We collect information you provide directly, such as your name and email address when you create an account. If you sign in with Google or GitHub, we receive your name and email address from that provider. We also automatically collect usage data — pages visited, tool operations performed, AI assistant usage, session duration, and general device/browser information — to help us improve the platform. Anonymous visitors are identified by a short-lived UUID stored in the `kl_anon` cookie and an HMAC of the IP address; these are not linked to personal identity unless you create an account, at which point past anonymous activity in the same session is associated with your user record. KeyLab is currently free, so we do not collect payment information; if paid plans are introduced, billing data will be handled directly by our payment processors and not stored on our servers.
We use your information to: (a) provide, maintain, and improve our services; (b) create and secure your account and verify your email; (c) send service-related communications such as account confirmations and security alerts; (d) analyze usage patterns to improve the user experience; and (e) ensure the security and integrity of our platform. We send marketing or product-update emails only if you explicitly opt in during registration; this consent is separate from the service itself, and you can withdraw it or unsubscribe at any time without losing access. We do not sell or rent your personal data, and we do not share it with third parties for their own marketing purposes.
Your data is stored securely on servers located in Brazil. We employ industry-standard security measures including TLS/SSL encryption for data in transit, encrypted storage for sensitive credentials, access controls, and regular security audits. Operation history and HSM session data are stored only for authenticated users and can be deleted at any time through your account settings.
We use essential cookies for authentication and session management (httpOnly, secure, SameSite). For product analytics we use a `kl_anon` cookie (30 days, anonymous UUID) to recognise returning visitors and join in-app events, plus Google Analytics 4 (GA4) for usage statistics. Analytics cookies and the `kl_anon` identifier are only activated after you explicitly consent through our cookie banner. If you decline, we collect only anonymous, aggregate tool-usage counts — no cookie, no IP address, no identifier and no link to you or your account — so we can see which tools are used; nothing that could identify you or your location is collected, and the service functions normally. You can change your cookie preferences at any time by clearing your browser's local storage for this site.
We integrate with the following third-party services: (a) Google and GitHub for optional single sign-on — if you choose to sign in with them, we receive your name and email address, subject to their respective privacy policies; (b) Google Analytics 4 for anonymised usage analytics, subject to your cookie consent — its privacy policy applies to data collected through this service; (c) Anthropic for the AI assistant (only when you actively send a message) — prompts are processed by Anthropic's API and are subject to their privacy policy; and (d) if paid plans are introduced in the future, payment processors such as Stripe and Asaas will handle billing directly, and we will not store card details on our servers. No personal data is shared with third parties beyond what is strictly necessary to operate these services.
Under the Brazilian General Data Protection Law (LGPD) and the European General Data Protection Regulation (GDPR), you have the right to: (a) access your personal data; (b) correct inaccurate data; (c) request deletion of your data; (d) export a copy of your data in a portable format; (e) withdraw consent for analytics cookies at any time; (f) object to or restrict processing of your data; and (g) file a complaint with a supervisory authority (ANPD in Brazil, or your local DPA in the EU). You can exercise these rights through your account settings or by contacting us directly.
For privacy-related questions, data access requests, or to exercise any of your rights, contact us at thiago@keylab.cloud. We will respond to your request within 15 business days.
Last updated: 2026-06-15