Legal
Privacy Policy
Last updated: May 17, 2026
1. Introduction
Keyword Radar, operated by Sparky Code, S.A.S. de C.V., a company established in El Salvador ("we", "us", or "our"), respects your privacy. This Privacy Policy describes how we collect, use, and protect your personal information when you use our keyword monitoring service. Keyword Radar is a global service available to users worldwide.
2. Information We Collect
We collect information you provide directly, such as your email address and password when you create an account. We also collect usage data including keyword queries, monitoring preferences, and platform activity to provide and improve our service. When you sign in to your dashboard we also record your IP address and the country it resolves to, which is used for security, fraud prevention, and administrative observability. Security logs (IP, country, login timestamps) are retained for 90 days. We do not collect payment card details directly. These are handled by our payment processor as Merchant of Record (see Section 4).
3. How We Use Your Information
We use your information to operate and maintain the Keyword Radar service, process your transactions, send you service-related emails (including verification codes and alerts), improve and personalize the service, and communicate with you about updates or support.
4. Data Sharing and Sub-Processors
We do not sell your personal information. We share data only with the following sub-processors, each bound by a Data Processing Agreement (DPA) and appropriate safeguards:
Lemon Squeezy is the Merchant of Record for purchases, meaning they are the seller of record and act as an independent data controller for payment, billing, and tax data. We receive limited transaction metadata (order ID, amount, country, email) but not card details.An up-to-date list of sub-processors is maintained on this page. We will notify users of material changes by email or in-product notice at least 30 days before new sub-processors begin processing personal data.We may also disclose information when required by law, court order, or to protect our rights, users, or the public. Our website may include links to third-party sites that we do not operate. We do not control the content or practices of these external sites and are not responsible for their privacy policies.
| Processor | Purpose | Location | Safeguard |
|---|---|---|---|
| Cloudflare, Inc. | Hosting, CDN, edge compute (Workers), bot protection (Turnstile), cookieless web analytics | USA (global edge network) | DPA + SCCs |
| Convex (Get Convex, Inc.) | Database, backend functions | USA | DPA + SCCs |
| Resend | Transactional email delivery | USA / EU | DPA + SCCs |
| Lemon Squeezy, LLC | Payment processing as Merchant of Record | USA | Independent controller; their privacy policy applies to payment data |
| Google LLC (YouTube Data API v3) | Retrieval of public YouTube video metadata matching user keywords | USA | Independent controller for YouTube/Google data; Google Privacy Policy applies |
| xpoz.ai | Retrieval of public social media data (Twitter/X, Instagram, Reddit, TikTok) | USA | DPA + SCCs |
| DeepSeek | AI sentiment classification of public mention snippets and AI campaign analysis | PRC | SCCs / equivalent transfer safeguards |
| Brave Software, Inc. | Web search for blog discovery (Brave Search API) | USA | DPA + SCCs |
| FastText (self-hosted) | Language detection of public mention snippets | Operator-controlled infrastructure | Internal processor |
5. International Data Transfers
Sparky Code, S.A.S. de C.V. is established in El Salvador. Keyword Radar is a global service, and personal data is processed in the United States and other jurisdictions where our sub-processors operate.For users in the European Economic Area, United Kingdom, or Switzerland, we rely on the European Commission's Standard Contractual Clauses (SCCs) and equivalent UK Addendum to lawfully transfer personal data to processors outside the EEA. Where a sub-processor is certified under the EU–U.S. Data Privacy Framework, we additionally rely on that adequacy mechanism.By using the service, you understand that your personal data may be transferred to and processed in countries that may have different data protection laws than your country of residence.
6. Legal Basis for Processing (EEA/UK Users)
Where the GDPR or UK GDPR applies, we process your personal data under the following legal bases:Performance of a contract (Art. 6(1)(b)): to provide the service, manage your account, and process payments.
Legitimate interests (Art. 6(1)(f)): to secure the service, prevent fraud and abuse, log IP/country for security observability, and improve the product. You have the right to object to this processing.
Legal obligation (Art. 6(1)(c)): to comply with tax, accounting, and lawful disclosure requirements.
Consent (Art. 6(1)(a)): for any optional marketing communications. You may withdraw consent at any time.
Legitimate interests (Art. 6(1)(f)): to secure the service, prevent fraud and abuse, log IP/country for security observability, and improve the product. You have the right to object to this processing.
Legal obligation (Art. 6(1)(c)): to comply with tax, accounting, and lawful disclosure requirements.
Consent (Art. 6(1)(a)): for any optional marketing communications. You may withdraw consent at any time.
