Your Data Matters

Last updated: February 2026

1. Introduction

Keksi (“we”, “us”, “our”) provides a cookie consent management platform designed to help website owners comply with GDPR and related privacy regulations.

We respect your privacy and are committed to protecting personal data in accordance with:

• The General Data Protection Regulation (EU) 2016/679 (“GDPR”)
• The ePrivacy Directive (as applicable)
• Applicable national data protection laws within the European Union
  

This Privacy Policy explains how we collect, use, and protect personal data when you:

• Visit our website
• Create an account
• Purchase a license
• Use our dashboard
• Contact us

2. Data Controller

Keksi is operated by:

Keksi App

[Registered Address]

Vigo, Spain

ES53194260K

Email: hello@keksi.app

We act as Data Controller for personal data collected through our website and SaaS platform.

For data processed via customer-installed cookie banners on third-party websites, Keksi typically acts as a Data Processor on behalf of the website owner.

3. Personal Data We Collect

We collect only the data necessary to operate Keksi.

3.1 Account & Purchase Data

When you create a project or purchase a license:

• Full name
• Email address
• Billing information
• Company name (if provided)
• Domain name(s) associated with your project
• Transaction details
  

Payments are processed securely via our payment provider. We do not store full credit card details.

3.2 Technical Data

When using the dashboard:

• IP address
• Browser type and version
• Device information
• Log data
• Usage activity within the platform
  

This data helps ensure platform stability, security, and compliance.

3.3 Communication Data

If you contact us:

• Name
• Email
• Message content
• Any information voluntarily provided

3.4 Website Data

When visiting keksi.io:

• Basic analytics data (if consent is granted)
• Technical logs
• Security monitoring data
  

We do not use invasive tracking without consent.

4. Legal Basis for Processing (Article 6 GDPR)

We process personal data under the following legal bases:

• Contractual necessity – to provide the Keksi service
• Legal obligation – to comply with tax and regulatory requirements
• Legitimate interests – platform security, fraud prevention, service improvement
• Consent – where required (e.g., marketing communications or analytics cookies)
  

You may withdraw consent at any time.

5. How We Use Your Data

We use personal data to:

• Provide and maintain the Keksi platform
• Process payments
• Provide customer support
• Improve service performance
• Ensure compliance with legal requirements
• Communicate important product updates
  

We do not sell personal data.

6. Data Retention

We retain personal data only as long as necessary:

• Account data: for the duration of the account
• Billing records: as required by EU tax laws
• Support communications: up to 24 months
• Technical logs: retained for security and operational purposes
  

You may request deletion of your account at any time, subject to legal obligations.

7. Data Sharing & Subprocessors

We may share data with trusted service providers acting as Data Processors, including:

• Payment processors
• Hosting providers
• Infrastructure services
• Email delivery services
  

All subprocessors are contractually bound by GDPR-compliant Data Processing Agreements (DPAs).

We ensure that:

• Data is stored within the EU where possible
• Transfers outside the EU use appropriate safeguards (e.g., Standard Contractual Clauses)

8. International Transfers

If personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions (where applicable)

9. Data Security

We implement technical and organizational measures to protect personal data, including:

• Encryption in transit (TLS/HTTPS)
• Secure hosting environments
• Access controls
• Role-based permissions
• Monitoring and logging
  

While no system is 100% secure, we continuously improve our security posture.

10. Your Rights Under GDPR

As a data subject, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure (“Right to be forgotten”)
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent
• Lodge a complaint with your local Data Protection Authority
  

To exercise your rights, contact: privacy@keksi.io

11. Keksi as a Data Processor

When website owners use Keksi to manage consent on their own websites:

• The website owner is the Data Controller
• Keksi acts as a Data Processor
  

Processing is governed by our Data Processing Agreement (DPA), available upon request.

12. Children’s Data

Keksi is not intended for use by individuals under 16 years of age. We do not knowingly collect data from children.

13. Changes to This Policy

We may update this Privacy Policy to reflect legal, regulatory, or product changes.

Material updates will be communicated via:

• Website notice
• Email (if applicable)
  

The “Last updated” date will reflect revisions.

14. Contact

For privacy-related questions or requests:

hello@keksi.app