Your private library. Your choice to share.

Who is responsible

This notice describes how Kepero processes personal data. Contact help@kepero.com about privacy or your rights.

What we process and why

We process account and authentication information to operate your account; links, uploads, notes, transcripts, collections and drafts to provide the features you use; and operational/security records to maintain the service and prevent abuse. We use contract necessity for requested service functions, legal obligations for records we must retain, and legitimate interests for proportionate security and service operation.

Public sharing is a separate action. Private notes and transcripts are not included in public material or collection views. Review what is included before publishing a Post; content you choose to publish is available to people with access to its public page.

Service providers and optional features

Kepero uses Railway for application hosting, Supabase for database and managed file storage, and Resend for account email. Stripe processes billing information, cards and payments; Kepero stores payment identifiers and subscription status, not full card numbers or security codes.

When you request an AI feature, the content needed for that operation is sent to the configured AI provider, currently OpenAI. Optional Google Drive connections use the access you grant to store or retrieve files created or selected for Kepero. Disconnecting an integration stops future use of that connection; it does not by itself erase copies already stored elsewhere.

Providers may process data outside the EEA. Applicable provider agreements and transfer safeguards govern those transfers. Contact us for information about the safeguards used for your data.

Measurement, retention and your rights

Public-page acquisition measurement uses limited attribution and aggregate reporting and respects the supported browser privacy signals described in Sharing & privacy. We do not use your private library as public marketing content.

We keep account content while needed to provide your account and requested features. Deletion, security, backups and legal/billing obligations can require different retention periods; downgrade alone does not delete your library. Contact us for the retention details applicable to a specific request.

Where applicable, you may request access, correction, deletion, restriction or portability, object to certain processing, or withdraw consent for optional processing. You can also complain to the Cyprus Commissioner for Personal Data Protection or your competent supervisory authority. We may need to verify your identity before fulfilling a request.