OFFICIAL PRIVACY POLICY

Status: ACTIVE
Version: 1.1
Owner: KeymasterEngine

EXECUTIVE SUMMARY

This Privacy Policy explains how KeymasterEngine manages information associated with KeymasterEngine.com, the Keymaster Framework ecosystem, Protocol Access, licensed products, Custom Keymaster Framework projects, and related official communication channels.

KeymasterEngine is committed to collecting and using only information reasonably necessary to operate the website, respond to inquiries, process applicable transactions, provide customer support, manage licensing, and engineer requested Custom Keymaster Framework solutions.

KeymasterEngine follows a principle of data minimization and encourages users not to provide information that is unnecessary for the requested purpose.

1. PURPOSE

This Privacy Policy describes how information may be collected, processed, protected, and used when users:

• Access KeymasterEngine.com
• Browse the Keymaster Framework Library
• Use Protocol Access
• Submit an inquiry
• Request a Custom Keymaster Framework
• Purchase or license an official product
• Communicate through official channels

This Policy should be read together with applicable Terms of Use, Licensing terms, and third-party marketplace policies.

2. INFORMATION WE MAY COLLECT

Depending on how users interact with KeymasterEngine.com and its official distribution channels, information may include:

• Basic contact information voluntarily provided by users
• Information submitted during product inquiries
• Information provided during licensing discussions
• Information provided for Custom Keymaster Framework requests
• Framework Reference Codes
• Project requirements and objectives
• Preferred language or execution requirements
• Technical information such as browser type, device information, operating system, IP address, and website usage information
• Information reasonably necessary to maintain website functionality, security, performance, and user experience

The exact information collected depends on the interaction and the third-party platforms used.

3. INFORMATION WE DO NOT REQUEST

KeymasterEngine is designed to minimize unnecessary information collection.

Unless reasonably necessary for a legitimate operational purpose, KeymasterEngine does not request users to provide:

• Passwords
• Authentication credentials
• Authentication codes
• Government-issued identification numbers
• Financial account credentials
• Payment card information directly to KeymasterEngine
• Unnecessary sensitive personal information
• Confidential business information unrelated to the requested service

Users should avoid submitting confidential or sensitive information that is not reasonably necessary for the requested product, service, or engineering process.

Payment information submitted through third-party marketplaces is handled according to the applicable policies of those providers.

4. HOW INFORMATION IS USED

Information may be used to:

• Respond to inquiries
• Process product or licensing requests
• Identify published frameworks using Reference Codes
• Support Custom Keymaster Framework engineering
• Provide customer support
• Communicate regarding orders or projects
• Improve products and documentation
• Maintain website functionality
• Maintain website security
• Analyze website performance where applicable
• Prevent abuse, fraud, or unauthorized activity
• Comply with applicable legal obligations

Information is intended to be used for legitimate operational purposes associated with KeymasterEngine and the requested interaction.

5. CUSTOM KEYMASTER FRAMEWORK INFORMATION

Custom Keymaster Framework engineering may require users to provide information describing:

• Objectives
• Workflows
• Professional context
• Organizational context
• Industry
• Decision environment
• Operational requirements
• Preferred language
• Desired outputs
• Relevant constraints

KeymasterEngine seeks to collect only information reasonably necessary to engineer the requested cognitive architecture.

Clients should not provide:

• Passwords
• Authentication credentials
• Payment credentials
• Government identification numbers
• Unnecessary sensitive personal information
• Confidential information unrelated to the project

Information provided specifically for a Custom Keymaster Framework project is handled according to the applicable project terms, licensing terms, and confidentiality commitments.

6. CLIENT CONFIDENTIALITY

Information voluntarily provided for Custom Keymaster Framework engineering may include confidential business or organizational information.

KeymasterEngine will use such information for purposes reasonably necessary to understand requirements, engineer the requested framework, validate its structure, prepare the deliverables, and provide applicable support.

Unless authorized by the client or otherwise required by law, KeymasterEngine does not intentionally publish client-specific confidential information as public documentation.

Clients remain responsible for determining what information is appropriate to provide through the available communication and marketplace channels.

7. INFORMATION SHARING

KeymasterEngine does not sell or rent users' personal information.

Information may be disclosed where reasonably necessary to:

• Comply with applicable laws or legal obligations
• Protect legal rights
• Prevent fraud, abuse, or security threats
• Operate the website
• Process transactions through applicable third-party providers
• Provide requested services or products
• Maintain technical infrastructure
• Support legitimate operational requirements

Third-party providers may process information according to their own privacy policies and contractual or legal obligations.

8. PROTOCOL ACCESS AND THIRD-PARTY SERVICES

Protocol Access provides the official pathway to available licensed Keymaster Framework editions.

Official licensed editions may be distributed through the KeymasterEngine Etsy Store.

When users interact with Etsy or another third-party service, information submitted through that service is processed according to the provider's applicable privacy policy and terms.

KeymasterEngine does not control the independent data practices of third-party platforms.

Users are encouraged to review the privacy policies of third-party providers before submitting information through those platforms.

