Privacy Policy

How John Kirker Inc. (“KeepsYa”, “we”) handles personal data on keepsya.com, and how the KeepsYa software (including the AI chatbot) handles data when you run it on your own site.

Effective August 18, 2026

This policy covers two things: (1) the data we handle when you visit or buy from keepsya.com, and (2) how the KeepsYa software you install on your own site handles data, so you understand it before you deploy it. On your own site, you are the data controller for your visitors and families; KeepsYa is the software you run.

1. Information we collect on keepsya.com

Site usage: pages viewed, device and browser type, and similar analytics, via cookies and standard logs.
Leads and email: if you request a guide or subscribe, the email address (and any details you provide) and your consent, so we can deliver it and send related updates you can unsubscribe from anytime.
Purchases: your name, email, billing details, and order history. Card payments are processed by our payment processor; we never see or store your full card number.
Support: the contents of messages you send us.
License data: your license key and the site(s) it is activated on, to provide updates and support.

2. How we use it

To sell, deliver, update, and support the software.
To respond to you and provide customer service.
To send transactional messages and, with your consent, marketing you can opt out of.
To operate, secure, and improve the site and the software.
To comply with legal obligations and enforce our terms.

3. Legal bases (GDPR / UK GDPR)

Where the GDPR or UK GDPR applies, we rely on: contract (to provide software and support you bought), consent (for marketing email and non-essential cookies, which you can withdraw), legitimate interests (to secure and improve our services, balanced against your rights), and legal obligation (for tax and records).

4. Sharing and processors

We do not sell your personal data. We share it only with service providers who process it on our behalf under contract, such as: web hosting, our payment processor, our email/delivery provider, and analytics. Where you use the AI features, requests go to the AI provider whose key you configured (see below). We may disclose data if required by law.

5. How the KeepsYa AI chatbot handles data

This section describes the KeepsYa software running on your site. There, you are the data controller and you choose the AI provider. Give your own visitors the notice your law requires.

What is captured

The messages a visitor types into the chatbot, and the replies it gives.
Optional identity a visitor provides (for example a name or email), only if your configuration asks for it.
Basic conversation metadata (timestamps, the event a chat relates to, whether it was escalated or resolved).

Where it is stored

Conversations are stored in your own WordPress database, on your hosting, not on KeepsYa servers.
To answer questions, the software builds a local knowledge index (a vector store) from your own pages and events, also in your database. No external database is used, and you can exclude any event or page from it.

What is transmitted, and to whom

To generate a reply, the visitor’s question and relevant snippets of your own content are sent to the AI provider whose key you configured (for example OpenAI, Anthropic, or Google), or processed locally if you use a local model.
That provider processes the request under its own terms and privacy policy; you choose the provider and are responsible for that relationship.
When a chat should be handed off, the software emails the conversation to the address you set.

How it is used, and what it is not used for

To answer families from your own content, to let you review and improve answers, and to build your FAQ.
Insights use only counts and revenue, never family data. Private or hidden events never enter the chatbot, even if a name was already indexed.
KeepsYa does not use your visitors’ chats to train KeepsYa. Whether your chosen AI provider uses API data is governed by that provider’s terms; enterprise and API tiers commonly exclude training, but you should confirm with your provider.

Retention and control

Chat history auto-expires on a schedule you set, and you can delete conversations at any time. Because the data lives in your database, you control retention, export, and deletion for your visitors.

If a chatbot runs on keepsya.com itself, the same handling applies and we are the controller for those chats.

6. Cookies

keepsya.com uses essential cookies to run the site and, with your consent where required, analytics and marketing cookies. You can control cookies through your browser and any consent banner we present.

7. Data retention

We keep personal data only as long as needed for the purposes above or as the law requires (for example, order records for tax). Leads are kept until you unsubscribe or ask us to delete them.

8. Security

We use reasonable technical and organizational measures to protect personal data. License keys are stored encrypted and shown masked. No method of transmission or storage is perfectly secure.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent. Under the GDPR / UK GDPR you may also lodge a complaint with your supervisory authority. To exercise any right, contact us; we will respond as the law requires.

California (CCPA/CPRA): California residents may request access to or deletion of their personal information, and to correct it, and may opt out of any “sale” or “sharing” of personal information. We do not sell personal information. We will not discriminate against you for exercising these rights.

10. International data transfers

We are based in the United States, and our providers may process data in the US and elsewhere. Where we transfer personal data from the EEA, the UK, or Switzerland, we rely on appropriate safeguards such as the applicable Standard Contractual Clauses. If you use the AI features, your configured AI provider may process data in its own regions under its own safeguards.

11. Children

keepsya.com is intended for organizations and adults, not children. The KeepsYa software is used by organizations that may collect participant information, sometimes about minors; when you run KeepsYa, you are the controller of that data and are responsible for obtaining any parental consent and giving any notice the law requires.

12. Changes and contact

We may update this policy; the effective date above shows the latest version. Questions or data requests: contact us. [An EU/UK representative and a postal contact address to be added on counsel review.]