Privacy Policy

1. Who we are

Ultimate Keywords is tha all-in-one keyword tool created and maintained with integrity. It was designed to ethically collect its data sources, and to protect it’s users. We value your privacy and strive for transparency.

2. Information we collect

We collect only what is needed to operate your account and the product:

• Account information: email address, a securely hashed password (we never store your plain-text password), display name, and plan status.
• Usage data: which modules you run and how often, used only to enforce your plan’s daily and monthly limits.
• Signal snapshots: compact records (topic, source, region, metric value, timestamp) generated when you run a module, kept for seven days to power your intelligence report, then automatically deleted.
• Billing information: if you subscribe or make a one-time purchase, payment is processed entirely by Stripe. We never receive or store your full card number – only a Stripe customer/subscription reference. Cryptocurrency transactions are secure as well, and wallet address information used in transactions will be deleted from our database soon after processing your payment.
• Security and audit logs: a hashed (not raw) record of your IP address alongside events like login, logout, registration, and billing changes, used to detect abuse and troubleshoot account issues.
• Uploaded files: if you use a CSV-upload module (such as Micro-Regional Arbitrage or Seasonality Clashes), the file is processed in memory to produce your results and is not stored afterward.

3. What we do not do

• We do not store raw HTML or raw upstream API responses from the public sources our modules query.
• We do not sell your personal information to third parties.
• We do not retain your uploaded CSV files after your module run completes.
• We do not place any payment card data on our own servers – that is handled entirely by Stripe.

4. How long we keep data

• Signal snapshots: automatically deleted after seven days by a scheduled cleanup process.
• Saved reports you choose to export: kept in your account until you delete them or close your account.
• Account and billing records: kept for as long as your account is active, and afterward only as required for legitimate business, security, or legal purposes (for example, fraud prevention or tax records).

5. Cookies and local storage

We use a small number of cookies and browser-local storage values, described here in full. We do not use third-party advertising or tracking cookies.

• Session cookie: keeps you signed in. Set as HTTP-only (not readable by page scripts) and Secure (only sent over HTTPS). Expires after 12 hours of inactivity or when you log out.
• Protection cookie/token: a security token tied to your session, used to confirm that form submissions (login, registration, password changes, billing actions) actually originate from our own pages rather than a malicious third-party site. It contains no personal information.
• Local storage (not a cookie, stays on your device only): your color theme choice, music on/off preference, and reduced-motion setting are saved in your browser’s local storage, not sent to our servers, and not shared with any other site.

You can clear cookies and local storage at any time through your browser’s settings. Doing so will sign you out and reset your saved display preferences, but will not affect your account, subscription, or saved reports, which are stored server-side.

6. Cookies set by our service providers

Two providers we use may set their own cookies as part of protecting or processing your visit:

• Cloudflare, our content delivery and security provider. Privacy policy: https://www.cloudflare.com/privacypolicy/
• Stripe, our payment processor. Privacy policy: https://stripe.com/privacy
• Brevo, our email delivery provider. Privacy policy: https://www.brevo.com/legal/privacypolicy/

7. Who we share information with

We share the minimum necessary information with the following service providers, each acting on our behalf:

• Stripe – payment processing for subscriptions and one-time report purchases.
• Our email delivery provider – sending account verification and password-reset emails.
• Our hosting provider – running the application and database.

We do not share your personal information with anyone else except where required by law.

8. Your choices and rights

• You can update your account details or delete saved reports from within the app.
• You can cancel a subscription at any time from your account’s billing page; cancellation takes effect at the end of the current billing period.
• You can request a copy of your personal data or ask us to delete your account by contacting [email protected].
• If you are located in a jurisdiction with specific statutory rights (such as the EU/UK or California), you may have additional rights – contact us to exercise them.

9. Security

Passwords are stored using a strong one-way hash, never in plain text. Account verification and password-reset links use single-use, time-limited tokens. We apply rate limiting to authentication endpoints to reduce automated abuse, and all production traffic is served over HTTPS.

10. Children’s privacy

Ultimate Keywords is not directed at children and is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this policy as the product changes. Material changes will be reflected by updating the “Last updated” date above. Continued use of Ultimate Keywords after a change means you accept the revised policy.

12. Contact us

Questions about this policy or your data can be sent to [email protected]. This policy is governed by the laws of USA.