9. COOKIES AND WEBSITE ANALYTICS

KeymasterEngine.com may use cookies, local storage, analytics technologies, or similar mechanisms to:

• Maintain website functionality
• Understand website performance
• Analyze visitor behavior
• Improve navigation and user experience
• Support security and technical operations

The technologies actually used may depend on the website infrastructure, hosting environment, analytics configuration, and third-party services integrated with KeymasterEngine.com.

Users may manage available cookie controls through their browser settings.

Disabling certain technologies may affect some website functionality.

10. TECHNICAL AND USAGE INFORMATION

When users access KeymasterEngine.com, technical information may be processed automatically by the website infrastructure or third-party providers.

This may include:

• IP address
• Browser type
• Device type
• Operating system
• Referring pages
• Pages visited
• Approximate access time
• Technical diagnostics
• Website interaction data

Such information may be used to maintain security, understand website performance, diagnose technical issues, and improve the user experience.

11. DATA SECURITY

KeymasterEngine uses reasonable administrative, technical, and organizational measures intended to protect information against unauthorized access, disclosure, alteration, or destruction.

However, no internet transmission, electronic storage system, or third-party platform can be guaranteed to be completely secure.

Users should therefore avoid transmitting highly sensitive information through ordinary website forms, email, social media, or marketplace messaging unless it is specifically required and appropriate for the requested service.

12. DATA MINIMIZATION

KeymasterEngine follows a principle of collecting only information reasonably necessary for the requested:

• Product
• Service
• Licensing process
• Customer support
• Custom Keymaster Framework engineering
• Website operation

Unnecessary personal or sensitive information is intentionally minimized whenever reasonably possible.

The same principle applies to Custom Keymaster Framework engineering.

13. DATA RETENTION

Information may be retained for as long as reasonably necessary for the purpose for which it was collected, including:

• Customer support
• Order administration
• Licensing records
• Project documentation
• Legal or accounting obligations
• Security and fraud prevention
• Business recordkeeping
• Resolution of disputes

Retention periods may vary depending on the type of information, purpose, applicable legal requirements, and third-party platform policies.

Where information is no longer reasonably required and no legal or legitimate operational reason exists to retain it, appropriate deletion or anonymization may be considered.

14. USER RESPONSIBILITY

Users are responsible for ensuring that information voluntarily submitted through KeymasterEngine.com, email, marketplace messaging, or other communication channels is appropriate for the requested purpose.

Users should avoid submitting unnecessary:

• Personal information
• Confidential information
• Authentication information
• Financial credentials
• Security credentials
• Sensitive business information

When using third-party AI systems with licensed Keymaster Frameworks after delivery, users are responsible for determining what information is appropriate to enter into those systems and for complying with their own privacy, security, confidentiality, and regulatory requirements.

15. CHILDREN'S PRIVACY

KeymasterEngine.com and related Keymaster Framework products are not specifically directed toward children.

KeymasterEngine does not knowingly seek to collect personal information from children through the website.

If a parent or guardian believes that a child has provided personal information through the website, they may contact KeymasterEngine through the official communication channel so the matter can be reviewed.

16. INTERNATIONAL ACCESS

KeymasterEngine.com may be accessed by users from different countries and jurisdictions.

Information may therefore be processed through infrastructure, service providers, hosting platforms, marketplaces, or other systems that operate across different jurisdictions.

The applicable handling of information may depend on the services used, the user's location, and applicable legal requirements.

Users accessing the website internationally should consider the privacy laws and requirements applicable to their own jurisdiction.

17. THIRD-PARTY LINKS

KeymasterEngine.com may contain links to external websites, marketplaces, AI platforms, social networks, or other third-party services.

KeymasterEngine does not control the privacy practices of those external services.

Users should review the applicable privacy policies and terms of those services before providing information or using their systems.

18. CHANGES TO THIS PRIVACY POLICY

This Privacy Policy may be modified, expanded, updated, replaced, or revised as the KeymasterEngine ecosystem develops.

The latest published version supersedes previous versions to the extent permitted by applicable law.

Where material changes are made, KeymasterEngine may provide appropriate notice through the website or other reasonable communication channels where appropriate.

Continued use of KeymasterEngine.com after an updated Privacy Policy is published constitutes acceptance of the updated Policy to the extent permitted by applicable law.

19. PRIVACY INQUIRIES

Questions regarding privacy practices, information handling, Custom Keymaster Framework projects, licensing, or related services may be submitted through the official communication channels provided on KeymasterEngine.com or through the official KeymasterEngine Etsy Store, where applicable.

20. EVALUATION ENGINE — DATA PROCESSING

This section describes how information is processed specifically when users interact with the Cognitive Framework Architecture Evaluation Engine ("the Evaluation Engine").

20.1 Information Collected by the Evaluation Engine

When users activate the Evaluation Engine, the following information may be collected:

• Submitted content: frameworks, prompts, and outputs uploaded for evaluation;
• Technical data: IP address, browser type, user agent, session identifiers, and timestamps;
• Consent record: timestamp of consent, version of Terms accepted, and technical identifiers at the moment of consent;
• Evaluation output: the AI-generated evaluation produced from the submission.

