Privacy Policy

Open Secret, Inc. (“Keycard,” “we,” “us,” or “our”) provides software and related services for businesses. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our website, communicate with us, or use our products and services.

This Privacy Policy applies to our public website, applications, software, and related services that link to this Privacy Policy.

Customer Data and Customer Agreements

Some information we process is submitted to or accessed through our services on behalf of our business customers (“Customer Data”). Customer Data may include information submitted by customer personnel or collected from customer systems, integrations, files, recordings, transcripts, notes, reports, fields, or other materials made available through the services.

Customer Data is controlled by the applicable customer and is handled in accordance with our agreement with that customer. Those may include additional terms regarding permitted use, security, storage location, retention, export, deletion, subprocessors, and data processing roles.

If there is a conflict between this Privacy Policy and a written agreement between Keycard and a customer regarding Customer Data, the customer agreement will control to the extent permitted by applicable law.

Information We Collect

We collect personal information in the following ways.

Information You Provide to Us

We may collect information that you or your organization provide directly, including:

• Name, email address, phone number, company name, job title, and other contact details.
• Account registration information, login information, and user profile details.
• Communications with us, including emails, calls, support requests, demo requests, feedback, and survey responses.
• Information submitted through our services, which may include notes, records, documents, recordings, transcripts, images, videos, files, messages, structured fields, and other operational information.
• Billing, subscription, contract, and business contact information.

Information Collected Automatically

When you use our website or services, we may collect certain information automatically, including:

• Device and browser information.
• IP address and approximate location derived from IP address.
• Pages viewed, links clicked, and other usage information.
• Log data, diagnostic data, and security-related events.
• Cookie and similar technology data.

Information From Customers, Users, Integrations, and Third Parties

We may receive information from:

• Your employer or another organization that provides you access to Keycard.
• Other users in your organization.
• Third-party systems, applications, and integrations connected to our services.
• Service providers, business partners, and publicly available sources.

If you use Keycard through your employer or another organization, that organization may control the information submitted to or processed by the services.

How We Use Information

We use personal information for the following purposes:

• To provide, operate, maintain, and improve our website and services.
• To create and manage accounts.
• To process, organize, transcribe, summarize, structure, route, or otherwise handle information submitted through the services.
• To support customer workflows, integrations, reporting, and administrative functions.
• To communicate with customers, users, prospects, and partners.
• To provide support, respond to requests, and troubleshoot issues.
• To send service-related notices, security updates, administrative messages, and product communications.
• To analyze usage, improve performance, and develop new features.
• To protect the security, integrity, and availability of our systems.
• To prevent fraud, abuse, unauthorized access, or other harmful activity.
• To comply with legal obligations and enforce our agreements.
• For other purposes with your consent or as otherwise permitted by law.

We do not use Customer Data submitted to the services for advertising or marketing purposes. We may use business contact information and website usage information to communicate with customers and prospects and to measure the effectiveness of our website and marketing.

Where permitted by applicable law and our agreements with customers, we may use aggregated, de-identified, or anonymized information to understand usage, improve our services, develop features, and operate our business.

Cookies and Similar Technologies

We may use cookies, pixels, local storage, and similar technologies to:

• Operate our website and services.
• Remember preferences.
• Understand how visitors use our website.
• Improve performance and reliability.
• Support security and fraud prevention.
• Measure marketing and product effectiveness.

You can control cookies through your browser settings. Some parts of our website or services may not work properly if cookies are disabled.

We do not currently sell personal information or share personal information for cross-context behavioral advertising. If our practices change, we will update this Privacy Policy and provide any choices required by applicable law.

How We Disclose Information

We may disclose personal information as follows:

Customers and Authorized Users

If you use Keycard through an organization, we may disclose information to that organization and its authorized users, administrators, and connected systems.

Service Providers

We may disclose information to vendors and service providers that help us operate our business, such as cloud hosting providers, database providers, communications providers, analytics providers, security tools, customer support tools, payment processors, professional advisors, and other service providers.

Integrations and Customer-Directed Disclosures

We may disclose information to third-party systems, applications, or integrations when directed or enabled by a customer or authorized user.

Legal and Compliance Purposes

We may disclose information if we believe it is reasonably necessary to:

• Comply with law, regulation, legal process, or government request.
• Enforce our agreements and policies.
• Protect the rights, property, safety, or security of Keycard, our customers, users, or others.
• Detect, prevent, or address fraud, security, or technical issues.

Business Transfers

We may disclose or transfer information in connection with a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction, subject to applicable law and any applicable customer agreement.

Consent

We may disclose information with your consent or at your direction.

Data Retention

We retain personal information for as long as reasonably necessary to provide the services, operate our business, comply with legal obligations, resolve disputes, enforce agreements, and maintain appropriate business records.

Customer Data submitted to or processed through our services is stored, retained, exported, and deleted in accordance with our agreement with the applicable customer.

When information is no longer needed, we may delete, anonymize, de-identify, or securely retain it as required or permitted by law.

International Processing

Customer Data submitted to or processed through our services is stored and processed in accordance with our agreement with the applicable customer.

Other personal information, such as website, account, business contact, support, and communications information, may be processed in the United States, Canada, and other jurisdictions where we or our service providers operate. These jurisdictions may have privacy laws that differ from those in your location.

Where required by law, we use appropriate safeguards for international transfers of personal information.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, disclosure, alteration, and destruction.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we work to maintain safeguards appropriate to the nature of the information we process.

Your Choices and Privacy Rights

Depending on where you live, you may have rights regarding your personal information, such as the right to:

• Request access to personal information we maintain about you.
• Request correction of inaccurate personal information.
• Request deletion of personal information.
• Request a copy of certain personal information.
• Object to or restrict certain processing.
• Opt out of certain marketing communications.
• Appeal a decision we make regarding a privacy request, where applicable.

To make a privacy request, contact us at privacy@getkeycard.com.

If you use Keycard through your employer or another organization, we may direct your request to that organization or ask you to contact that organization directly. We may need to verify your identity before fulfilling a request.

You may opt out of marketing emails by using the unsubscribe link in the email or contacting us. Even if you opt out of marketing emails, we may still send transactional, administrative, security, or service-related messages.

Customer-Controlled Data

Many of our services are provided to business customers. In those cases, the customer may determine what information is submitted to the services, how it is used, who may access it, and how long it should be retained.

If your personal information has been submitted to Keycard by one of our customers, please contact that customer first with any privacy request. We will support our customers in responding to privacy requests as required by applicable law and our agreements.

Third-Party Links and Services

Our website and services may contain links to third-party websites, applications, or services. We are not responsible for the privacy practices of those third parties. Their privacy policies govern their own collection and use of information.

Children’s Privacy

Our website and services are intended for business use and are not directed to children. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last Updated” date above and may provide additional notice as required by law.

Your continued use of our website or services after an updated Privacy Policy becomes effective means you acknowledge the updated Privacy Policy.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, you can contact us at:

Email: privacy@getkeycard.com