Privacy Policy

The data controller for personal data processed through KeyBid is Rachit Seth (sole proprietor), based in India.

• Email: support@keybid.lol
• X (Twitter): @seth_rachit_

We believe in data minimization and collect only what is strictly necessary to operate the auction board, process payments, and prevent abuse:

• Checkout and Listing Data: When you place a bid, we collect the submitted URL, brand name, logo, short description, bid amount, and target keyboard key slot. Payment verification tokens and transaction IDs from Dodo Payments are stored to confirm placement.
• Payment Information: Card details, billing address, and payment credentials are collected and processed directly by our payment processor, Dodo Payments. KeyBid never receives or stores your full credit card number or billing details.
• Aggregated Click Metrics: When visitors click a key on the keyboard, we record only an aggregate click increment (click_count). We do not track individual visitor identities, user profiles, or store personal IP addresses alongside clicks.
• Technical Logs: Standard request data (IP address, browser user agent, referrer) may be temporarily processed by our cloud infrastructure providers (Vercel and Supabase) solely for network routing, security, and DDoS mitigation.
• Direct Correspondence: If you contact us via email or X for support or dispute inquiries, we retain the conversation to assist you and maintain business records.

KeyBid does not use third-party tracking, advertising, or cross-site analytics cookies.

• Session Storage (Functional): During checkout, we temporarily store an unguessable verification token (client_token) in your browser’s sessionStorage. This links your active checkout tab to the payment verification endpoint to prevent order spoofing, and is deleted when the tab closes.
• Local Storage (Preferences): Your browser stores your light/dark theme preference locally so the site displays in your chosen theme.

• Contractual Performance: To process payments, verify bids, assign your listing to the requested keyboard slot, and display your brand publicly on the board.
• Legitimate Interests: To maintain platform security, prevent bot spam and fraudulent bids, display live rankings, and resolve support requests.
• Legal & Tax Obligations: To maintain accounting records, transaction histories, and comply with applicable financial reporting laws.

KeyBid is an open public leaderboard. Information submitted for a keycap slot — including your brand name, logo, short description, destination URL, and confirmed bid amount — is publicly visible to all site visitors and search engines.

When a listing is submitted, our servers may fetch open graph metadata (title, description, favicon) from the destination URL to render the keycap properly.

We do not sell, rent, or trade your personal data. We share necessary operational data only with trusted providers:

• Dodo Payments: Merchant of record and payment gateway handling checkout transactions and fraud prevention.
• Supabase: Cloud database infrastructure for securely storing keys, bids, and order verification states.
• Vercel: Application hosting, edge network, and serverless compute infrastructure.

Public key listings remain displayed as long as your bid holds the slot. When a slot is outbid, historical bid records and payment verification IDs are retained in database archives as necessary for accounting, tax compliance, and legal dispute defense.

Temporary pending bid locks expire automatically after 15 minutes if payment is not completed.

Under applicable data protection laws (including the GDPR and India’s Digital Personal Data Protection Act), you have rights to request access to, rectification of, or deletion of personal data we hold about you.

To exercise any of these rights, contact us at support@keybid.lol. Note that publicly visible data from your company website that you chose to place on the public board is governed by the Terms of Service.

KeyBid is intended for adults, founders, and businesses. We do not knowingly collect personal information from children under the age of 18. If you believe a child has provided us with personal data, please contact us for prompt deletion.