Legal

Privacy Policy

Last updated: May 13, 2026

1. Introduction

Keyword Radar, operated by Sparky Code, S.A.S. de C.V., a company established in El Salvador ("we", "us", or "our"), respects your privacy. This Privacy Policy describes how we collect, use, and protect your personal information when you use our keyword monitoring service. Keyword Radar is a global service available to users worldwide.

2. Information We Collect

We collect information you provide directly, such as your email address and password when you create an account. We also collect usage data including keyword queries, monitoring preferences, and platform activity to provide and improve our service. When you sign in to your dashboard we also record your IP address and the country it resolves to, which is used for security, fraud prevention, and administrative observability. Security logs (IP, country, login timestamps) are retained for 90 days. We do not collect payment card details directly. These are handled by our payment processor as Merchant of Record (see Section 4).

3. How We Use Your Information

We use your information to operate and maintain the Keyword Radar service, process your transactions, send you service-related emails (including verification codes and alerts), improve and personalize the service, and communicate with you about updates or support.

4. Data Sharing and Sub-Processors

We do not sell your personal information. We share data only with the following sub-processors, each bound by a Data Processing Agreement (DPA) and appropriate safeguards:

Processor	Purpose	Location	Safeguard
Cloudflare, Inc.	Hosting, CDN, edge compute (Workers), bot protection (Turnstile), cookieless web analytics	USA (global edge network)	DPA + SCCs
Convex (Get Convex, Inc.)	Database, backend functions	USA	DPA + SCCs
Resend	Transactional email delivery	USA / EU	DPA + SCCs
Lemon Squeezy, LLC	Payment processing as Merchant of Record	USA	Independent controller; their privacy policy applies to payment data

Lemon Squeezy is the Merchant of Record for purchases, meaning they are the seller of record and act as an independent data controller for payment, billing, and tax data. We receive limited transaction metadata (order ID, amount, country, email) but not card details.An up-to-date list of sub-processors is maintained on this page. We will notify users of material changes by email or in-product notice at least 30 days before new sub-processors begin processing personal data.We may also disclose information when required by law, court order, or to protect our rights, users, or the public. Our website may include links to third-party sites that we do not operate. We do not control the content or practices of these external sites and are not responsible for their privacy policies.

5. International Data Transfers

Sparky Code, S.A.S. de C.V. is established in El Salvador. Keyword Radar is a global service, and personal data is processed in the United States and other jurisdictions where our sub-processors operate.For users in the European Economic Area, United Kingdom, or Switzerland, we rely on the European Commission's Standard Contractual Clauses (SCCs) and equivalent UK Addendum to lawfully transfer personal data to processors outside the EEA. Where a sub-processor is certified under the EU–U.S. Data Privacy Framework, we additionally rely on that adequacy mechanism.By using the service, you understand that your personal data may be transferred to and processed in countries that may have different data protection laws than your country of residence.

6. Legal Basis for Processing (EEA/UK Users)

Where the GDPR or UK GDPR applies, we process your personal data under the following legal bases:Performance of a contract (Art. 6(1)(b)): to provide the service, manage your account, and process payments.
Legitimate interests (Art. 6(1)(f)): to secure the service, prevent fraud and abuse, log IP/country for security observability, and improve the product. You have the right to object to this processing.
Legal obligation (Art. 6(1)(c)): to comply with tax, accounting, and lawful disclosure requirements.
Consent (Art. 6(1)(a)): for any optional marketing communications. You may withdraw consent at any time.

7. Public Sources and Content We Index

Keyword Radar aggregates publicly available content from third-party platforms (for example: news sites, forums, developer communities, and social networks). For each match, we store a short snippet (title, description, author handle, publication time) and a link back to the original source. We do not store full article bodies, private messages, or content behind authentication walls. We fetch only content that was publicly accessible at the time of retrieval.

8. Takedown and Removal Requests

If your publicly posted content appears in Keyword Radar's index and you would like it removed, email legal@keywordradar.io with a link to the specific mention. We will remove qualifying entries within 30 days. Because Keyword Radar indexes public sources, removal from our index does not remove the content from the original platform. You will need to contact the source platform directly for that.

9. Data Retention

We retain your account information for as long as your account is active or as needed to provide the service. You may delete your account at any time, after which personal data is removed within 30 days, except where retention is required by law.

10. Security

We implement industry-standard security measures to protect your data, including encryption in transit and at rest. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

11. Cookies and Similar Technologies

Keyword Radar uses only strictly necessary cookies required to operate the service:Authentication session cookies (set by Convex): keep you signed in.
Security cookies (set by Cloudflare Turnstile): protect against fraud, bots, and abuse.We do not use advertising, marketing, retargeting, or cross-site tracking cookies. Our analytics provider (Cloudflare Web Analytics) is fully cookieless and does not track individual users across sites or sessions.Because we use only strictly necessary cookies and cookieless analytics, no cookie consent banner is required under the EU ePrivacy Directive or GDPR. If we ever introduce non-essential cookies, we will request your consent first via a banner.You can disable cookies in your browser, but authentication-dependent features will not function.

12. Your Rights

Depending on your location, you may have rights regarding your personal data, including access, correction, deletion, and data portability. To exercise these rights, contact us at legal@keywordradar.io.

13. EU/UK Representative

Sparky Code, S.A.S. de C.V. is established in El Salvador. As of the date of this policy, we have not appointed an Article 27 GDPR representative in the EU or UK. EEA/UK users may exercise their rights and contact us directly at legal@keywordradar.io, and we will respond within statutory timeframes. We will appoint a representative if and when our processing of EEA/UK personal data meets the thresholds requiring one.

14. Children's Privacy

Keyword Radar is not directed to individuals under the age of 16. We do not knowingly collect personal information from children.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or a notice on our website. Continued use of the service after changes constitutes acceptance of the updated policy.

16. Contact

If you have questions about this Privacy Policy, contact us at legal@keywordradar.io.