Privacy policy

Keystone is operated by Alexandre Pesant ("we", "us"), who is the data controller for the personal data described in this policy. Keystone is an MCP gateway that lets your AI agents use services you connect, such as Slack, Gmail or Linear.

What we collect and why

• Account data — your email address and sign-in identifier. Used to create and secure your account (legal basis: performance of our contract with you).
• Connection credentials — OAuth tokens issued when you connect a service. Encrypted at rest with AES-256-GCM and never shown to your browser or to agent code. Used to forward your agents' requests to the services you connected (legal basis: contract performance).
• Activity and audit logs — tool names your agents called, timing, status, and approval decisions. Used to show you activity history and enforce your policies (legal basis: contract performance and our legitimate interest in security).
• Usage and device data — IP address, browser and device identifiers, and basic telemetry. Used for security, fraud prevention and product improvement (legal basis: legitimate interest).
• Support messages — when you contact us, we keep the conversation to help you (legal basis: legitimate interest).

Connected services

When you connect a service such as Slack or Google, Keystone calls that service's official API or MCP server on your behalf only when one of your agents asks it to. Content returned by connected services is passed to your agent in that request and is not stored, sold, or used to train models. Keystone only accesses data your own account can see, using the scopes you approve.

Who we share data with

• Service providers — cloud hosting, database and email providers that help us run Keystone, under appropriate data-processing terms.
• Paddle — our Merchant of Record. When you purchase a paid plan, Paddle processes the sale, subscription management, payments, tax compliance and invoicing, and receives the data needed for those purposes.
• Professional advisers — such as legal or accounting advisers, where needed.
• Authorities — where required by law.

We do not sell personal data or share it with advertisers.

Retention and deletion

Disconnecting a service deletes its stored tokens immediately. Deleting your account removes your credentials and logs. Activity logs are otherwise kept for up to 90 days. When data is no longer needed, it is deleted or anonymised.

Security

We apply appropriate technical and organisational measures, including encryption in transit (TLS) and at rest, and strict access controls.

International transfers

Some of our service providers process data outside the EU/EEA. Where they do, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

Your rights

Under the GDPR you have the right to access, rectify or erase your personal data, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. You can also lodge a complaint with your supervisory authority (in Sweden, Integritetsskyddsmyndigheten). We respond to requests within one month. Contact us via our support page to exercise any of these rights.

Cookies

We use essential cookies and local storage only — to keep you signed in and remember your preferences. We do not use analytics or marketing cookies.

Contact

Questions or deletion requests: see our support page.