Keetl.com

Privacy Policy

Senast uppdaterad den August 28, 2026

Last updated: August 28, 2026

At Keetl.com, we are committed to protecting the privacy and personal data of our users and visitors. This Privacy Policy provides detailed and transparent information on how OOWY SAS collects, uses, protects, and retains personal data when you use our SaaS URL shortening, dynamic QR Code generation, and analytics platform.

1. Data Controller

The data controller responsible for your personal data is:

  • Company: OOWY SAS
  • Legal form: Simplified Joint-Stock Company (SAS) under French law with a share capital of €75,000
  • Registration: Registered with the Évry Trade and Companies Registry
  • Registered office: 6 Rond Point du Fresne, 91280 Saint-Pierre-du-Perray, France
  • DPO / Privacy Contact: contact@keetl.com

2. Categories of Personal Data Collected

We collect personal data based on how you interact with the Service:

2.1 Registered User Data

  • Identity and Contact Data: First name, last name, email address, username.
  • Authentication Data: Passwords encrypted using robust cryptographic hashing algorithms, API keys, two-factor authentication (2FA) tokens.
  • Service Configuration Data: Original target URLs submitted, shortened links generated, QR Code parameters (colors, logos, framing), custom domains, and tracking pixels configured by the User.
  • Billing and Transaction Data: Transaction history, billing address, VAT identification number. (Payment card details are securely processed directly by our PCI-DSS-certified payment service providers).

2.2 Platform Technical and Browsing Data

  • IP address, session identifiers, browser type and version, operating system, screen resolution, interface language, connection timestamps, and pages visited on Keetl.com.

2.3 Redirection and Click / Scan Analytics Data

When an internet user clicks a Keetl short link or scans a Keetl-generated QR Code, technical data is processed to execute the redirection and generate audience metrics for the link creator:

  • IP Address: Processed instantly to determine approximate geolocation (country, region, or city) and immediately anonymized/truncated. Raw IP addresses are never exposed publicly or sold.
  • Technical Information: User-Agent (device category, mobile/desktop, browser, operating system).
  • Referrer: Origin website or application where the link was clicked.
  • Timestamp of the click or scan.

3. Purposes and Legal Bases for Processing

In accordance with Article 6 of the GDPR, our data processing activities are grounded on specific legal bases:

  • Performance of a contract (Terms of Use): Creating and managing your account, providing link shortening, dynamic QR code creation, instantaneous redirection, and customer support.
  • Legitimate interest: Securing the platform, preventing fraudulent activities (phishing, malware, spam), detecting abuse, generating aggregated statistics, and improving service performance.
  • Legal obligations: Retaining connection logs as required by statutory telecommunications laws, maintaining accounting and tax records.
  • Consent: Placing non-essential performance cookies and analytical trackers (managed through our cookie consent tool).

4. Data Recipients and Subprocessors

OOWY SAS does not sell, rent, or trade personal data to third parties. Data is shared exclusively with technical subprocessors strictly required to operate the Service:

  • Cloud Infrastructure Hosting: Amazon Web Services (AWS) EMEA SARL, hosted in the secure datacenter region of Paris, France (eu-west-3).
  • Transactional Email Providers: Specialized infrastructure for delivering registration confirmations, password resets, and security alerts.
  • Judicial and Public Authorities: Disclosed solely upon formal legal requisition in strict compliance with applicable laws.

5. Data Security Measures

We implement state-of-the-art organizational and technical security measures to protect your data against unauthorized access, loss, alteration, or disclosure:

  • End-to-end encryption in transit via TLS/HTTPS protocols (high-grade SSL certificates).
  • Irreversible cryptographic hashing for all stored credentials.
  • DDoS mitigation systems and Web Application Firewalls (WAF).
  • Role-based access controls and optional Two-Factor Authentication (2FA) for user accounts.

6. Data Retention Periods

Personal data is retained only for as long as necessary to fulfill the intended purposes:

  • User Account Data: Retained throughout the duration of the account, then archived or permanently deleted within 3 years of inactivity or immediately upon account deletion request.
  • Redirection Click Analytics: Retained in detailed or aggregated form for as long as the link remains active in the User's account.
  • Security and Connection Logs: Retained for a maximum statutory period of 1 year.
  • Billing and Accounting Records: Retained for 10 years in intermediate archives in compliance with French Commercial Law.

7. Your Rights and How to Exercise Them

Under the GDPR (Regulation EU 2016/679), you possess the following rights regarding your personal data:

  • Right of Access (Art. 15 GDPR): Obtain confirmation and a copy of your personal data being processed.
  • Right to Rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete data.
  • Right to Erasure ("Right to be Forgotten", Art. 17 GDPR): Request deletion of your personal data.
  • Right to Restriction of Processing (Art. 18 GDPR): Request temporary limitation of data processing.
  • Right to Data Portability (Art. 20 GDPR): Receive your data in a structured, commonly used, machine-readable format.
  • Right to Object (Art. 21 GDPR): Object to processing carried out on grounds of legitimate interest.
  • Post-mortem Directives: Specify instructions regarding the retention and deletion of your data after death.

To exercise any of these rights, please email us at contact@keetl.com. We will respond within thirty (30) days.

If you consider that your rights have not been respected, you have the right to lodge a complaint with the French Data Protection Authority (CNIL – www.cnil.fr) or your local supervisory authority.

8. Cookies and Tracking Technologies

Our platform uses cookies to deliver essential services, remember preferences, and evaluate performance. For detailed information and cookie management, please review our Cookie Policy.

9. Updates to this Privacy Policy

We may periodically update this Privacy Policy to reflect legal, regulatory, or technical changes. The updated revision date will appear at the top. We encourage you to review this page regularly.

10. Contact Us

For any questions regarding this Privacy Policy or your personal data, please contact us: