Keystone is a product of hireken.io, the controller for the personal data described here. For anything in this policy, write to privacy@hireken.io.

• Waitlist, comparison and quote submissions: name, work email, company, company size, primary cloud, frameworks in scope, approximate resource count, next audit month, and anything you type into the free-text field.
• Basic request data such as IP address and user agent, produced automatically by our hosting when a page is served.
• Nothing else. There is no advertising pixel, no third-party tracker and no cross-site profiling on this site.

Once you connect a cloud account, Keystone reads resource configuration and metadata to build inventory, evaluate guardrails and produce evidence. That is infrastructure data, not your customers' data — we do not read the contents of your storage, databases or application traffic. Product accounts also carry the identity data needed to sign in and to attribute actions in the audit log.

• To reply to you about early access, a comparison request or a quote — the reason you gave it to us.
• To deliver, secure and support the product you are subscribed to.
• To meet legal, tax and accounting obligations.
• We do not sell personal data, and we do not share it with advertisers.

Joining the waitlist means one person replies to you and follows up about Keystone. It does not enrol you in a drip sequence. Ask to be removed and you are removed, without a retention offer.

Waitlist and quote submissions are kept while the beta programme is running and for up to twenty-four months afterwards, unless you ask us to delete them sooner. Product data is kept for the life of your subscription and deleted from live systems on termination or on request, with backups ageing out on their normal cycle.

We use a small number of infrastructure providers to host the site, store submissions and send email on our behalf. They process data under contract, on our instructions only. The current list is available on request at privacy@hireken.io, and we will tell you before adding a new one that handles customer data.

• Ask for a copy of the personal data we hold about you.
• Ask us to correct anything inaccurate.
• Ask us to delete it, subject to obligations that require us to keep records.
• Object to, or ask us to restrict, a particular use.

Email privacy@hireken.io and we will respond within thirty days. If you are unhappy with the outcome, you can complain to your local data protection authority.

This site uses only what is strictly necessary to serve pages and keep a session working. There are no analytics or advertising cookies, which is why there is no consent banner in your way.

If this policy changes materially we will update the date at the top and, for anything that affects how your data is used, tell customers directly rather than relying on you to notice.