Kepsake Privacy Policy
Last updated: August 5, 2026
1. Who processes your data
Data controller: Volodymyr Viktorovych Kovalchuk, an individual entrepreneur (ФОП) registered in Ukraine, based in Dnipro, Ukraine. Privacy contact — support@kepsake.com.
2. What data we collect
- Account data: email, name (via Clerk on sign-up/sign-in).
- Content: photos you upload, and metadata about them (upload date, AI selection status, album title).
- Usage data: technical information about how you use the Service (for debugging), Google Analytics 4 page-view and usage data across the site and product, session recordings and interaction data via Microsoft Clarity across the site, plus advertising identifiers and browsing data collected via Meta Pixel across the site (and Google Ads tracking when enabled — see Cookies below).
- Premium subscription payment data is processed by Paddle — we don't store card numbers; see Paddle's Buyer Terms & Privacy Notice (paddle.com/legal) for details.
3. Why we collect it
To provide the Service (storing and displaying albums), to curate albums using AI, to process Premium payments, to respond to support requests, to improve AI selection quality, to understand how the Service is used (Google Analytics 4, Microsoft Clarity), and to measure and optimize our advertising (Meta Pixel, Google Ads).
4. Who we share data with
To run the Service, we use the following providers (sub-processors), who process data on our behalf:
- Clerk — authentication and account management.
- Cloudflare R2 — storage of uploaded photos.
- OpenRouter and the underlying model provider it routes to (currently Google, Gemini model) — processes photos for AI album curation. Photos are sent to this provider temporarily for analysis and aren't retained by them beyond their standard policy.
- Railway — hosting for the app and database.
- Paddle.com Market Ltd. — processes Premium subscription payments as Merchant of Record.
- Google — receives usage data via Google Analytics 4 (site-wide) to measure traffic and product usage; and, when enabled, advertising identifiers and browsing data via Google Ads tracking on marketing pages.
- Meta — receives advertising identifiers and browsing data via Meta Pixel tracking to measure and target ads (site-wide, including marketing and post-checkout pages).
- Microsoft — receives usage and interaction data via Microsoft Clarity (site-wide) to understand how visitors use the site (session recordings and heatmaps).
We don't sell your data to third parties.
5. International data transfers
The providers above may process data outside your home country. We rely on their own compliance safeguards (SOC 2, GDPR-alignment where applicable).
6. How long we keep data
For as long as your account is active. When you delete your account, photos and metadata are removed from our storage within 30 days.
7. Your rights
You can request access to, correction of, or deletion of your data by emailing support@kepsake.com. You can also delete an individual album or your whole account yourself in account settings.
8. Cookies
We use technical cookies required for authentication (via Clerk). We also use Google Analytics 4 across the site and product to measure traffic and usage, and Microsoft Clarity across the site to record sessions and heatmaps for product improvement. We use Meta Pixel across the site to measure ad performance, subscriptions, and show relevant ads; we may also use Google Ads tracking cookies for the same purpose when enabled. Where required by law, we'll ask for your consent to these non-essential cookies via a cookie banner before they're set.
9. Security
Photos are stored in a private bucket accessed via signed links; who can access an album is controlled by the privacy setting you choose.
10. Children
The Service isn't intended for anyone under 18 without a parent or guardian's consent. We don't knowingly collect data from children without such consent.
11. Changes to this policy
We may update this policy. We'll post material changes on the site or notify you by email.