Legal & Privacy.

Privacy Policy

At Keystone IQ, we take your privacy seriously. We collect only the personal information necessary to provide our services. Your financial data is securely encrypted, and we do not sell your data to third parties.

Data Collection and Usage

When you create an account, we collect your basic contact information (name, email, organization name) and your IP address at sign-up. When you upload financial documents, we temporarily process that data to generate insights and ledger entries for your portfolio.

IP Addresses and Approximate Location

We collect your IP address in three situations: when you submit a demo request from this marketing site, when you create a Keystone IQ account, and each time you sign in from a device or network we haven't seen before. We use the IP transiently to look up your approximate country, region, and (for demo requests) city via a third-party geolocation provider. This helps us understand where our customers are based.

Demo requests: the IP is sent to our geolocation provider but is not stored — only the derived city/region/country is retained alongside your contact details.

Account registrations: the IP is retained alongside your account for security and abuse-prevention purposes.

New sign-ins: when this happens, we record the IP address, your browser's user-agent string (which identifies your browser and operating system), and the time. This lets us alert you to unfamiliar sign-ins and helps you review your account's recent activity in Settings → Security. This information is kept for 90 days and then permanently removed on its own; if you delete your account before then, it's removed together with the rest of your data as part of that permanent deletion (see “Data Retention & Deletion” below).

Both signup and demo-request geolocation are visible to Keystone IQ operators in our internal support tools. Each lookup is recorded in our operator audit log with a typed reason (see Keystone IQ Operator Access below).

Bug reports & support data

When you submit a bug report through the in-app "Report a Bug" panel, the following may be collected:

• Screenshots (optional, only if you attach one) — kept in our storage for up to 7 days, then automatically deleted. Viewable by Keystone IQ support staff during that window with a typed audit-logged reason.
• Recent activity — your last 50 clicks within the app, captured as page names and button labels only. No form contents, input values, or query parameters are included.
• Device context — viewport size, screen size, browser user-agent, and the page you were on when you submitted.

Bug-report submissions are mirrored to our internal issue tracker (Linear, listed below as a sub-processor) so engineering can follow up. You can request deletion of any individual report by emailing support@keystoneiq.app.

Third-Party Sub-Processors

To operate our service we share limited data with the following sub-processors:

• Google Cloud Platform — Application hosting, database, and file storage.
• Google Gemini / Vertex AI — AI-powered document extraction and analysis of uploaded financial documents.
• Firebase Authentication — User identity and session management (sign-in and account security).
• Resend — Transactional email delivery (account, billing, and portfolio notifications).
• ipapi.co — IP-to-approximate-location lookup at account sign-up and demo request.
• RentCast — Property valuation data — only queried when you request an automated valuation.
• Plaid — Secure, read-only connection to your bank and mortgage accounts to import transactions and balances when you choose to link an account. Keystone IQ can never move money through this connection.
• Stripe — Payment processing and subscription billing. Keystone IQ never sees or stores your raw card number — Stripe Elements collects payment details directly.
• Mapbox — Property cover-image rendering and address geocoding for the Properties page.
• Twilio — Optional SMS delivery for internal admin operational alerts — not customer-facing.
• PostHog — Pseudonymous product usage analytics (keyed to your account ID, never your name) to help us improve the platform. Form inputs are masked in session replay.
• Meta (Facebook/Instagram) Ads Pixel — Marketing-site visit tracking (KEYIQ-3748) used to measure which ad campaigns bring visitors to keystoneiq.app — grouped with PostHog above as a visitor-tracking tool, not an in-app product feature. Only loads when you accept the "Marketing" cookie category in the cookie banner (opt-in in the EU/EEA/UK/Canada; opt-out with a visible Reject control elsewhere, honoring the Global Privacy Control signal everywhere).
• Linear — Issue tracking — bug reports and demo requests are mirrored to a private workspace for engineering follow-up.
• Sentry — Error monitoring — stack traces and request context for uncaught exceptions.
• Better Stack — Uptime monitoring and the public status page (status.keystoneiq.app) — processes visitor IP addresses of people who view the status page; no customer account data.

