Privacy Policy

1. Information we collect

Depending on how you use KeyLink, we may collect or process:

• Chaster information: Chaster account identifiers and display names, extension and lock identifiers, extension configuration, session status, permitted actions, event and action history, and related timestamps.
• Nomi information: the Nomi API credential you provide, the selected companion’s identifier and name, capability information, KeyLink operational messages and immediate replies, and the control-room identifier when Rooms are available.
• Your settings and activity: authority choices, permission limits, schedules, consent acknowledgements, official requests, decisions, execution results, security and audit records, and reliability measurements.
• Beta, Discord, and support information: Chaster and Discord usernames, tester application details, support messages, feedback, ticket status, and notification preferences you choose to provide.
• Operator account information: usernames, email addresses, password hashes, access roles, invitation status, and administrative session records for authorized KeyLink operators.
• Technical information: request times, error and diagnostic data, browser or device metadata, IP addresses, and security signals that may be processed by KeyLink or its hosting providers.

KeyLink’s purpose and its connections to companion and lock services may cause some information to reveal private relationship preferences or intimate interests. Please do not put secrets, unnecessary intimate details, government identifiers, financial information, or medical information in support requests.

2. How we use information

We use information to:

• authenticate extension sessions and connect the Chaster account, lock, and selected Nomi;
• send current lock context to the selected Nomi and process the immediate response;
• validate and, when authorized, perform supported Chaster extension actions;
• apply your selected permissions, schedules, safety checks, rate limits, and replay protection;
• provide tester access, support, operational notices, and administrator review;
• detect abuse, investigate failures, secure the Service, and maintain audit records; and
• analyze reliability and improve KeyLink during the private beta.

We do not use personal information for third-party behavioral advertising.

3. How information is disclosed

We may disclose information as needed to operate the Service:

• Nomi.ai: KeyLink sends the selected Nomi concise operational context and requests a response. Nomi.ai processes that material under its own terms and privacy practices.
• Chaster: KeyLink receives extension-session and event information from Chaster and sends authorized extension actions back to Chaster. KeyLink does not store your Nomi API credential in Chaster.
• Discord: if you join the KeyLink Community, apply for beta access, request support, or enable a Discord feature, the relevant information is also processed by Discord.
• Service providers: hosting, database, email-delivery, security, and infrastructure providers may process information for KeyLink under their own contractual and legal obligations.
• Legal and safety disclosures: we may preserve or disclose information when reasonably necessary to comply with law, protect users, investigate abuse or security incidents, or defend legal rights.
• Business changes: information may be transferred as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to applicable law and appropriate notice.

KeyLink does not sell personal information and does not share personal information for cross-context behavioral advertising.

4. Credentials and security

Nomi API credentials are encrypted before storage and are not intentionally placed in public URLs, browser storage, Chaster configuration, or ordinary logs. KeyLink uses access controls, transport encryption, credential redaction, input validation, rate limits, and audit records appropriate to the current private beta. No system can guarantee absolute security, and beta software may change as its safeguards mature.

Keep your provider credentials private. If you believe a credential or account has been compromised, revoke or rotate it with the relevant provider and contact KeyLink support.

5. Cookies and similar technologies

The public KeyLink website does not currently use advertising or analytics cookies. The private operator console uses an essential, secure session cookie so authorized administrators can remain signed in. The cookie is not used for advertising and normally expires after 12 hours. Links and embedded services from Chaster, Nomi.ai, Discord, and other third parties may use their own cookies under their own policies.

6. Retention

We retain information for as long as reasonably necessary to provide the Service, maintain security and auditability, resolve disputes, enforce agreements, and satisfy legal obligations. Credential pairings and active configuration may be kept while an integration remains connected. Security, decision, and audit records may be retained longer when needed to explain actions or investigate incidents.

KeyLink is still establishing production retention schedules during the private beta. When information is no longer reasonably needed, we will delete, aggregate, or de-identify it where practical. Some information may remain in backups for a limited period or be retained when law or a security need requires it.

7. Your choices and privacy rights

You may:

• disconnect or stop using KeyLink and revoke provider credentials through Nomi.ai or Chaster;
• change available KeyLink settings for future sessions, subject to active-lock restrictions;
• ask to access, correct, export, or delete personal information associated with you; and
• object to or ask us to restrict certain processing where applicable law provides that right.

We may need to verify your identity before completing a request. Some requests may be limited when records are needed for security, fraud prevention, legal compliance, or to protect another person’s rights. Where required by law, you may also use an authorized agent and appeal or complain to your local privacy authority. We will not discriminate against you for exercising applicable privacy rights.

8. Adults only

KeyLink is intended only for consenting adults age 18 or older. We do not knowingly collect personal information from children. If you believe a child has provided information to KeyLink, contact us so we can investigate and take appropriate action.

9. International processing

KeyLink and its providers may process information in countries other than the one where you live. Those countries may have different privacy laws. Where required, transfers will rely on an appropriate legal mechanism.

10. Changes to this policy

We may update this policy as KeyLink changes. We will post the revised version here and update the date at the top. If a change materially affects how we use information, we will provide additional notice when reasonably practical.

11. Contact

To ask a privacy question or submit a privacy request, use the KeyLink Community support process. Do not post credentials or intimate details in a public channel; ask an administrator for a private support path.