Privacy policy

Last updated September 30, 2026

Keel is a private operations dashboard used by the staff of the companies that run this deployment. It is not offered to the public. This policy explains what data the dashboard handles and how.

What we collect

• Your account: your name, email address and profile picture from Google Sign-In, plus anything you add to your profile (display name, job title, photo).
• Work data: what you and your colleagues enter: directory entries, contacts, messages, knowledge notes and dashboard settings.
• Files you upload: the file, its name, folder, type, size, a checksum, who uploaded it and when, and who it is shared with.
• Connected accounts: data your company chooses to connect, such as accounting, payment and sales systems.
• Google data you choose to connect: if you connect your Google account, the dashboard reads your Gmail messages, calendar events and Google Drive file list (read-only), and, when you approve it, sends email and creates events on your behalf.
• Security logs: sign-ins and changes to settings, kept for audit.
• Activity in the dashboard: each step you take, with the time: pages you open, buttons you press, searches and filters, widgets you open, move or resize, sign-in and sign-out, and anything refused or failed.

Activity log

The dashboard records each step people take in it, in order and with the time. We use it for security (to see who did what, and to investigate problems) and to improve how work gets done: steps people repeat often can become a single button or an automatic job, so staff spend less time at the computer. It may be used to teach AI assistants how a task is done in the dashboard. People with the “See the activity log” permission can read it for their company.

What is not recorded:

• What you type: no keystrokes, and no values from forms, such as names, notes or amounts. We keep the names of the fields you filled in, record ids, and fixed choices such as a widget size.
• Passwords, API keys, access tokens or other secrets.
• The text of emails, messages or notes, and search words (only how long a search was).
• Anything outside the dashboard, such as other websites or apps.

We also store your IP address and browser type with each step, as for sign-ins.

How we use it

Only to run the dashboard for you and your company: showing your data, sending messages you write, drafting replies for your review, and producing reports. We do not sell data, use it for advertising, or share it with anyone outside the companies you belong to, except the service providers listed below.

Google user data

The dashboard's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• Gmail, Calendar and Drive data is used only to provide the email, draft, calendar and file-browsing features you see in the dashboard. Drive access is read-only; file contents are not copied or stored.
• It is not used for advertising, not sold, and not used to train general AI models.
• People do not read it, except with your permission, for security investigations, or where the law requires.
• When you ask for an AI draft or summary, the relevant messages are sent to the AI provider your company configured (currently Anthropic) only to produce that result. The provider may not use it to train models.

AI assistants

AI features send the text they need (for example a question and matching knowledge notes) to your company's AI provider. Nothing is sent to an AI provider unless you use an AI feature. AI drafts are never sent without a person's approval.

Where data is stored

On Google Cloud in the United States: a PostgreSQL database with daily backups, Google Cloud Storage for uploaded files, and Google Secret Manager for passwords and keys. Data is encrypted in transit and at rest. Each company's data is kept separate by the database itself.

Uploaded files

Files you upload are stored in a private Google Cloud Storage bucket in the United States. They are encrypted at rest and never public. A new file is private to you. You can share it with the whole company or with named colleagues. People who manage files for your company can see file names and sizes and can move or delete files, but they cannot open your private files. Each download link works for five minutes and only after the dashboard checks who you are. Deleted files stay in the trash for 30 days and are then removed; storage keeps a recovery copy for 30 more days. Files are sent to an AI provider only when you ask an AI feature to read them.

Service providers

• Google Cloud (hosting, sign-in, Gmail, Calendar and Drive when you connect them)
• Anthropic (AI features, when your company enables them)
• The accounting, payment and sales services your company connects

Keeping and deleting data

Work data is kept while your company uses the dashboard. You can disconnect your Google account at any time, on your profile or at myaccount.google.com/permissions; the dashboard then stops reading your email and calendar and deletes the stored access token. To have your account or data deleted, ask your company administrator. Contact your company administrator, who can reach us.

Changes

We will update this page when the way we handle data changes, and change the date at the top.

Privacy policy · Terms of use · Connect an AI app