Last updated: 13 November 2026
This policy explains which personal data the Keyong Toolbox (market.services.keyong.tech and every tool under *.market.services.keyong.tech) collects, why, and what your rights are. It follows the Swiss Federal Act on Data Protection (FADP) and, for visitors in the European Union, the General Data Protection Regulation (GDPR).
1. Who is responsible
A. Bello, Keyong Tech, Rue des Eaux-Vives 92, 1207 Geneva, Switzerland. E-mail: contact@keyong.tech.
2. What we collect and why
- Your account: name, e-mail address, password (stored only as a hash). Needed to give you access to the free tools and to the products you buy (contract).
- E-mail confirmation: a one-time link proves the address is yours. Accounts that are never confirmed are deleted after 7 days.
- Orders: billing name and address, e-mail, the products bought, amounts and dates. Needed to deliver what you bought, issue invoices and keep accounting records (contract and legal obligation).
- Payments: card payments are handled by Stripe. We never see or store your card number; we receive from Stripe only the payment status and the last digits of the card.
- Use of the tools: which tool you open, when you reach a limit of a free tool, when you buy. These events are stored under a pseudonymous account number, never with your e-mail address, to improve the tools and decide which ones to build next (legitimate interest).
- What you put into a tool (for example a file you upload): used only to produce the result you asked for. The page of each tool says how long its files are kept.
- Newsletter: only if you tick the box when you create your account. Your e-mail address is then added to our newsletter list (consent). Every issue has a link to leave it; leaving it does not affect your account.
- Proof of your choices: the date and text of the newsletter checkbox you ticked, and the date you confirmed immediate delivery of a digital product at checkout.
- Server logs: IP address, date, page requested, browser type, kept for security (legitimate interest) and deleted after at most 30 days.
3. Cookies
We use only cookies needed for the site to work: the login cookie (shared by the marketplace and its tools, valid only under market.services.keyong.tech), the basket and checkout session cookies of WooCommerce, and the cookies Stripe sets on the checkout page to prevent fraud. We use no advertising or tracking cookies and no third-party analytics.
4. Who processes data for us
- Hetzner Online GmbH (Germany): servers in the European Union where the site, accounts, orders and tool data are stored.
- Stripe Payments Europe Ltd. (Ireland) and its affiliates: card payments. Stripe may process data in the United States under its own safeguards.
- Brevo (Sendinblue SAS, France): sends our e-mails (account confirmation, order e-mails, newsletter).
The newsletter list and all other data are kept on our own servers. We do not sell your data and do not share it with anyone else, unless the law requires it.
5. How long we keep data
- Account: until you ask us to delete it.
- Unconfirmed accounts: 7 days.
- Orders and invoices: 10 years (Swiss accounting law).
- Newsletter: until you leave the list.
- Server logs: at most 30 days.
6. Your rights
You can ask what data we have about you, have it corrected or deleted, receive it in a common format, object to processing based on legitimate interest, and withdraw a consent (for example the newsletter) at any time. Write to contact@keyong.tech; we answer within 30 days. Data we must keep by law (orders, invoices) is kept until the end of the legal period.
You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if you live in the European Union, to the data protection authority of your country.
7. Security
All pages are served over HTTPS; passwords are stored only as hashes; servers are updated automatically and backed up every night in encrypted form.
8. Changes
When this policy changes, the new version is published on this page with its date.