Privacy Policy

Keelium is a service operated by Keelium OÜ, a company incorporated in Estonia. For any privacy matter you can write to hola@keelium.com.

We process your personal data for the following purposes and legal bases:

• Account and service delivery (name, email, login data —including Google sign-in—, your agency settings): to create your account and provide the service. Legal basis: performance of the contract.
• Billing and payments (billing and subscription data): payments are processed by Polar (merchant of record); Keelium does not store your full card details. Legal basis: performance of the contract and legal obligations.
• Downloadable content and communications (the name and email you leave when downloading resources such as the mini-course): to deliver the resource and, if you accept, to send you tips and news about Keelium by email. Legal basis: consent; you can withdraw it at any time in every email or by writing to us.
• Support (the content of your requests): to assist you. Legal basis: performance of the contract or legitimate interest.
• Security and technical operation (technical logs, session cookie): to keep the service secure and available. Legal basis: legitimate interest.

When a real estate agency uses Keelium to capture and manage its leads (for example Instagram comments and messages, contact forms or conversations), those leads' data belongs to the agency: the agency is the data controller and Keelium acts as a processor under Art. 28 GDPR, following its instructions and the data processing agreement accepted upon subscribing.

If you are a lead who contacted an agency through Keelium, please address your data rights requests to that agency. If you write to us instead, we will forward your request and assist the agency in handling it.

We rely on providers that process data on our behalf to deliver the service:

• Meta Platforms (Instagram API): Instagram account connection and messaging.
• OpenAI: AI-generated replies and voice note transcription.
• Polar: payment processing and invoicing (merchant of record).
• Infrastructure and email providers (application hosting and email delivery).

Some providers are located outside the European Economic Area (for example, in the U.S.). In those cases, transfers are covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework. We do not sell your data or share it with third parties for their own purposes.

• Account data: while the account is active and, after closure, for applicable statutory limitation periods.
• Billing: for the periods required by tax and accounting regulations.
• Marketing communications: until you withdraw consent or unsubscribe.
• Data processed as a processor: as instructed by the controller agency and per the data processing agreement; upon termination it is deleted or returned.

You can exercise your rights of access, rectification, erasure, objection, restriction, portability and withdrawal of consent by writing to hola@keelium.com. We will reply within one month.

You can also lodge a complaint with a supervisory authority: the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or the authority of your country of residence (in Spain, the AEPD, www.aepd.es).

We apply appropriate technical and organisational measures: encrypted communications (TLS), per-customer data isolation at the database level, encryption of integration credentials and restricted access controls.

Any changes to this policy will be published here with an updated date. If a change is substantial we will notify you through a reasonable channel (for example email or an in-app notice).