01Overview
This Privacy Policy explains how KeyBeen(“we”) collects, uses, shares and protects your personal data when you use keybeen.in. We collect only what we need to deliver your order and support you afterwards. We do not sell your data. This policy is aligned with India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”).
02Data we collect
- Contact details — your name and email address, used to deliver orders and provide support.
- Order & fulfillment data — the products you buy and any inputs required to fulfill them (e.g. a profile or content URL for social-growth services).
- Payment metadata — a transaction reference and status from our payment gateway. We never receive or store your full card number, CVV or UPI PIN.
- Technical & usage data — aggregated, privacy- friendly analytics such as page views and device type. We do not build advertising profiles.
03How we use your data
- To process, deliver and provide support for your orders.
- To issue GST invoices and meet legal and tax obligations.
- To detect and prevent fraud, abuse and security incidents.
- To improve the Service using aggregated, non-identifying insights.
- To send transactional emails (order confirmations, delivery, support replies). We only send marketing email if you opt in, and you can unsubscribe any time.
04Legal basis & consent
We process your data to perform our contract with you (fulfilling orders), to comply with legal obligations (tax records), for our legitimate interests (fraud prevention, service improvement), and — where required — on the basis of your consent, which you may withdraw at any time by contacting us.
06Data retention
We retain order and invoice records for as long as required for tax and accounting purposes (typically up to 7 years, as mandated by Indian law). Other personal data is kept only as long as needed for the purposes above, after which it is deleted or anonymised. You may request deletion of data we are not legally required to retain.
07Security
We use industry-standard safeguards — encryption in transit (HTTPS), access controls and reputable infrastructure providers — to protect your data. Payment processing is handled by PCI-DSS compliant gateways. No method of transmission is perfectly secure, but we work to protect your information and will notify you and the relevant authority of any breach as required by law.
09Your rights
Subject to applicable law, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of data we are not legally required to keep.
- Withdraw consent where processing is based on consent.
- Nominate another individual to exercise your rights in the event of death or incapacity, as provided under the DPDP Act.
To exercise any of these, email support@keybeen.in. We may verify your identity before acting on a request.
10Children's privacy
The Service is intended for adults. We do not knowingly collect personal data from children under 18. If you believe a child has provided us data, contact us and we will delete it.
11International transfers
Some of our processors may store or process data outside India. Where they do, we take steps to ensure your data receives a comparable level of protection and that any transfer complies with applicable Indian law.
12Grievance officer
In line with the DPDP Act and applicable IT rules, you may raise any privacy concern or complaint with our Grievance Officer at support@keybeen.in. We aim to acknowledge complaints within 48 hours.
13Changes to this policy
We may update this Privacy Policy periodically. The “last updated” date above reflects the current version, and material changes will be highlighted on this page.
14Contact us
Questions about privacy? Email support@keybeen.in or visit our support page.
