Last updated 2 September 2026
Who is responsible for your data
Keylight is a product of LunarMono, the sole proprietorship of Abhijeet Gupta, registered for GST in India under 05CQIPG4372B1Z7. We decide how the data described here is handled, which makes us the data controller.
For anything on this page, including a request to see or delete your data, write to hey@trykeylight.com. That address is also the contact for grievances under India’s Digital Personal Data Protection Act.
What we collect
When you open an account: your name, your email address and your password. Passwords are handled by our login provider and we never see them.
When you use Keylight: the brands, competitors, keywords and client names you enter, the questions we generate from them, the answers the engines return, and a record of what your account has used.
When you pay: Paddle handles the payment and holds your card details. We never see a full card number. We receive your billing country, the plan you bought and whether the payment succeeded.
When you visit trykeylight.com: our marketing site uses Framer’s built in analytics, which counts visits by page, country, device and source. It sets no cookies and cannot identify you, which is why the site has no cookie banner. The logged in product sets only the cookies needed to keep you signed in.
When you run the free report card: the domain you entered and the result. Your email address only if you asked for the PDF.
Why we are allowed to hold it
We hold your account and workspace data because we need it to give you the service you are paying for.
We hold usage and security records because we have a legitimate interest in the product working and in not being abused.
We send marketing email only if you asked for it, and every one of those has an unsubscribe link.
Who else sees it
We use a small number of companies to run Keylight. Each one only sees what it needs.
Supabase stores the database and handles logins. Vercel hosts the product. Trigger.dev runs the weekly checks. Resend sends the emails. Paddle takes the payments. Framer hosts the marketing site.
We send your questions to Perplexity, Google, OpenAI, Google Gemini and Anthropic through their paid developer connections, so they can answer them. Those questions contain brand names and keywords. They do not contain your name, your email or anything else personal, and we would ask you not to put personal information into a keyword.
We do not sell your data and we do not share it for anyone else’s advertising.
If you need a data processing agreement
Agencies often need one, because their own clients ask for it. It is a short contract saying we only handle data on your instructions, that we keep it secure, and what happens to it when you leave.
Email hey@trykeylight.com and we will send ours. If your client insists on their own wording, send it and we will read it.
Where it is kept, and where it travels
The database is hosted in the European Union, in Frankfurt.
We run Keylight from India, so we reach that database from outside Europe, and some of the companies listed above handle data in the United States. Every one of them is bound by a written data processing agreement with us that includes the European Commission’s standard contractual clauses, and the United Kingdom addendum to them where United Kingdom data is involved. Those clauses are the mechanism European law provides for moving personal data outside Europe, and they oblige everyone in the chain to protect it to the same standard.
If you want to know which provider holds what, ask us and we will tell you.
How long we keep it
Your account and everything in it stays while your account is open, and for ninety days after you close it. Then it is deleted. Ask us and we will delete it sooner.
The raw AI answers are kept on the same clock. They are the evidence behind every number we show you, so they are never thrown away while your account is live.
A free report card is kept for seven days, which is also how long the same domain returns the saved result instead of being run again.
Records we need for tax are kept for six years, because Indian tax law requires it.
What you can ask for
You can ask to see the data we hold on you, correct it, export it, or have it deleted. You can withdraw consent for marketing at any time. There is no charge and we will answer within thirty days.
If you are in the United Kingdom you can complain to the Information Commissioner’s Office. If you are in the European Union you can complain to your national data protection authority. If you are in India you can complain to the Data Protection Board after raising it with us first.
Children
Keylight is a business tool and is not for anyone under eighteen. We do not knowingly collect data about children.
Changes
If we change this page in a way that matters, we will email account holders before it takes effect. The date at the top always says when it last changed.