Privacy policy

1. Who we are

KeyBS Trust Intelligence ("KeyBS", "we") is the controller of personal data submitted by customer account holders, and a processor of personal data contained within verification subjects (directors, UBOs, signatories) on behalf of our customers.

2. What we collect

• Account data: name, work email, employer, role, IP and device metadata for security.
• Verification subjects: names, national identifiers where provided by customer or registry, ownership shares, photographs of premises supplied by local agents.
• Usage data: log records sufficient to audit who ordered which verification.

3. Lawful basis (GDPR Art. 6)

Performance of contract for account data; legitimate interest of our customers for verification subject data, balanced against the public interest in counterparty due diligence and the limited scope of categories collected.

4. Retention

Customer-uploaded documents are auto-purged 90 days after a decision is issued. Signed reports are retained 7 years to support audit trails, unless a shorter retention is contractually agreed. Account data is retained for the life of the account plus 12 months.

5. Sub-processors

A current list of sub-processors is published on the Trust & compliance page. We notify customers in writing at least 30 days before adding a new sub-processor.

6. International transfers

Primary data residency is EU (Frankfurt). Where customer contracts elect US residency, transfers use Standard Contractual Clauses and supplementary technical measures (per-tenant KMS keys).

7. Your rights

Data subjects may request access, correction, or deletion via privacy@keybs.example. Where KeyBS is a processor, requests are routed to the relevant customer-controller within 5 business days.

8. Contact & complaints

DPO: dpo@keybs.example. EU representative on request. You have the right to lodge a complaint with your local supervisory authority.