Connecting a Bank or Mortgage Account (Plaid)

When you choose to link a bank or mortgage account, you authorize us to share the account information you select with Plaid, our financial-data connection provider, and you authorize Plaid to access, collect, use, and process that information in accordance with Plaid's End User Privacy Policy. Linking is entirely optional, the connection is read-only — Keystone IQ can never move money — and you can disconnect any account at any time from Settings → Connections, which revokes Plaid's access and destroys the stored access token.

Keystone IQ Operator Access

"Operator" refers to a Keystone IQ employee with superadmin permission — engineering and support staff.

Keystone IQ operators have administrative access limited to the metadata required to support your account — organization name, member emails, subscription plan, aggregate usage counts, and property names. They do not see individual transactions, tenant details, or document contents. Every operator access is recorded in an audit log with a typed reason.

That audit log is viewable by every other operator, and we review it on a quarterly cadence.

Data Retention & Deletion

We retain your account and financial data for as long as your account is active. If you close your account — or if your subscription lapses and is not renewed — we retain your data for a 30-day grace period so you can reactivate without losing anything, after which it is permanently deleted.

Permanent deletion removes your operational data across our systems — transactions, properties, tenants, documents in the Document Vault, sign-in history, and any connected bank or mortgage accounts. Access to connected financial institutions (via Plaid) is revoked and the associated access tokens are destroyed. A few narrow categories are kept beyond this point, each for a specific, disclosed reason: payment records tied to your subscription are retained by Stripe, our payment processor, to meet its own financial and tax record-keeping obligations; if you ever unsubscribed from or reported one of our emails as unwanted, we keep that instruction indefinitely so we never contact that address again; and bug reports you submitted are mirrored to our internal issue tracker as described above, deletable individually on request. None of these retained categories contain your property, tenant, or financial data.

When you delete your account we also instruct the third-party services that hold data on our behalf, not just our own systems: access to your connected financial institutions is revoked at Plaid, your sign-in identity is deleted at our authentication provider, and your customer record is scrubbed at Stripe — which retains issued invoices to meet its own financial and tax record-keeping obligations. Two services keep records under their own schedules rather than ours: bug reports you submitted are mirrored to our internal issue tracker and can be deleted individually on request, and our email provider retains delivery logs under its own retention policy. If you would like us to pursue deletion with any sub-processor on your behalf, email support@keystoneiq.app and we will.

You may request deletion of your account and data at any time from your account settings or by emailing support@keystoneiq.app. Verified erasure requests under GDPR and CCPA are honored.

This policy is reviewed at least annually and whenever applicable data-protection requirements change.

Your Rights

You can request a copy of your data, correct inaccurate information, or request deletion of your account at any time by contacting us at support@keystoneiq.app.

Right to Know

California residents — and any Keystone IQ user, since we extend this right to everyone — can ask what personal information we've collected, used, and shared, and why. The “Data Collection and Usage” and “Third-Party Sub-Processors” sections above describe exactly what we collect and who we share it with. For a copy of your own data, email support@keystoneiq.app.

Right to Delete

You can request deletion of your account and personal information at any time. See “Data Retention & Deletion” above for how this works — a 30-day grace period, then permanent removal, with the narrow, disclosed exceptions described there. To start a deletion request, email support@keystoneiq.app.

Right to Opt-Out of Sale or Sharing

Keystone IQ does not sell or share your personal information for cross-context behavioral advertising. There is nothing to opt out of today — if that ever changed, we would update this policy first. Questions about this? Email support@keystoneiq.app.

Right to Non-Discrimination

Exercising any of the rights above will never result in a denial of service, a different price or rate, or a lower quality of service. If you believe this hasn't been honored, email support@keystoneiq.app.