KeybinderKeybinder

Privacy Policy

Last updated: April 10, 2026

Overview

Keybinder is a desktop application that registers global keyboard shortcuts to send selected text to AI providers (OpenAI, Anthropic, Google Gemini). Your privacy is fundamental to how we build this product.

Data We Collect

  • Account information: Email address and OAuth provider (Google or GitHub), used for authentication.
  • License status: Whether you are a free or supporter user, stored in our database.
  • Device sessions: A device identifier to enforce single-device sessions for supporter licenses.
  • Telemetry (anonymous): Automation configuration metadata (provider, model, shortcut) and execution counts. We never collect prompt content, selected text, or AI responses.

Data We Do NOT Collect

  • Your selected text or clipboard content
  • Your AI prompts or responses
  • Your API keys (stored encrypted on your device only)
  • Keystrokes or screen content

API Keys

Your AI provider API keys are stored locally on your device using AES encryption. They are never transmitted to our servers. All AI requests are made directly from your device to the provider.

Third-Party Services

  • Supabase: Authentication and database hosting.
  • Stripe: Payment processing. We do not store your payment information.
  • AI Providers: OpenAI, Anthropic, and Google. Your data is subject to their respective privacy policies when you use their APIs.
  • GitHub: Application distribution and auto-updates.

Cookies

Keybinder uses only strictly necessary cookies — no advertising, marketing, or behavioural tracking cookies:

  • Authentication: Supabase sets session cookies (prefixed with sb-) after you sign in. They are required to keep you logged in and are cleared when you sign out.
  • Language preference: A locale cookie remembers the language you pick in the switcher for up to one year. It is only set when you actively change languages.
  • Payments: Stripe may set session cookies during checkout for fraud prevention. These are managed entirely by Stripe under their own privacy policy.

Our analytics (Vercel Analytics, Vercel Speed Insights) are cookie-less — they use short-lived in-memory identifiers and never write to your device. Because all cookies above qualify as strictly necessary under GDPR / ePrivacy, we do not gate them behind a consent prompt; we disclose them here for transparency.

Data Retention

Account data is retained while your account is active. Telemetry data is retained for up to 12 months. You can request deletion of your data by contacting us.

Security

We use encryption for local storage, HTTPS for all communications, and follow security best practices. However, no method of transmission over the internet is 100% secure.

Changes

We may update this policy from time to time. Changes will be posted on this page with an updated date.

Contact

If you have questions about this privacy policy, contact us at support@keybinder.app.