This Privacy Policy explains how Keep DS Pty Ltd ("Keep DS", "we", "us") collects, uses, and protects personal information when you visit keepds.ai or contact us. We comply with the Australian Privacy Act 1988 (Cth) and, where applicable, the EU/UK General Data Protection Regulation (GDPR).
This policy covers this website only. Our products have their own privacy policies: for Sammy, see sammyai.app.
Who we are
Keep DS Pty Ltd is a software company based in Melbourne, Australia. For any privacy-related questions or requests, contact us at hello@keepds.ai.
Information we collect
Information you give us. When you submit our contact form, we collect the name, email address, optional company name, and message you provide.
Usage statistics. We count visits with Cloudflare Web Analytics, which records the page viewed, the referring site, browser and device type, country, and how quickly the page loaded. It sets no cookies, stores nothing on your device, and does not fingerprint you, so it cannot recognise you between visits or follow you to other sites. We see totals only, never individual visitors.
On-page actions. We also count a few actions on our own pages: which sections of the homepage were viewed, which buttons and links were used (for example "Get in touch" or "Join the waitlist"), whether the contact form sent successfully, and whether the Pause animations button was used. Each count carries only coarse labels: the page, the site that referred you, campaign tags in the link (such as utm_source), your device type and your country. There are no cookies or identifiers, and nothing is stored on your device. To stop abuse, a rate limiter holds your IP address for up to a minute; it is never stored with the counts. We only ever look at totals.
Server logs. Our hosting provider, Cloudflare, logs standard HTTP request information (IP address, user agent, timestamp) for security and performance purposes. These logs are retained for a short period.
How we use your information
- To respond to enquiries you send through our contact form.
- To understand aggregate site traffic and improve the website.
- To protect the site against abuse, fraud, and technical issues.
Under GDPR, our legal bases are legitimate interests (cookieless usage statistics and on-page action counts, security logging, and responding to enquiries you initiate) and contract or pre-contractual steps (handling business enquiries).
Who we share information with
We do not sell your personal information. We share limited information with the following service providers, each of which processes data only on our behalf:
- Formspree (USA): receives and forwards contact form submissions.
- Cloudflare (USA): hosts the site, provides security and performance services, and runs our cookieless usage statistics and on-page action counts.
Some of these providers are located outside Australia and the EU. Where personal data is transferred internationally, we rely on the providers' standard contractual clauses and data processing agreements as the safeguarding mechanism.
Cookies and device storage
This website does not use cookies for analytics, advertising, or tracking, which is why there is no cookie banner. Cloudflare may set a strictly necessary security cookie to protect the site from automated abuse. It is never used to track you.
The only thing the site itself stores on your device is your choice if you use the Pause animations button at the foot of the homepage, kept in your browser's local storage so the setting sticks between visits. It never leaves your device, and you can clear it at any time in your browser settings.
Until October 2026 this site offered optional Google Analytics cookies. We have removed Google Analytics, and if you accepted those cookies on an earlier visit, the site deletes them the next time you visit.
How long we keep information
- Contact form submissions: kept while your enquiry is being handled and for up to 24 months afterwards for follow-up, then deleted.
- Usage statistics: held by Cloudflare as aggregate, non-identifying data for up to six months.
- On-page action counts: held by Cloudflare for three months, then deleted.
- Google Analytics data collected before October 2026 (only from visitors who accepted analytics cookies): event-level data is deleted under our 14-month retention setting, leaving only aggregate reports.
- Server logs: retained per Cloudflare's standard retention windows (typically days to weeks).
Your rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you.
- Request correction of inaccurate information.
- Request deletion of your information.
- Object to or restrict our processing (GDPR).
- Lodge a complaint with a supervisory authority: the Office of the Australian Information Commissioner (oaic.gov.au) in Australia, or your local data protection authority in the EU/UK.
To exercise any of these rights, email hello@keepds.ai. We respond to verified requests within 30 days.
Security
We use industry-standard measures to protect personal information, including HTTPS encryption in transit, access controls on stored data, and reputable third-party providers. No system is perfectly secure, but we treat data minimisation and access limitation as architectural defaults rather than afterthoughts.
Children
This website is not directed at children under 16, and we do not knowingly collect their personal information.
Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top of the page reflects the most recent revision. Material changes will be highlighted on this page.