Privacy Policy
Last updated 28 October 2026.
Who we are
Keyrole (keyrole.ai and app.keyrole.ai) is run by KKN Ecommerce India OPC Private Limited, a company registered in India ("we", "us"). This policy explains what we collect, why, who helps us run the service, and the choices you have.
Whose data it is
Organisations use Keyrole to have AI employees prepare client work for their people to review. Two kinds of data are involved:
- Work data an organisation brings in: its clients, their emails, files, messages and records. We process it only on that organisation's behalf and on its instructions. The organisation decides what goes in and what it is used for. If you are a client of an organisation that uses Keyrole, please contact that organisation first; we will help it answer you.
- Account data about the people who sign in and run the organisation's account. For this we decide how it is used, as set out below.
What we collect
- Account: name, work email, initials, role and permissions, the organisation's name, country, time zone and, if given, its tax ID.
- Work data: client records and profiles; emails and attachments from a mailbox the organisation connects; files from a drive it connects; WhatsApp messages sent to a number it connects; documents uploaded; the work the AI employees prepare; and the reviews, sign-offs, comments and approvals on that work.
- Signatures: for documents signed through Keyrole, who signed, when, and a record that lets anyone check the signed copy has not changed.
- Billing: what was bought and when, and the invoices. Card and payment details are taken by Paddle, our payment provider; we do not see or keep them.
- Technical: logs of requests and errors, kept for security and to keep the service working.
How we use it
- To do the work an organisation sets up: read what comes in, prepare work, send the messages its people approve, and keep the audit trail of who did and approved what.
- To learn each organisation's way of working. What an AI employee learns (lessons, preferences, corrections) is kept for that organisation only and is never shared with, or used for, any other organisation.
- To sign people in, keep accounts secure, bill for credits and setup, and answer support requests.
- To send service emails (sign-in, alerts, invoices). We do not send marketing without your consent.
We do not sell personal data and do not use it for advertising.
AI processing
To do the work, parts of the work data are sent to AI model providers, mainly Anthropic (Claude), through their business services. Under those terms, what we send is not used to train their models. Voice notes are turned into text with Cloudflare's speech-to-text service.
We do not train AI models of our own on your data. Before an organisation's long-term memory keeps something, identity numbers such as Aadhaar, card and bank account numbers are cut to their last four digits; an owner can turn this off.
Connected accounts (email, drives, WhatsApp)
When an organisation connects a mailbox (such as Gmail or Outlook), a drive (such as OneDrive) or a WhatsApp Business number, Keyrole reads and acts only within what that connection allows, and only to do the work the organisation has set up. Data from these accounts is not sold, not used for advertising and not used to train AI models. A connection can be removed at any time from the app, and also from the provider's own settings.
Keyrole's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Where it is kept
Our servers are in India. Some of the providers above process data in other countries, including the United States, under their own security and data protection commitments.
Security
Connections are encrypted, and the sign-in keys for connected accounts are kept encrypted. Each organisation's data is kept apart from every other's, and inside an organisation people see only what their role allows. Every action an AI employee takes is recorded. If a breach affects your data, we will tell the affected organisations promptly and the authorities where the law requires it.
How long we keep it
By default: an AI employee's working copies of inputs for 30 days, copies of drive files for 7 days, and the finished work for 8 years (the period books of account are kept in India). An organisation's owners can change these periods. When an organisation closes its account we delete its data within 30 days, except what the law requires us to keep, such as invoices.
Your rights
You can ask to see, correct or delete your personal data, to withdraw a consent you gave, and to have a grievance heard. These rights apply under India's Digital Personal Data Protection Act, 2023, and under other laws, such as the GDPR, where they apply to you. Write to us at the address below; we answer within 30 days.
Deleting your data
- A person: email [email protected] from the address you sign in with and ask for your account to be deleted.
- A whole organisation: an owner can ask us the same way; we delete its data within 30 days, as above.
- WhatsApp, mailbox or drive: disconnect it in the app's settings. We stop receiving from it at once; to have what was already received deleted too, email us.
Children
Keyrole is a business service and is not meant for anyone under 18.
Changes and contact
If we change this policy in a way that matters, we will tell account owners before it takes effect. Questions, requests and grievances: [email protected], KKN Ecommerce India OPC Private Limited, India.