of the Subscription Service, all accrued sums on or before the payment due date. Information on the recurring fee charged by Keystroke for access to the Subscription Service during each Subscription Period (the “Subscription Fee”) is available on our pricing page or otherwise described in the Service. Your account will be charged automatically on the Subscription Billing Date and thereafter on the renewal date of your Subscription Service for all applicable fees and taxes for the next Subscription Period. You must cancel your Subscription Service at least 24 hours before it renews in order to avoid billing of the next periodic Subscription Fee to your account. ” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “Keystroke or its third-party payment processor will bill the periodic Subscription Fee to the payment method associated with your account. You may cancel the Subscription Service by using the cancellation functionality made available in your billing menu or by contacting us at [email protected] . YOUR CANCELLATION MUST BE RECEIVED BEFORE THE RENEWAL DATE IN ORDER TO AVOID CHARGE FOR THE NEXT SUBSCRIPTION PERIOD.” | Captured 2026-09-25Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.