Data Processing Addendum

This Data Processing Addendum (“DPA”) is part of the Terms of Service between you (the creator or workspace) and keenie. It explains how we process personal data in watch sessions on your instructions. Read it with the Privacy Policy.

keenie is provided by János Gyurisán, Hungary. Registered address: 9400 Sopron, Vághy Ferenc 18. Contact support@keenie.io. Polar Software, Inc. is merchant of record for paid plans.

Polar is not a processor of watch-session data.

Roles

• You (the creator) are the controller of watch-session data collected for your workspace. You decide why viewers are invited, which watch links to share, and how long to keep analysis.
• keenie is the processor of that watch-session data. We store it, show it in your dashboard, and process it only to provide the service.
• Polar is merchant of record for paid plans. Polar processes billing data for subscriptions. Polar does not receive watch-session or webcam data.

For your own account (email, login, workspace membership, billing contact), keenie is an independent controller as described in the Privacy Policy.

What we process for you

Watch-session records and related log entries: timestamps, attention and gaze telemetry you choose to collect, video playback events, and optional session identifiers. Webcam frames are processed in the viewer’s browser for tracking; we do not store raw video from the camera as part of a session. Viewers see consent information on the watch page before camera use.

Instructions and purpose

We process this data to ingest sessions, store them for your workspace, and show analysis. We do not sell it or use it to advertise to viewers. We may use aggregated, non-identifying service metrics to operate and improve keenie.

Sub-processors

We use providers who help run the service, including hosting and database (Vercel, Neon), authentication (Supabase), transactional email (Plunk), product analytics (PostHog), error monitoring (Sentry), bot protection (Cloudflare Turnstile), and video embeds (YouTube / Google) on the watch page. Vercel Analytics and Speed Insights may run on the signed-in dashboard. Paid billing goes through Polar as merchant of record. We require appropriate agreements and only share what each provider needs.

Security, retention, and deletion

We use reasonable technical and organizational measures to protect personal data. Session data is kept while the workspace needs it for analysis, unless you delete it sooner or we must keep it for law or security. You can delete a workspace or account in the product, which removes associated session data we hold for that workspace, subject to backups and legal holds.

International transfers and assistance

Data may be processed in the EEA and other countries where our providers operate, with safeguards required by applicable law. We will reasonably help with data subject requests that relate to watch-session data we process for you, and with information needed for your own compliance, via support@keenie.io.

Changes

We may update this DPA and will change the “Last updated” date when we do. For significant changes we may provide extra notice.