AutoKeyWorder Privacy Policy

Controller: Philipp Schlüter, Grabbestraße 5, 33189 Schlangen, Germany. Email: contact@autokeyworder.com

Full policy (German + English, GDPR-binding German version): https://autokeyworder.com/privacy/

What the extension collects

• Account data — email address, hashed password (or OAuth token if you use Google sign-in), unique user ID, account creation date.
• Image data (transient) — when you press "Start" on a supported contributor page (Adobe Stock, Shutterstock, Displate, TeePublic, Zedge, Etsy, Dreamstime), the extension reads the thumbnails on that page, scales them to max 512px on the longest side, and sends them to our backend for AI keywording. Images are not stored by us or by OpenAI (zero-retention API). Videos are sampled as 5 frames.
• Usage data — credit balance, job records (asset IDs, generated metadata, timestamps), credit history, referral data.
• Payment data — handled by Stripe. We only store Stripe session IDs, amounts, and timestamps. We never see card numbers.
• Technical data — IP address (max 30 days, fraud prevention only), browser type, access timestamps.

What the extension does NOT do

• No tracking, analytics, or telemetry.
• No reading of pages outside the listed contributor portals (host_permissions are scoped to those uploaders + autokeyworder.com).
• No transmission of page content beyond the image data needed for keywording.
• No cookies on autokeyworder.com.

Sub-processors

• Supabase (auth, database) — USA, SCCs in place.
• OpenAI (image analysis) — USA, zero-retention API, SCCs.
• Stripe (payments) — USA, PCI DSS Level 1, SCCs.
• Resend (transactional email) — USA, SCCs.
• Google (Google sign-in only, optional) — USA, SCCs.

Retention

• Account/job data: deleted within 30 days of account deletion.
• Payment records: 10 years (German tax law § 257 HGB, § 147 AO).
• Image data: not retained — discarded immediately after AI response.
• IP addresses: max 30 days.

Your rights (GDPR Art. 15–21)

Access, rectification, erasure, restriction, portability, objection.
Contact: contact@autokeyworder.com

Supervisory authority: Landesbeauftragte für Datenschutz und Informationsfreiheit NRW (https://www.ldi.nrw.de).

Last updated: April 2026.