Privacy Policy

The controller responsible for the processing of personal data is:

Managing Director:

Nataliya Izvolskaya

Email:

hello@keyword-shop.com

VAT ID:

ATU79827706

KeywordShop is a software service that helps users create draft Google Search campaigns.

To create a campaign, users submit a website address and provide information about the business, offer, audience, locations, language, goals, and other campaign requirements. KeywordShop analyses this information and generates campaign materials that users can review, edit, and export for use with Google Ads Editor.

KeywordShop does not currently connect directly to users’ Google Ads accounts and does not publish, monitor, or optimise live advertising campaigns.

The personal data we process depends on how you interact with KeywordShop.

We process personal data to:

• provide and operate the KeywordShop website and service
• create and manage user accounts
• authenticate users and maintain login sessions
• analyse submitted websites and campaign information
• generate, store, edit, and export campaign materials
• manage campaign credits and purchases
• process payments, refunds, invoices, and subscriptions
• provide customer assistance
• communicate service, billing, legal, and security information
• protect accounts and prevent fraud, abuse, and unauthorised access
• diagnose technical problems and improve service reliability
• comply with accounting, tax, and other legal requirements
• establish, exercise, or defend legal claims
• send marketing communications where you have consented or where another lawful basis applies

We do not sell personal data.

We process personal data under the following legal bases:

When you submit a website address, KeywordShop retrieves and analyses content from that website in order to understand the business, products, services, landing pages, offers, and campaign context.

You must have the right to submit the website and any associated information. You should not submit:

• personal data that is not needed for the campaign
• sensitive personal data
• private client information without authorisation
• confidential information or trade secrets that are not required
• information relating to children
• unlawful content or content you have no right to use

Where you use KeywordShop for a client, you are responsible for ensuring that you are authorised to submit the client’s website and information.

KeywordShop uses automated systems and artificial intelligence to analyse campaign information and generate draft campaign materials.

We use Claude models via the Anthropic API for this purpose. Relevant portions of submitted website content, campaign instructions, project data, and generated materials may therefore be sent to Anthropic for processing.

We use Anthropic’s commercial API; customer content submitted via the API is not used by Anthropic to train its models, subject to Anthropic’s applicable terms. Content is processed as needed to provide the feature and is not retained by KeywordShop beyond the project storage described in the retention section below.

AI-generated materials may contain inaccuracies or incorrect assumptions and must be reviewed by the user. KeywordShop does not use AI to make a legally binding decision about you or to determine whether you may access employment, credit, insurance, healthcare, or another similarly significant service.

We use the following service providers (sub-processors). Data Processing Agreements (DPAs) are in place with each provider in accordance with Art. 28 GDPR where required:

• Supabase — Authentication, database, and storage for account and project data. See Supabase's Privacy Policy.
• Vercel — Hosting and delivery of the KeywordShop website and application. See Vercel's Privacy Policy.
• Anthropic — AI analysis and campaign generation via the Claude API. Customer content submitted via the commercial API is not used to train Anthropic’s models, subject to Anthropic’s terms. See Anthropic's Privacy Policy.
• Lemon Squeezy — Checkout, payments, and merchant-of-record billing. We do not store payment card details. See Lemon Squeezy's Privacy Policy.
• Professional advisers and public authorities — Accountants, tax advisers, lawyers, auditors, banks, insurers, or competent authorities where necessary for legal obligations, professional advice, or protecting legal rights..

KeywordShop does not currently use Google Analytics.

We may introduce Google Analytics or another analytics service in the future to understand how the website and product are used. We will update this Privacy Policy before or when such a service is introduced.

Where consent is legally required, optional analytics will not be activated until you have given consent through the cookie settings. You will be able to reject or withdraw that consent.

KeywordShop may use strictly necessary cookies or similar technologies to:

• keep users logged in
• maintain secure sessions
• remember privacy choices
• operate checkout functionality
• protect the service against fraud or misuse

These technologies are required to provide functions expressly requested by the user.

