1. Who we are

KeySignals ("we", "us", or "our") is a keyword research service operated by Patrick Van Dop, based in Belgium. KeySignals is accessible at keysignals.io. For any privacy-related questions or requests, contact us at [email protected].

2. What data we collect

Account data

When you create an account, we collect your email address and, optionally, your full name. This information is required to provide you with access to your account and to communicate with you about your subscription.

Usage data via Google Analytics

With your consent, we use Google Analytics 4 to understand how visitors use KeySignals — which pages are viewed, how long sessions last, and general geographic location (country/city level). This data is anonymous and aggregated. No advertising tracking or remarketing is used. We implement Google Consent Mode v2 to ensure no analytics data is collected before you have given your consent.

Keyword search data

When you perform keyword searches, we store the queries and results associated with your account so that your saved keyword lists and history are available to you. This data is not shared with third parties and is not used for advertising purposes.

Payment data

Paid subscriptions are processed through PayPal. We do not store your payment card details. PayPal processes all payment information directly and provides us only with a transaction reference and your subscription status. PayPal's privacy policy applies to data processed by them.

3. Cookies

We use the following cookies:

Session authentication cookie — a secure, HttpOnly cookie used to maintain your logged-in session. This cookie is strictly necessary for the service to function and does not require consent.
Google Analytics cookies (_ga, _ga_*) — analytics cookies set by Google Analytics to distinguish unique users and sessions. These cookies are only placed after you give explicit consent via the cookie consent banner. You can withdraw consent at any time by clearing your browser cookies.

We use Google's Consent Mode v2 to default analytics storage to denied. Analytics data is only collected once you explicitly accept cookies.

4. Legal basis for processing

We process your data on the following legal bases under the GDPR:

Contract performance — processing your account data and keyword data is necessary to deliver the service you signed up for.
Legitimate interests — we may process aggregated usage data to improve the service.
Consent — analytics cookies are only set once you have given explicit consent.

5. Your rights under GDPR

As a resident of the European Economic Area, you have the following rights:

Right of access — you can request a copy of the personal data we hold about you.
Right to rectification — you can ask us to correct inaccurate or incomplete data.
Right to erasure — you can request deletion of your account and all associated personal data.
Right to data portability — you can request your data in a structured, machine-readable format.
Right to object — you can object to the processing of your data for purposes based on legitimate interests.
Right to withdraw consent — where processing is based on consent (e.g. analytics cookies), you can withdraw it at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

6. Data retention

We retain your account and keyword data for as long as your account is active. If you delete your account, we will permanently delete your personal data within 30 days. Anonymised, aggregated analytics data may be retained for longer for statistical purposes.

7. Data transfers

KeySignals is hosted on DigitalOcean infrastructure in the United States (New York region). If you are based in the European Economic Area, your data is transferred to the US. This transfer is covered by appropriate safeguards. Google Analytics may transfer additional data to the US under Standard Contractual Clauses. PayPal may process data internationally in accordance with their privacy policy.

8. Changes to this policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. Continued use of the service after changes constitutes acceptance of the updated policy.

9. Contact

For any questions about this Privacy Policy or to exercise your data rights, contact us at [email protected].