Privacy Policy

This Privacy Policy ("Policy") describes how KeksGas Inc. ("KeksGas," "we," "us," or "our") collects, uses, discloses, and protects personal data when you use our platform, services, website, and related applications (collectively, the "Service"). By accessing or using the Service, you acknowledge that you have read and understood this Policy.

1. B2B-Only Service Designation

By registering for a KeksGas account, you confirm that you are using the Service for lawful business purposes and not for personal, household, or consumer activities. We reserve the right to verify the business nature of any account and to terminate accounts that do not meet our B2B criteria.

2. Nature of Emails & Communications

The types of transactional communications sent through our platform include, but are not limited to:

• System Alerts: Account verification, password resets, security notifications, and system maintenance updates.
• Workflow Notifications: Appointment booking confirmations, rescheduling notices, cancellation alerts, and session reminders.
• Payment Communications: Invoice delivery, payment confirmations, subscription renewal notices, and refund notifications.
• Service Delivery: Digital content access links, resource sharing, intake form submissions, and survey invitations directly related to an active coaching engagement.

We expressly prohibit the use of our Service for cold outreach, newsletter distribution, lead generation campaigns, or any form of unsolicited commercial email.

3. How We Collect Your Data

We collect personal data through the following channels:

3.1 Information You Provide Directly

• Account registration details (name, email address, business name, professional credentials).
• Profile information and business description.
• Payment and billing information (processed securely through third-party payment processors such as Stripe and PayPal).
• Communications with our support team.
• Content you upload to the platform (coaching materials, schedule preferences, intake forms).

3.2 Information Collected Automatically

• Device and browser information (IP address, browser type, operating system).
• Usage data (pages visited, features used, session duration).
• Cookies and similar tracking technologies (see Section 8).
• Log data and diagnostic information.

3.3 Information from Third Parties

• Calendar integration data (Google Calendar, Outlook, iCal).
• Video conferencing metadata (Zoom).
• Payment processor data (Stripe, PayPal).

4. How We Use Your Data

We use collected personal data for the following purposes:

• Service Provision: Operating, maintaining, and improving the KeksGas platform.
• Transactional Communications: Sending appointment reminders, payment receipts, and system notifications essential to the operation of your coaching business.
• Account Management: Verifying business identity, processing payments, and managing subscriptions.
• Security & Fraud Prevention: Detecting, investigating, and preventing unauthorized access, abuse, or fraudulent activity.
• Legal Compliance: Meeting regulatory obligations, responding to lawful requests from authorities, and enforcing our terms.
• Analytics & Improvement: Understanding usage patterns to improve our Service, develop new features, and enhance user experience.
• Customer Support: Responding to inquiries, troubleshooting issues, and providing technical assistance.

5. Zero Tolerance Spam Policy

The following activities are strictly prohibited on the KeksGas platform:

• Sending emails to purchased, rented, scraped, or harvested email lists.
• Conducting cold email outreach or unsolicited mass messaging.
• Using the Service for newsletter or marketing campaign distribution.
• Sending communications to recipients who have not explicitly opted in to receive messages from your coaching business through a direct, verifiable relationship.
• Misrepresenting the sender identity or the purpose of any communication.
• Engaging in any activity that violates the CAN-SPAM Act, GDPR, CASL, or any other applicable anti-spam legislation.

We actively monitor email sending patterns and employ automated detection systems. Any account found to be in violation will be immediately suspended pending investigation. Repeated violations result in permanent termination without refund.

6. Account Verification & Double Opt-In Requirements

Our verification process includes:

• Business Verification: All new accounts undergo a review process to confirm the legitimacy of the coaching or consulting business.
• Email Verification: Account holders must verify their email addresses through a confirmation link.
• Contact Double Opt-In: All client contacts must confirm their consent to receive communications through a two-step verification process (initial signup + email confirmation).
• Ongoing Monitoring: We periodically review accounts to ensure continued compliance with our policies.

7. With Whom We Share Personal Data

We do not sell, rent, or trade your personal information. We share data only with:

• Service Providers: Third-party providers who assist in operating our platform (hosting, payment processing, email delivery), bound by contractual obligations to protect your data.
• Payment Processors: Stripe and PayPal for secure payment handling. These processors operate under their own privacy policies.
• Integration Partners: Calendar services (Google, Outlook), video conferencing (Zoom), and automation tools (Zapier) — only with your explicit authorization.
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with prior notice to affected users.

8. Cookies & Tracking Technologies

We use cookies and similar technologies for the following purposes:

• Essential Cookies: Required for the platform to function (authentication, security, preferences).
• Analytics Cookies: Help us understand how users interact with our Service to improve performance and usability.
• Functional Cookies: Remember your preferences and settings for a personalized experience.

You may control cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of the Service.

9. Data Security & Protection

We implement industry-standard security measures to protect your personal data, including:

• TLS/SSL encryption for all data in transit.
• AES-256 encryption for sensitive data at rest.
• Regular security audits and vulnerability assessments.
• Role-based access controls and multi-factor authentication for internal systems.
• Employee security training and confidentiality agreements.
• Intrusion detection and continuous monitoring systems.

While we strive to protect your personal data, no method of electronic transmission or storage is 100% secure. We encourage you to use strong passwords and to notify us immediately of any suspected unauthorized access.

10. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law. Specifically:

• Active Accounts: Data is retained for the duration of your account's active status.
• Closed Accounts: Account data is retained for up to 30 days after closure to allow for reactivation, after which it is permanently deleted.
• Financial Records: Transaction and billing records are retained for up to 7 years for tax and regulatory compliance.
• Communication Logs: Transactional email logs are retained for 90 days for deliverability analysis and troubleshooting.

11. Your Rights as a Data Subject

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten").
• Right to Restriction: Request limitation of processing of your data.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to certain types of processing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at privacy@keksgas.com. We will respond to your request within 30 days.

12. California Residents — CCPA Disclosure

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights, including the right to know what personal information we collect, the right to request deletion, and the right to opt out of sale of personal information. KeksGas does not sell personal information. For CCPA-specific requests, contact privacy@keksgas.com.

13. International Data Transfers

KeksGas is headquartered in the United States. If you access our Service from outside the United States, your data may be transferred to and processed in the United States. We ensure that all international data transfers are conducted in compliance with applicable data protection laws, including the use of Standard Contractual Clauses (SCCs) where required under GDPR.

14. Children's Privacy

Our Service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a minor, we will take steps to delete such information promptly.

15. Third-Party Links & Services

Our Service may contain links to third-party websites, applications, or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

16. Additional KeksGas Commitments

Beyond regulatory compliance, KeksGas is committed to the following principles:

• Transparency First: We will always clearly communicate any changes to our data practices before they take effect.
• Data Minimization: We collect only the data that is strictly necessary to provide our Service and never more.
• No Shadow Profiling: We do not build behavioral profiles on users for advertising or data brokerage purposes.
• Ethical AI Use: Where we employ machine learning or automated decision-making, we ensure fair, unbiased, and explainable outcomes.
• Vendor Accountability: All third-party vendors and sub-processors are subject to rigorous data protection agreements and must meet our security standards.
• Breach Notification: In the event of a data breach affecting your personal data, we will notify affected users within 72 hours and provide guidance on protective measures.
• Annual Privacy Audits: We conduct annual privacy and security audits to ensure ongoing compliance and identify areas for improvement.

17. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Any material changes will be communicated through a notice on our website or via email. Your continued use of the Service after any changes constitutes acceptance of the updated Policy.