1. Data controller
The controller of personal data is Joan Ribas (hereinafter, "we"), who provides the service under the Keywarch brand:
- Controller: Joan Ribas
- Tax ID (NIF): 47100248C
- Email for privacy matters: legal@keywarch.com
Data is processed in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
2. Data we process
For now, Keywarch is a private tool: there is no public sign-up and access is by invitation from the administrator only. We process data from two groups of people:
- People with access to the tool, added by the administrator:
- Account data: name and email.
- Access and security data: IP address, browser, and date and time of sign-ins and failed attempts.
- The information the user enters in the tool while working with it.
- People who leave their email on the opening notification list on the home page: explained in section 3.
3. Opening notification list
On the Keywarch home page (in Spanish and in English) you can leave your email so that we let you know when Keywarch opens to the public. It is not a sign-up: it does not create any account or give access to the tool.
- Purpose: only to write to you, in your language, when Keywarch opens to the public. We do not use it for advertising and we do not give it to anyone.
- Legal basis: your consent, which you give by ticking the box on the form. You can withdraw it at any time, without affecting anything done before.
- What we keep: your email, the language of the page you sent it from, the date and time, the IP address and the browser, and the proof of your consent: the exact text of the box you ticked, its version, when you ticked it and from which IP.
- For how long: until we notify you of the opening or until you ask to be removed, whichever comes first. After that we delete your email from the list.
- How to unsubscribe or ask us to delete it: write to legal@keywarch.com from that email asking for it. We will remove it from the list.
- Internal notice: when someone leaves their email, the controller receives a notice with that email by email and in the messaging app they use to manage sign-ups (Telegram).
- Submission limit: to stop repeated submissions, we log each submission of the form (without the email) with the IP and the browser. Legal basis: the legitimate interest in protecting the form from abuse.
- Anti-robot check: the form may use SoftwaCAP (captcha.softwalabs.com), the SoftwaLabs anti-robot system. It collects the IP, the browser, behavioural signals (timing and movement) and a technical fingerprint of the browser (canvas, WebGL, audio, language, screen and time zone), which is only stored as an encrypted code (hash) for 30 minutes. Legal basis: the legitimate interest in protecting the form from abuse.
4. Purpose of processing
We use personal data to:
- Give authorised users access to the tool and manage their accounts.
- Protect access (access log and limit on failed attempts).
- Send the service's own emails: invitation, welcome and password recovery.
- Notify those who asked for it on the notification list when the tool opens to the public.
- Comply with applicable legal obligations.
5. Legal basis
Data processing is based on:
- The relationship with the user authorised to use the tool.
- The consent of those who leave their email on the opening notification list.
- The legitimate interest in keeping the service secure and protecting the forms from abuse.
- Compliance with legal obligations applicable to the controller.
6. Privacy by design: in-house AI
The artificial intelligence processing we carry out for our analyses runs on our own infrastructure. Data from users and clients is not sent to third-party AI providers.
7. Data retention
We keep data for as long as necessary to fulfil the purposes described and, afterwards, for the periods required by law. Emails on the notification list are kept until we announce the opening or until the person asks to be removed, and are then deleted.
8. Recipients
Data may only be disclosed to:
- Infrastructure providers needed to deliver the service: hosting, email and the messaging app in which the controller receives internal notices.
- Public authorities when required by law.
We do not sell or transfer data to third parties for commercial purposes.
Ahrefs Web Analytics: counts visits in aggregate, without cookies and without storing personal data or the IP address.
9. Your rights
You have the right to:
- Access your personal data.
- Rectify inaccurate or incomplete data.
- Request the erasure of your data.
- Object to the processing.
- Request the restriction of processing.
- Data portability.
- Withdraw your consent at any time.
To exercise these rights, or to leave the notification list, write to legal@keywarch.com.
If you believe the processing does not comply with the regulations, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es) or with the supervisory authority of your Member State.
10. Cookies
The website only uses first-party technical cookies: to sign in to the tool and to protect the notification list form. For more information, see our Cookie policy.
11. Security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or destruction.
12. Changes to this policy
Joan Ribas reserves the right to modify this policy. Changes will be published on this page with the corresponding update date.
13. Contact
For any question about this privacy policy, write to legal@keywarch.com.