Privacy Policy

Last updated: June 15, 2026

Introduction

At KeyEase, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our property management platform. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the platform.

Information We Collect

We collect information you provide directly to us, such as when you create an account, use our services, or contact us for support. This may include:

  • Personal identification information (name, email address, phone number)
  • Account credentials and authentication data
  • Property management data (property details, tenant information, documents)
  • Financial information related to property transactions
  • Communication preferences and correspondence
  • Usage data and analytics information

Google API Services - User Data Policy

KeyEase integrates with Google services to enhance your property management workflow. This section describes how we access, use, store, and share Google user data when you connect your Google account.

Google Data We Access

When you choose to connect your Google account, KeyEase may request access to the following:

Gmail Data (Send Only)

  • Send access (gmail.send): Send emails on your behalf to tenants, property owners, and vendors - only after you review and explicitly confirm each email in the app. This is a send-only permission: it does not allow KeyEase to read, search, or otherwise access your existing mailbox, messages, or drafts.

Google Calendar Data

  • Read access (calendar.readonly): View your calendar events - including titles, times, and attendees - so the app can display your schedule and help you avoid double-booking
  • Write access (calendar.events): Create, update, and cancel events for property showings, maintenance appointments, client meetings, and lease signings
  • Free/busy access (calendar.freebusy): Check your availability without viewing event details

How We Use Google Data

KeyEase uses your Google data exclusively for the following purposes:

  • Email Sending: Send emails that you compose with our AI assistant (Keyra) to tenants, owners, and vendors. Important: Emails are never sent automatically. When you ask Keyra to draft an email, it shows you a preview in the app, and you must explicitly confirm before any email is sent.
  • Calendar Integration: Display your upcoming events and schedule, update, or cancel property showings, maintenance visits, client meetings, and lease-signing appointments directly from KeyEase
  • Scheduling Assistance: Check your availability so the AI assistant can suggest meeting and showing times that do not conflict with your existing events

How We Store Google Data

  • OAuth Tokens: Your Google access and refresh tokens are encrypted using AES-256 encryption and stored securely in our database
  • Calendar Events: Calendar event data is fetched in real-time when needed and is not permanently stored on our servers
  • Sent Emails: We do not store copies of the emails we send on your behalf beyond standard delivery records (recipient, subject, and timestamp) kept for your activity history

How We Share Google Data

We do not share your Google user data with third parties, except:

  • With AI service providers (such as OpenAI, Google, and Anthropic), accessed through the Vercel AI Gateway, strictly for processing your requests within the KeyEase application - this data is not used to train their models or stored beyond the immediate request
  • When required by law or to respond to valid legal process
  • With your explicit consent

Google Data Retention

  • OAuth Tokens: Retained until you disconnect your Google account or delete your KeyEase account
  • Calendar & Email Data: Not permanently stored - calendar events are fetched, and emails are sent, in real time at your request
  • Activity Logs: Logs of Google API interactions are retained for 90 days for debugging and security purposes, then deleted

Revoking Google Access

You can disconnect your Google account from KeyEase at any time:

  • From KeyEase: Go to Settings → Integrations → Google and click "Disconnect"
  • From Google: Visit Google Account Permissions and remove KeyEase

When you disconnect, we will immediately delete your OAuth tokens and any cached Google data from our systems.

Google API Services Limited Use Disclosure

KeyEase's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use Google data to provide and improve the property management features you explicitly request. We do not use Google data for advertising purposes or sell it to third parties.

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our property management services
  • Process transactions and send related information
  • Send you technical notices, updates, security alerts, and support messages
  • Respond to your comments, questions, and customer service requests
  • Communicate with you about products, services, and promotional offers
  • Monitor and analyze trends, usage, and activities
  • Detect, investigate, and prevent fraudulent transactions and other illegal activities
  • Personalize and improve your experience on our platform

Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except as described in this policy. We may share information:

  • With service providers who assist us in operating our platform
  • To comply with legal obligations or respond to lawful requests
  • To protect our rights, privacy, safety, or property
  • In connection with a merger, acquisition, or sale of assets
  • With your consent or at your direction

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit (TLS 1.3) and at rest (AES-256)
  • Regular security assessments and audits
  • Access controls and authentication mechanisms
  • Employee training on data protection practices
  • Secure cloud infrastructure hosted on Vercel and Supabase with SOC 2 compliance

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it.

Specific retention periods:

  • Account data: Retained while your account is active, deleted within 30 days of account deletion request
  • Property records: Retained for 7 years after lease termination for legal compliance
  • Communication logs: Retained for 3 years for dispute resolution
  • Google integration data: See the Google API Services section above

Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

  • Access and receive a copy of your personal data
  • Correct inaccurate or incomplete information
  • Request deletion of your personal data
  • Object to or restrict certain processing activities
  • Data portability to another service provider
  • Withdraw consent where processing is based on consent

To exercise these rights, contact us at admin@keyease.app. We will respond to your request within 30 days.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information about your use of our platform. You can control cookies through your browser settings and other tools. However, disabling cookies may affect the functionality of our services.

Third-Party Services

KeyEase integrates with the following third-party services to provide our features:

  • Google APIs: Gmail (send only) and Calendar integration (see detailed section above)
  • Stripe: Payment processing for subscriptions
  • Cloudinary: Document and image storage
  • OpenAI / Google AI: AI-powered document processing and assistance
  • Resend: Transactional email delivery

Each third-party service has its own privacy policy governing how they handle data.

Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date. For material changes, we will notify you via email or a prominent notice on our platform. You are advised to review this privacy policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy, our data practices, or Google API data handling, please contact us at:

KeyEase Support

Email: admin@keyease.app