20.2 How Information Is Processed

Submitted content is transmitted to third-party AI infrastructure for evaluation generation. Session data is temporarily stored to allow users to complete multi-stage evaluations. Consent records are retained separately for audit and legal compliance purposes.

20.3 Third-Party Processors

The Evaluation Engine relies on the following third-party processors:

• DeepSeek (AI model provider) — receives submitted content for evaluation generation;
• Upstash Redis (session storage) — temporarily stores session data;
• Vercel (hosting platform) — processes API requests and maintains short-term logs.

These providers process data strictly as necessary to deliver the service and are bound by their own privacy obligations.

20.4 Data Retention for the Evaluation Engine

• Evaluation sessions: 60 minutes from the moment of activation, after which they are automatically deleted;
• Consent records: retained for up to 1 year for audit and legal compliance purposes, specifically to demonstrate that the user acknowledged the nature of the AI-generated evaluation output and the associated terms;
• Aggregated metrics: anonymized, aggregated usage data may be retained indefinitely for analytical improvement.

20.5 User Rights

Users may request deletion of their Evaluation Engine data at any time by contacting the official communication channels provided on KeymasterEngine.com. Requests will be honored to the extent technically and legally feasible.

21. DATA SUBJECT RIGHTS

In accordance with Law No. 27 of 2022 on Personal Data Protection (UU PDP) of the Republic of Indonesia, you have the following rights regarding your personal data:

(a) Right of Access — You may request a copy of the personal data we store about you, including IP address, consent metadata, and session identifiers.

(b) Right to Correction — You may request correction of any inaccurate or incomplete personal data.

(c) Right to Erasure — You may request deletion of your personal data, subject to legal retention obligations.

(d) Right to Withdraw Consent — You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

(e) Right to Restrict Processing — You may request that we limit the processing of your personal data under certain conditions.

To exercise any of these rights, please contact us at:

hello@keymasterengine.com

We will respond to your request within a maximum of 3 × 24 hours in accordance with UU PDP. If your request cannot be fulfilled within this period, we will inform you of the reason and provide an estimated timeline.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the relevant supervisory authority in Indonesia.

22. GLOBAL PRIVACY COMPLIANCE

KeymasterEngine serves users worldwide. While our primary legal framework is the Personal Data Protection Law of the Republic of Indonesia (UU PDP), we also acknowledge and respect the rights of users under other international data protection frameworks, including:

(a) GDPR (EU/EEA) — If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation, including:

• Right to Data Portability — You may request your personal data in a structured, commonly used, machine-readable format.
• Right to Object — You may object to processing based on legitimate interest, including our storage of IP address and consent metadata for audit purposes.
• Right to Lodge a Complaint — You may lodge a complaint with your local supervisory authority in the EU/EEA.

Legal Basis for Processing (GDPR):

• Consent — For the processing of prompts, frameworks, and questions submitted to the Evaluation Engine.
• Legitimate Interest — For the retention of IP address and consent metadata (up to 1 year) for the purposes of audit, legal compliance, and fraud prevention.
• Performance of a Contract — For the delivery of purchased frameworks and licensed materials.

(b) CCPA/CPRA (California, USA) — If you are a resident of California, you have the right to know what personal information we collect, the right to request deletion, and the right to non-discrimination. We do not sell, rent, or share your personal information with third parties for commercial purposes. To exercise your rights, contact us at hello@keymasterengine.com.

(c) LGPD (Brazil) — If you are located in Brazil, you have rights under the Lei Geral de Proteção de Dados similar to those described above, including confirmation of processing, access, correction, and deletion.

(d) International Data Transfers — Our infrastructure providers (Vercel Inc. and Upstash Inc.) are headquartered in the United States. By using the Evaluation Engine, you acknowledge that your data may be transferred to and processed in the United States. We rely on Standard Contractual Clauses (SCCs) and equivalent safeguards implemented by our providers to ensure an adequate level of protection. For details, please refer to the privacy policies of Vercel and Upstash.

(e) No Sale of Personal Data — KeymasterEngine does not sell, rent, trade, or otherwise commercialize personal data under any circumstances.

For any privacy-related inquiry, regardless of your jurisdiction, please contact:

hello@keymasterengine.com

CLOSING STATEMENT

KeymasterEngine is committed to responsible information management through transparency, data minimization, reasonable security practices, and responsible handling of information provided through its website and official channels.

KeymasterEngine does not sell or rent users' personal information and does not intentionally collect unnecessary sensitive information.

Custom Keymaster Framework engineering is designed to minimize the information required from clients and to use only information reasonably necessary to understand the requested objectives, workflows, operational context, and execution requirements.

Users should always exercise appropriate judgment when submitting information online and should avoid providing sensitive information that is not necessary for the requested interaction.

KeymasterEngine.com is the official home, engineering, production, repository, publishing, and documentation platform of the Keymaster Framework ecosystem.

Keymaster Framework is the Cognitive Amplification Layer designed to help people and AI transform information into structured reasoning, decision-making, and execution systems.

© KeymasterEngine — All Rights Reserved.