01
Information We Collect
When you interact with KEEL through WhatsApp, we collect and process the following categories of personal data:
- WhatsApp Messages — The full text content of messages you send to and receive from our service, including stock queries, research requests, and general conversation.
- Phone Number — Your WhatsApp phone number, which serves as your unique account identifier within our system.
- Portfolio Data — Any portfolio holdings, positions, purchase prices, and allocation data you provide to us for tracking and analysis purposes.
- Watchlist Data — Stocks and securities you add to your watchlist, along with any associated alert thresholds or preferences you configure.
- Conversation History — A complete log of your interactions with our service, including timestamps, intent classifications, and response data, used to provide contextual and personalised responses.
- Usage Analytics — Metadata about your usage patterns, including request frequency, feature usage, action types, and session timing. This data is used to enforce usage limits and improve the service.
We do not collect any data beyond what you explicitly provide through your interactions with our WhatsApp service. We do not access your WhatsApp contacts, media, or any other data on your device.
02
How We Use Your Data
We process your personal data for the following purposes, each of which constitutes a legitimate interest or is necessary for the performance of our contract with you:
- Service Delivery — To process your research queries, generate stock analyses, DCF valuations, screening results, and deliver alerts and reports to you via WhatsApp.
- Personalisation — To remember your preferences, portfolio context, tone preferences, and prior conversation history so that our responses are tailored and relevant to your needs.
- Product Improvement — To analyse aggregate, anonymised usage patterns in order to improve the accuracy, speed, and quality of our research engine, scoring models, and chat interface.
- Usage Management — To track your daily usage against your plan's allocation, manage subscription status, and enforce fair-use limits.
- Account Administration — To manage your subscription, process billing, handle onboarding, and provide customer support.
We will never sell your personal data to third parties. We do not use your data for advertising purposes.
03
Data Storage
Your data is stored in SQLite databases on a DigitalOcean server located in a UK/EU data centre region. Our infrastructure is configured with the following security measures:
- Encryption at Rest — All data stored on our servers is encrypted at rest using DigitalOcean's volume encryption, ensuring your data is protected even in the event of physical media compromise.
- Access Controls — Server access is restricted to authorised personnel only, secured via SSH key authentication. Database files are not publicly accessible.
- No Third-Party Data Sharing — We do not share, sell, or transfer your personal data to any third parties for their own purposes.
API Data Processing
To provide our AI-powered research service, certain message data is transmitted to third-party API providers for processing:
- OpenAI — Your messages are sent to OpenAI's GPT models for intent classification, natural language understanding, and response generation. OpenAI's data usage policies apply to this processing. OpenAI does not use API data to train its models.
- Anthropic — Selected queries are processed by Anthropic's Claude models for advanced analysis and research generation. Anthropic does not use API data for model training.
In both cases, data is transmitted over encrypted (TLS) connections and is processed transiently — neither provider retains your data beyond the duration required to complete the API request, in accordance with their respective enterprise API data policies.
04
Data Retention
We retain your personal data in accordance with the following schedule:
- Active Accounts — For as long as your account remains active and you continue to use the service, we retain all data necessary to provide you with a personalised experience, including your full conversation history, portfolio data, watchlist, and preferences.
- Cancelled Accounts — If you cancel your subscription or request account closure, we retain your data for a period of 60 days following cancellation. This grace period allows you to reactivate your account without losing your data.
- Permanent Deletion — After the 60-day post-cancellation retention period, all personal data associated with your account is permanently and irreversibly deleted from our systems, including conversation history, portfolio data, and usage records.
You may request immediate deletion of your data at any time without waiting for the retention period to expire. See "Your Rights" below for details.
05
Your Rights
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights in relation to your personal data:
- Right of Access — You may request a copy of all personal data we hold about you. We will provide this in a commonly used, machine-readable format within 30 days of your request.
- Right to Rectification — If any of the data we hold about you is inaccurate or incomplete, you have the right to request correction. You can update your portfolio and watchlist data directly through the service at any time.
- Right to Erasure — You may request deletion of your personal data at any time. You can initiate this directly within the service by sending the "forget" command via WhatsApp, which will trigger a complete deletion of your account and all associated data. Alternatively, you can contact us by email.
- Right to Data Portability — You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
- Right to Object — You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis for processing.
- Right to Restrict Processing — In certain circumstances, you may request that we restrict the processing of your personal data.
To exercise any of these rights, please contact us at hello@keelresearch.com. We will respond to all legitimate requests within 30 days. If your request is particularly complex, we may extend this period by a further 60 days, in which case we will notify you.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been infringed.
06
Third-Party Services
KEEL integrates with the following third-party services to deliver its functionality. Each service receives only the minimum data necessary to fulfil its purpose:
- OpenAI (GPT Models) — Used for chat intent classification, natural language understanding, and conversational response generation. Message text is sent for processing; no personal identifiers beyond the message content are transmitted.
- Anthropic (Claude Models) — Used for advanced equity analysis, research report generation, and complex financial reasoning. Query data is sent for processing on a per-request basis.
- yfinance — Used to retrieve real-time and historical market data, financial statements, and company information. No personal data is transmitted to this service; only stock ticker symbols are queried.
- Polygon.io — Used to retrieve market news, SEC filings, and related financial data. No personal data is transmitted; only ticker symbols and date ranges are queried.
- WhatsApp Business API (Meta) — Used as the messaging platform through which you interact with KEEL. Your phone number and message content are processed by Meta in accordance with the WhatsApp Business API terms. Meta's privacy policy applies to their processing of your data on the WhatsApp platform.
We regularly review our third-party providers to ensure they maintain appropriate data protection standards consistent with UK GDPR requirements.
07
Cookies
KEEL is a WhatsApp-based service and does not use cookies, tracking pixels, or any other browser-based tracking technologies in the delivery of its core service. Our marketing website at keelresearch.com is a static page that does not set any cookies or use any analytics tracking scripts.
If this changes in the future, we will update this policy accordingly and provide appropriate notice.
08
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page.
We encourage you to review this page periodically for the latest information on our privacy practices. For significant changes that materially affect how we process your personal data, we will make reasonable efforts to notify you via the WhatsApp service.
Your continued use of KEEL after any changes to this Privacy Policy constitutes your acceptance of the updated terms.
09
Contact
If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal data, please contact us:
We aim to respond to all enquiries within 48 hours on business days.