Legal
Privacy Policy
Version 2026-08-01-bookings · Effective August 1, 2026
Keptly is accountable for personal information under its control. This Policy explains what we collect, why we use it, who may process it, and the choices available to you under Alberta's Personal Information Protection Act (“PIPA”) and other applicable law.
1. Information we collect
We may collect account details such as your name, verified email, profile image, authentication records, organization and membership details; the prompts, websites, files, images, support requests, and other content you provide; billing and transaction identifiers; usage, device, browser, IP, security, and diagnostic data; and the policy versions and time you accepted them. If a website owner enables Enquiries, we also process information a visitor submits through that website's enquiry form, such as their name, contact details, company, subject, message, and optional project photos. We normalize project photos to remove embedded metadata such as camera and location data before making them available to the website owner; temporary upload copies are deleted. We retain a keyed, non-reversible representation of the visitor's IP address briefly to limit abuse; the raw address is not stored with the enquiry. If a website owner enables Bookings, we process the customer's selected service and appointment time, name, email, and any optional phone number or short note submitted to arrange and manage the appointment.
2. Why we use it
We use personal information for reasonable purposes: to provide and personalize the Service; authenticate accounts; create and publish requested websites; process payments; provide support; communicate service and policy changes; meter usage and enforce limits; prevent abuse and protect security; maintain records; improve reliability; and comply with law. Enquiry and booking information is processed on the website owner's behalf so the owner can receive and respond to a visitor's message, or provide and manage the requested appointment. Booking contact details are also used to send confirmations, management links, changes, and reminders about the appointment.
We collect, use, and disclose only information reasonably required for stated purposes or otherwise permitted by law. We will seek additional consent before using information for a materially different purpose when required.
3. Service providers and transfers
We use service providers for hosting and storage, authentication, email delivery, payments, analytics and diagnostics, and artificial-intelligence processing. They may process information outside Alberta or Canada, where foreign laws may permit courts, governments, or law-enforcement authorities to access it. We contractually limit providers to appropriate purposes and safeguards.
Contact our Privacy Officer for information about our service providers, the countries in which they may process information, or our policies for service providers outside Canada.
4. Retention and safeguards
We retain personal information only as long as reasonably needed for the purposes described, legal obligations, dispute resolution, security, and recordkeeping. We then securely delete or anonymize it. Acceptance records are retained while needed to administer and demonstrate the agreement. Enquiries are retained for the period shown to the website owner (90 days by default on the free plan), after which their submitted content, including attached project photos, is deleted. A website owner may delete an enquiry sooner. Booking records and their submitted contact details are retained for 365 days after the appointment by default, then deleted; site or workspace deletion removes them sooner.
We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information. No system is completely secure, and we cannot guarantee absolute security. We assess and report qualifying breaches as required by law.
5. Consent and your choices
Subject to legal and contractual restrictions, you may withdraw consent by contacting us. Withdrawal may prevent us from providing features that require the information. We will not require consent beyond what is reasonably necessary to provide a product or service.
You may request access to personal information we hold about you or correction of inaccurate information. We may verify your identity and apply lawful exceptions. You may also complain to the Office of the Information and Privacy Commissioner of Alberta.
6. Cookies and communications
We use cookies and similar storage needed for sign-in, security, preferences, and operation of the Service. Policy-update emails are service and legal notices, not marketing messages. Marketing messages, if any, are handled separately and provide legally required choices.
7. Changes and contact
We version this Policy. If it materially changes, we will provide notice by email and/or in the Service as required by law, and ask you to accept the current version after signing in.
Our designated Privacy Officer can be reached at [email protected]. Please use the subject “Privacy request.”
To identify a public image that may affect your likeness, privacy, or rights, use our image and rights report form.