Privacy Policy

Global Key Solutions ("GKS," "we," "our," or "us") values your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you access our website and use our software-as-a-service (SaaS) platform and services (collectively, the "Services").

By using our Services, you agree to the practices described in this Privacy Policy.

Who We Are

Global Key Solutions is a B2B SaaS platform providing regulatory intelligence and data solutions for quality and compliance professionals in the pharmaceutical and life sciences industries.

If you have questions about this Privacy Policy, contact us at: info@keypedia.com

Information We Collect

We only collect minimal personal information necessary to provide our Services.

Information You Provide Directly

When you interact with us, you may provide:

Name
Email Address
Company Name

This information is collected when you sign up for an account or subscribe to our newsletter.

Payment Information

We process payments securely through Stripe or ACH transfers. Payment information is handled directly by these third-party services and is not stored on our servers.

Information We Do Not Collect

We do not collect:

IP addresses or device data
Usage tracking data
Sensitive personal data (health data, financial details beyond billing, etc.)

How We Use Your Information

We use your information to:

Provide access to the GKSC platform
Communicate important account-related updates
Send newsletters or marketing communications (you can opt out at any time)
Process payments via Stripe or ACH

How We Share Your Information

We do not sell or rent your information. We may share your personal information with trusted third parties who perform services on our behalf, including:

Google Cloud Platform (GCP) for cloud hosting
Stripe or ACH for payment processing
Mailchimp for email communication

These third-party providers have access to limited personal data only as necessary to perform their services and are obligated to keep it confidential.

We may also disclose your information to comply with legal obligations or in the event of a business transfer (merger, sale, or acquisition).

Data Retention

We retain your information for as long as your account remains active. If you delete your account, we will delete your personal information unless otherwise required by law.

Your Rights

You have the right to:

Request Deletion: If you ask us to delete your personal data, your entire account will be deleted.
Opt Out of Marketing Emails: You may unsubscribe from our marketing communications at any time by clicking the "unsubscribe" link in our emails.

At this time, we do not provide users the ability to download or export their personal data.

Cookies and Tracking Technologies

GKSC does not use cookies, Google Analytics, or any tracking technologies on our website or platform.

California Privacy Rights (CCPA)

While we currently do not target California residents specifically, we remain committed to user privacy. If our practices change, we will update this policy to reflect CCPA/CPRA requirements.

Children's Privacy

Our Services are intended for professionals in regulated industries. We do not knowingly collect personal information from children under 16 years of age.

Changes to This Privacy Policy

We may update this Privacy Policy periodically. When we do, we will update the "Effective Date" and notify users where required by law. Your continued use of the Services after such changes constitutes your acceptance of the updated Privacy Policy.

Contact Us

For any questions or concerns regarding this Privacy Policy or our data practices, please contact: info@keypedia.com

Addendum: KeyPedia Predictive Chrome Extension

Effective Date: April 27, 2026

The KeyPedia Predictive Chrome extension is a thin launcher for the Global Key Solutions web platform. The same Privacy Policy above applies; this addendum describes the data practices specific to the extension.

What the extension stores

Only your GKS access token (15 minutes) and rotating refresh token (30 days), in Chrome's local extension storage (chrome.storage.local) scoped to the extension's origin. Tokens are not synced across devices and are not accessible to web pages. They are removed when you sign out, when your refresh token expires, or when an administrator revokes your KeyPedia Predictive access.

What the extension reads from web pages

The extension reads text from a web page only when you actively invoke it, via one of:

Right-clicking selected text and choosing Analyze with KeyPedia Predictive;
Clicking the toolbar icon and using Paste from page selection in the side panel; or
Pasting text directly into the side panel's textarea.

The extension uses Chrome's activeTab permission, which only grants temporary access to the current tab in response to a user gesture. It does not read pages in the background and does not have access to your browsing history.

Where your text goes

When you click Search Dashboard → or Ask KeyPedia →, the extension opens a new tab in your browser pointed at your existing GKS web session, with the text passed as a URL parameter: /dashboard?ai_search=<text> or /keypedia/<chat-id>?query=<text>. The extension itself does not store, log, or transmit your text to any server. The text is then handled by the GKS web platform under the Privacy Policy above.