7. Public Sources and Platform Data
Keyword Radar aggregates publicly available content from third-party platforms (for example: news sites, forums, developer communities, and social networks). For each match, we store a short snippet (title, description, author handle, publication time) and a link back to the original source. We do not store full article bodies, private messages, or content behind authentication walls. We fetch only content that was publicly accessible at the time of retrieval.The platforms we currently index and how data is sourced are listed below. This list may change as we add or remove integrations; the canonical, up-to-date list is maintained at /platforms.
Where a platform's terms of service apply to use of its data, you agree to those terms when using Keyword Radar's monitoring features for that platform.
| Platform | Source method | Provider terms |
|---|---|---|
| YouTube | YouTube Data API v3 (direct) | YouTube ToS |
| xpoz.ai aggregator | Instagram ToS | |
| TikTok | xpoz.ai aggregator | TikTok ToS |
| Twitter / X | xpoz.ai aggregator | X ToS |
| xpoz.ai aggregator | Reddit User Agreement | |
| Medium | Public RSS feeds | Medium ToS |
| Tumblr | Tumblr API (direct) | Tumblr ToS |
| Hacker News | Algolia HN Search API (public) | Y Combinator Legal |
| Product Hunt | Product Hunt GraphQL API (direct) | Product Hunt ToS |
| Mastodon | Mastodon API (direct) | Mastodon ToS |
| Bluesky | AT Protocol (public) | Bluesky ToS |
| DEV.to | Forem API (public) | DEV.to ToS |
| Substack | Substack (session-based access) | Substack ToS |
| Newsdata.io | Newsdata.io API (direct) | Newsdata.io ToS |
| Lemmy | Public federation API | Per-instance terms |
| Nostr | Public Nostr relays | Protocol (no central ToS) |
| Blog Search | Brave Search API (open web) | Brave Search ToS |
8. YouTube API Services
Keyword Radar uses YouTube API Services to retrieve public video metadata (titles, descriptions, channel names, thumbnails, view/like/ comment counts, and publish dates) matching the keywords you monitor.By using Keyword Radar's YouTube monitoring features, you agree to be bound by the YouTube Terms of Service. Information collected through YouTube API Services is additionally handled in accordance with the Google Privacy Policy.Data we retrieve: public video metadata only. We do not access your YouTube account, private videos, watch history, or any authenticated user data.
Retention:retrieved metadata is cached only for the duration of your plan's retention window (7 days on Free, up to 90 days on Agency, or a custom window on Enterprise) and is automatically purged thereafter. Deleting a monitor immediately removes its cached YouTube data.
Revoking access: to revoke access granted to Google API Services across applications you have authorized, visit the Google security settings page.
Contact: to request deletion of data stored through YouTube API Services, email legal@keywordradar.io.
Retention:retrieved metadata is cached only for the duration of your plan's retention window (7 days on Free, up to 90 days on Agency, or a custom window on Enterprise) and is automatically purged thereafter. Deleting a monitor immediately removes its cached YouTube data.
Revoking access: to revoke access granted to Google API Services across applications you have authorized, visit the Google security settings page.
Contact: to request deletion of data stored through YouTube API Services, email legal@keywordradar.io.
9. Takedown and Removal Requests
If your publicly posted content appears in Keyword Radar's index and you would like it removed, email legal@keywordradar.io with a link to the specific mention. We will remove qualifying entries within 30 days. Because Keyword Radar indexes public sources, removal from our index does not remove the content from the original platform. You will need to contact the source platform directly for that.
10. Data Retention
We retain your account information for as long as your account is active or as needed to provide the service. You may delete your account at any time, after which personal data is removed within 30 days, except where retention is required by law.
11. Security
We implement industry-standard security measures to protect your data, including encryption in transit and at rest. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
13. Your Rights
Depending on your location, you may have rights regarding your personal data, including access, correction, deletion, and data portability. To exercise these rights, contact us at legal@keywordradar.io.
14. EU/UK Representative
Sparky Code, S.A.S. de C.V. is established in El Salvador. As of the date of this policy, we have not appointed an Article 27 GDPR representative in the EU or UK. EEA/UK users may exercise their rights and contact us directly at legal@keywordradar.io, and we will respond within statutory timeframes. We will appoint a representative if and when our processing of EEA/UK personal data meets the thresholds requiring one.
15. Children's Privacy
Keyword Radar is not directed to individuals under the age of 16. We do not knowingly collect personal information from children.
16. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or a notice on our website. Continued use of the service after changes constitutes acceptance of the updated policy.
17. Contact
If you have questions about this Privacy Policy, contact us at legal@keywordradar.io.