Non-essential analytics, advertising, or marketing technologies will only be used after consent where required by law. Where these technologies are introduced, users will be provided with information about their provider, purpose, duration, and data use through the cookie settings or a separate Cookie Policy.

We use email to:

• respond to enquiries
• provide account and service information
• send purchase and billing messages
• provide security or legal notices
• assist with service-related issues

Service and support messages are sent from hello@keyword-shop.com.

Marketing emails will only be sent where legally permitted. Where consent is required, you can withdraw it at any time by using the unsubscribe option or contacting us.

Some service providers may be established or may process data outside Austria or the European Economic Area.

Where personal data is transferred to a country outside the EEA, we rely on an applicable legal transfer mechanism, such as:

• an adequacy decision issued by the European Commission
• the EU–US Data Privacy Framework, where applicable
• Standard Contractual Clauses approved by the European Commission
• additional contractual, organisational, or technical safeguards

Where providers process personal data outside the EEA, we use Standard Contractual Clauses, an adequacy decision, and/or the EU–US Data Privacy Framework as applicable under their terms.

We retain personal data only for as long as necessary for the purpose for which it was collected or as required by law.

The following retention periods apply:

• Account data: for as long as the account remains active and for up to 30 days after account deletion, unless longer retention is required.
• Campaign and project data: for as long as the project remains available in the account and for up to 30 days after deletion.
• Backups: until the relevant backup is overwritten in accordance with the applicable backup cycle, expected to be no longer than 90 days.
• Support and general correspondence: normally for up to two years after the last communication.
• Security and technical logs: normally for up to 12 months, unless an incident requires longer investigation.
• Consent records: for as long as necessary to demonstrate that valid consent was obtained and to resolve related claims.
• Billing, accounting, and transaction records: for the period required under Austrian tax and accounting law.
• Legal claims: until the applicable limitation period has expired or a dispute has been resolved.

Where deletion from an active system is not immediately technically possible, access to the relevant data will be restricted until deletion occurs through the normal deletion or backup cycle.

Subject to the conditions set out in applicable law, you have the right to:

• request access to your personal data
• request correction of inaccurate or incomplete data
• request deletion of your personal data
• request restriction of processing
• object to processing based on legitimate interests
• receive certain data in a structured, commonly used, machine-readable format
• withdraw consent at any time where processing is based on consent
• lodge a complaint with a competent data protection authority

To exercise your rights, contact:

hello@keyword-shop.com

We may request information necessary to verify your identity and protect your account before responding.

You also have the right to lodge a complaint with the Austrian Data Protection Authority:

We use appropriate technical and organisational measures intended to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

These measures may include:

• access restrictions
• authentication controls
• encrypted data transmission
• provider security controls
• database access policies
• logging and monitoring
• backups
• separation of development and production access where appropriate

No online system can guarantee absolute security. You are responsible for protecting your login details and notifying us promptly if you believe your account has been accessed without authorisation.

KeywordShop is intended for business and professional users and is not directed at children.

You must not create an account or submit personal data through KeywordShop if you are under 18. You must not submit personal data relating to children through campaign briefs or website content unless you have a lawful and necessary reason to do so.

Agencies, consultants, freelancers, and other professional users may use KeywordShop for their clients.

In such cases, the professional user is responsible for determining whether they have a lawful basis and appropriate authority to submit the relevant information.

If KeywordShop processes personal data solely on the documented instructions of a business customer, KeywordShop may act as a processor for that specific processing. A Data Processing Agreement may be made available where required.

We may update this Privacy Policy when KeywordShop’s functionality, service providers, data processing, or legal obligations change.

The current version will be published on this page with an updated revision date. Where required by law, we will provide additional notice of material changes.

For privacy questions, requests, or concerns, contact:

Managing Director:

Nataliya Izvolskaya

Email:

hello@keyword-shop.com