Privacy Policy

This policy covers keirolabs.cloud, the Keiro dashboard and documentation at platform.keirolabs.cloud, the API at api.keirolabs.cloud, the MCP server, and the metered cloud browser service. Together these are the “Service”. By using the Service you accept this policy.

• Account data. The email address you sign up with and a hashed password. A display name if you provide one.
• API keys. The keys you create in the dashboard. Keys are stored in hashed or encrypted form and are shown in full only once, at creation.
• Request metadata. When your code calls the API we log the endpoint called, timestamps, credit usage and rate-limit counters, so we can bill correctly and prevent abuse.
• Content you submit. Queries, target URLs and extraction instructions you send to endpoints, and the URLs visited by the metered cloud browser when you use browser tools. Search and extraction requests must be forwarded to upstream search providers and target websites to be fulfilled; that is inherent to how the Service works.
• Billing data. Payments are processed by our payment processor. We keep invoices and subscription status, not card numbers.
• Support messages. What you send us through the dashboard support form or by email.

We use privacy-friendly product analytics to understand which features are used and where the product breaks. We do not run advertising networks, we do not sell or rent personal data, and we do not build advertising profiles. The marketing site sets no ad trackers. The dashboard uses a session cookie to keep you signed in.

To operate the Service you asked for: authenticating your requests, metering credits, showing your usage, billing plans, answering support requests, and keeping the Service available and free of abuse. Where required by law, we rely on your consent for optional processing, and on legitimate interest and contract performance for the operations described above.

• Upstream providers. Query text and target URLs are sent to search and content providers as needed to fulfill your request.
• Infrastructure providers. Cloud hosting, egress and browser-rendering providers that run the Service.
• Payment processor. To collect subscription payments.
• Legal process. We may disclose data when required by law or to protect the Service against abuse.

We do not sell your personal data, and we do not share it for third-party advertising.

Request metadata is kept for the period needed for billing, rate-limit accounting, abuse prevention and legal obligations, then deleted or aggregated. Account data is kept until you ask us to delete it or your account is inactive for an extended period. Support messages are kept as long as needed to resolve your request and for our records.

You can ask us to access, export, correct or delete your personal data, and you can object to or restrict processing where the law allows. To exercise any of these rights, email team@keirolabs.cloud or open a support ticket from the dashboard. We respond within 30 days. Deleting your account removes your email address and keys from active systems.

Traffic to the Service is encrypted in transit with TLS. API keys are treated as credentials: hashed at rest and shown once at creation. Access to production systems is limited to the people who operate the Service. No system is perfectly secure, and we will notify affected users if a breach ever requires it.

Our servers and providers may process data outside your country. Where that happens, we use providers that offer comparable protections and transfer mechanisms.

The Service is not directed at children. If you are under 16, do not create an account.

If we change this policy we update the effective date at the top. Material changes are announced on the site or by email to account holders.

Questions about this policy: team@keirolabs.cloud or the support form in the dashboard. Related reading: Terms of Service.