What the extension communicates with

The only network destination the extension contacts directly is the Global Key Solutions backend API hosted on Google Cloud Run, used to authenticate the user and rotate refresh tokens. Specifically:

POST /api/v1/extension/auth/login
POST /api/v1/extension/auth/refresh
GET /api/v1/extension/auth/me
POST /api/v1/extension/auth/logout

The extension does not contact any third-party analytics, advertising, error reporting, or telemetry service.

What the extension does not do

Does not collect IP addresses, device data, browsing history, or any usage analytics.
Does not use cookies or tracking technologies.
Does not include third-party SDKs, ad networks, or trackers.
Does not transmit data to any party other than the GKS backend.
Does not read web pages without an explicit user gesture.
Does not transfer or sell user data and does not use it for purposes unrelated to the user-initiated handoff to the GKS web platform.

Account requirement and access control

The extension is only usable by users with an active Global Key Solutions account that has been granted the keypedia.predictive.accesspermission group. Account-level access can be revoked at any time by a GKS administrator and takes effect on the user's next request to the GKS backend.

Addendum: KeyPedia Connector for AI Assistants

Effective Date: October 6, 2026

The KeyPedia connector lets AI assistants such as Claude, Claude Code and Microsoft 365 Copilot retrieve KeyPedia data on your behalf using the Model Context Protocol (MCP). The Privacy Policy above applies; this addendum describes the practices specific to the connector.

What we receive

Only the requests the assistant makes to KeyPedia tools: search terms, company names, filters, record identifiers, and the name of the tool called, plus your signed-in account and the connected application. We do not receive your conversations with the assistant beyond these requests, and the connector never asks the assistant to send them.

How we use it

To return results from your account, to enforce your subscription's access limits, rate limits and security, and to operate and improve the service. Results are limited to the data your KeyPedia subscription includes.

What the connector can change

By default the connector only reads. If you grant the "Save and share searches for you" permission, the assistant can save searches to your account, keep a temporary list of companies you are working with (kept 30 days), and create share links for your own saved searches. It cannot delete or change anything else.

Sign-in and tokens

You sign in on KeyPedia's own page; the assistant never sees your password. KeyPedia issues the assistant an access token (valid 1 hour) and a refresh token (rotating, valid up to 180 days). Tokens are stored by KeyPedia and by the assistant provider. The assistant provider's own privacy policy governs how it handles your conversations and the results we return.

Retention

Request logs are kept for 30 days. Saved searches you create through the connector are kept like any other saved search until you delete them.

Your controls

Settings → Connected apps lists every connection and the permissions it holds; disconnecting revokes its access immediately. Questions: info@keypedia.com.

Document Store & Payment Processing

When you make a one-time purchase through our Document Store, additional data is collected and processed as described below.

Stripe as a Payment Sub-Processor

We use Stripe, Inc. ("Stripe") to process payments. When you purchase a document, Stripe collects and processes your payment information, including your card details, billing address, and email. We never see or store your full card number; we receive only a tokenized reference, the purchase amount, and the masked card metadata Stripe returns. Stripe is an independent controller of your payment data. Their handling is governed by Stripe's Privacy Policy.

Information We Receive From Stripe

Stripe Checkout Session ID and Payment Intent ID
Receipt URL
Payment status (paid, refunded, disputed)
Masked card details (last four digits, brand, country)
Billing email entered at checkout

We retain a copy of the Stripe checkout session payload for each order in order to comply with our record-keeping obligations and to defend against payment disputes.

Document Access & Revocation

A successful purchase creates a record in our system tying your account to the purchased document. Access is permanent until revoked. Access may be automatically revoked when a chargeback or dispute is initiated against the purchase, or when the purchase is determined to be fraudulent. See our Terms of Service for additional purchase terms.

Slack Notifications to Operations

Operational events related to Document Store purchases (such as disputes and reconciliation drift) are routed to internal Slack channels for resolution. These notifications include the user's email and the order amount but do not include card details.