THE IMPORTANT DETAILS

Privacy

Your words deserve a clear explanation of where they go.

Draft for the beta — not legal advice. The final privacy policy will be published after legal review, before public launch.

Who is responsible for your data

KeyEspresso is operated by Creative Web Srl, Via Goldoni 12, 05100 Terni, Italy. Creative Web Srl is the data controller for the personal data described here. For privacy questions and requests, contact privacy@divbyzero.com.

This policy covers the KeyEspresso website, extension and library features. Sign-in, profile, teams and subscriptions are also explained in the DivByZero Account privacy policy.

Data we process

Without an account, your snippets are stored only in your browser.
With an account, your snippets, folders and versions are stored on our servers to sync them. Identity, teams and billing are provided by DivByZero Account.
The extension has access to the sites you visit (Chrome shows this when you install it) and checks text before the cursor to recognize shortcuts. Shortcut matching happens in your browser. Sensitive-field checks exclude password, payment and one-time-code fields, and you can pause expansion on any site. Some optional features process additional content as described below.
Diagnostic reports are opt-in; you see the exact content first. They never include typed text, snippet contents, field values or clipboard.

Accounts and shared libraries

When you connect an account, KeyEspresso processes account identifiers, profile and team information, browser connection credentials, and the library content you sync. DivByZero Account handles sign-in, team membership and billing. Content placed in a team library is available to the team members permitted to access that library. Disconnecting a browser is not the same as deleting the account or its cloud content.

Page content and clipboard features

Templates can use information from the page, selected text, form fields or the clipboard when you run a feature that requests it. That content can become part of the text you insert. If you include it in an AI request or save it in a synced snippet, it is also processed for that purpose. The site-access permission does not mean every page you visit is uploaded.

Optional AI assistance

When you run an AI step, the resolved instruction and the context you choose to include are sent to the KeyEspresso server to generate a response. Context can include selected text, existing field text or visible page text. When OpenRouter is the configured provider, the server sends this request to OpenRouter and the model provider serving it. Review the proposed context before sending it; ordinary text expansion does not require an AI request.

The OpenRouter integration requests providers that disallow data collection. This setting is not a promise that every processor retains no operational data. Provider handling is described in OpenRouter’s privacy policy. KeyEspresso records AI request metadata such as account and workspace identifiers, provider and character counts; the application’s AI request log does not include the prompt or context text.

Email and website analytics

We use Mailgun to deliver account and service emails. This involves processing recipient email addresses, message content and delivery information. See Mailgun’s privacy policy.

We use Google Analytics to understand how visitors use the KeyEspresso website. Depending on its configuration and your privacy choices, it can process cookie identifiers, device and browser information, page views and interactions. See Google’s information on Analytics data handling and its Analytics opt-out tool.

Retention and deletion

Our retention policy is to keep service logs for up to six months and complete requests to delete personal account data within 30 days, except where retention is required by law. To request deletion, contact privacy@divbyzero.com. These periods are our service policy; they do not describe separate retention settings operated by third-party providers.

Deleting a personal library does not delete shared team content or the separate DivByZero Account. Account deletion requests must cover those services explicitly. Local copies and exports remain under your control.

Your controls

You can use a local library without connecting an account, pause expansion on a site, restrict site access in Chrome, export your library and remove local snippets. Keep an export before clearing browser data or uninstalling the extension. Clearing local data does not remove copies you previously synced, exported or shared.

Why we process your data

We process library and account information to provide the features you request, including sync, sharing and optional AI assistance (performance of a contract, Article 6(1)(b) GDPR). We process operational and security information to protect the service and prevent abuse (legitimate interests, Article 6(1)(f)), and retain records when required by law (Article 6(1)(c)).

Your privacy rights

You can request access, correction, erasure or a portable copy of your personal data, and request restriction of or object to processing where applicable. Write to privacy@divbyzero.com. You may also complain to the Italian data protection authority or the authority where you live.

Before this policy is finalized

The retention and deletion periods above have been selected for KeyEspresso. Production enforcement, backup expiry, analytics consent settings and safeguards for international processing still need to be verified. This page remains a draft until those checks are complete.