Privacy Policy

Last updated: August 9, 2025

1. Introduction

Welcome to KeywordForge ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our AI-powered keyword research service.

2. Information We Collect

2.1 Account Information

When you create an account through our authentication provider (Clerk), we collect:

  • Email address
  • Account creation date
  • Authentication tokens
  • User ID (generated by Clerk)

2.2 Content You Provide

When you use our service, we process:

  • Video topics or transcripts you submit for keyword analysis
  • Video IDs you provide for organization purposes
  • Generated keyword results and usage patterns

2.3 Usage Data

We automatically collect certain information about your use of our service:

  • Daily usage counts (number of keyword analyses performed)
  • Timestamp of requests
  • IP addresses (for rate limiting and security)
  • Browser and device information
  • Service performance and error logs

2.4 Technical Data

Our service runs on Cloudflare Workers and may collect:

  • Request headers and metadata
  • Performance metrics
  • Error logs and debugging information

3. How We Use Your Information

We use the information we collect to:

  • Provide our service: Process your content and generate keyword suggestions
  • Enforce usage limits: Track daily usage for free and paid plans
  • Improve our service: Analyze usage patterns to enhance functionality
  • Ensure security: Prevent abuse and protect our systems
  • Communicate with you: Send important service updates (rare)
  • Comply with legal obligations: As required by applicable laws

4. Third-Party Services

4.1 Authentication (Clerk)

We use Clerk for user authentication and account management. Clerk processes your email address and authentication data according to their privacy policy. We do not store your passwords.

4.2 AI Processing (OpenAI and Claude)

Your content is processed by AI services (OpenAI and Claude) to generate keyword suggestions. We send only the content you submit - no personal information is included in these requests.

4.3 Infrastructure (Cloudflare)

Our service runs on Cloudflare Workers, which may process technical data for performance and security purposes according to Cloudflare's privacy policy.

5. Data Storage and Retention

5.1 Content Storage

  • Your submitted content is not permanently stored on our servers
  • Generated results may be temporarily cached for performance (up to 24 hours)
  • Usage tracking data is stored to enforce daily limits

5.2 Retention Periods

  • Usage data: Automatically deleted after 24 hours
  • Account data: Retained until account deletion
  • Cached results: Automatically expire within 24 hours
  • System logs: Retained for up to 30 days for security and debugging

6. Data Security

We implement appropriate security measures to protect your information:

  • HTTPS encryption for all data transmission
  • Secure token-based authentication
  • Regular security monitoring and updates
  • Limited access to personal data on a need-to-know basis
  • Industry-standard security practices for our infrastructure

7. Your Privacy Rights

Depending on your location, you may have the following rights:

  • Access: Request information about the personal data we hold about you
  • Correction: Request correction of inaccurate personal data
  • Deletion: Request deletion of your personal data
  • Portability: Request a copy of your data in a portable format
  • Objection: Object to certain processing of your personal data

7.1 Exercising Your Rights

To exercise these rights:

  • Account deletion can be done through your account settings
  • For other requests, contact us using the information provided below
  • We will respond to valid requests within 30 days

8. Cookies and Tracking

KeywordForge uses minimal cookies and local storage for:

  • Authentication session management (via Clerk)
  • User preference storage (theme settings)
  • Basic functionality and security

We do not use tracking cookies for advertising or analytics purposes.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place when transferring data internationally, including:

  • Using services with appropriate privacy certifications
  • Implementing contractual protections
  • Following applicable data protection regulations

10. Children's Privacy

Our service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected and how it's used
  • Right to delete personal information
  • Right to opt-out of the sale of personal information (we do not sell personal information)
  • Right to non-discrimination for exercising CCPA rights

12. European Union Privacy Rights (GDPR)

If you are in the European Union, we process your personal data under the following legal bases:

  • Contract performance: To provide our service as agreed
  • Legitimate interests: To improve our service and prevent abuse
  • Legal compliance: To comply with applicable laws
  • Consent: Where explicitly given for specific purposes

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the updated policy on this page
  • Updating the "Last updated" date
  • For material changes, providing additional notice through our service

14. Contact Information

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

15. Data Controller

For the purposes of data protection law, KeywordForge (operated by Viraj Shoor) is the data controller of your personal information.

This privacy policy is effective as of August 9, 2025.