Privacy Policy

How Keyremix collects, uses and protects your data. Last updated: 21 September 2026

Introduction

Keyremix is an AI-assisted creative workspace for planning, generating, editing and organising UGC-style carousel content. To provide the Service, we process certain information about you, your account, your workspaces and the content you create or upload. This policy explains what information we collect, why we use it, how we protect it, how long we may retain it, and the choices and rights available to you.

The operator responsible for Keyremix is Biner Labs, reachable at [email protected]. In this policy, “Keyremix”, “Biner Labs”, “we”, “us” and “our” refer to the operator of the Service.

This policy applies to the Keyremix website, application and related services. It does not govern third-party websites or services that you access through external links; their own privacy policies apply.

Data we collect

Account data. This may include your name, email address, authentication identifiers, account settings, plan, workspace memberships and other information needed to create and manage your Keyremix account. Authentication credentials are handled through our authentication provider and are not stored by Keyremix in readable form.

Workspace and organisational data. This includes workspaces, folders, files, carousels, slides, drafts, workspace memberships, preferences and related metadata you create while using Keyremix.

Creative and brand data. This may include prompts, chat messages, creative briefs, Brand Knowledge, personas, hooks, slide copy, carousel plans, references and other information you provide to help Keyremix create or refine content.

Uploaded and generated media. This may include images, videos, screenshots, reference media, generated images and other creative assets you upload, generate or store through the Service.

Billing data. This may include your plan, subscription status, billing cycle, transaction or invoice history, purchased AI credits and customer or subscription identifiers provided by Dodo Payments. Complete payment-card details are submitted directly to the payment provider and are not intended to be stored by Biner Labs.

AI request and output data. When you use AI-assisted features, we may process the prompts, instructions, text, reference media and other inputs needed to perform your request, together with plans, text, images and other outputs generated in response.

Technical and usage data. We may process information such as browser and device type, application or page activity, timestamps, request and performance information, error data and security logs. Infrastructure providers may also process IP addresses or similar network information where necessary to deliver and secure the Service.

Support data. We collect information you send to [email protected] or through other support channels, together with our responses and information reasonably needed to investigate your request.

Keyremix is not designed for storing or processing highly sensitive personal information such as health records, biometric information, political or religious beliefs, government identifiers or similarly sensitive data. Please avoid including such information in prompts, Brand Knowledge, uploads or other content unless it is necessary, lawful and appropriate for your use case. Content submitted to AI features may be processed by third-party AI providers.

How we use your data

To provide the Service: authenticate your account, maintain workspaces, store and display content, process uploads, execute AI-assisted requests, generate creative outputs, and provide the Studio, Community, Brand Knowledge and other Keyremix functionality you request.

To manage accounts and access: authenticate users, enforce plan, storage, usage and AI-credit limits, manage workspace permissions, prevent abuse and protect account and Service security.

To process billing: create subscriptions, process payments and AI-credit purchases, maintain billing status, support renewals and cancellations, and handle failed payments through our payment provider.

To support you: respond to questions, investigate bugs and account issues, diagnose failures and assist with billing or product problems.

To improve Keyremix: understand how features are used, measure performance, diagnose errors, improve reliability and user experience, and analyse aggregated or de-identified usage where practical.

To send service communications: account notices, billing and payment messages, security notifications, material changes to our Terms or Privacy Policy and other operational communications necessary to provide your account.

To send marketing communications where permitted: where consent or another lawful basis is required, we will provide an appropriate way to opt out of marketing messages.

We do not sell your personal information. We do not make your private workspace content available to other customers except where you intentionally share or collaborate through Keyremix. Biner Labs does not use your private workspace content to train a Keyremix-owned foundation model. AI providers that process your requests may handle submitted data under their own terms, retention practices and data-processing policies.

Performance of a contract. We process information necessary to create and manage your account, provide Keyremix features, store your content, process AI requests, enforce your plan and process subscriptions or purchases.

Legitimate interests. Where applicable, we may process information for security, fraud and abuse prevention, service reliability, debugging, aggregated product analysis and reasonable communication with existing users about the Service.

Where applicable law provides a right to object, you may object to processing based on legitimate interests. We will assess the request in accordance with applicable law.

Consent. Where we rely on consent, such as certain marketing communications or optional technologies, you may withdraw that consent at any time. Withdrawal does not affect processing lawfully carried out before consent was withdrawn.

Legal obligation. We may retain or process information where necessary to comply with tax, accounting, payment, regulatory, legal-process or other obligations that apply to Biner Labs.

Cookies and tracking

Keyremix does not currently use advertising cookies or cross-site advertising pixels to build behavioural advertising profiles.

The Keyremix website may use browser storage, cookies or similar technologies to remember necessary preferences and support normal site functionality.

The application uses authentication and session technologies necessary to keep you signed in, protect account access and distinguish one authenticated session from another. These technologies are essential to operating the Service.

We may use analytics and performance-measurement tools, including tools used to understand website usage and application performance. We use these tools to measure product usage, diagnose performance issues and improve Keyremix, not for cross-site behavioural advertising.

Product events may be associated with your account or workspace where necessary to understand feature usage, troubleshoot issues or measure product performance. We retain analytics information only for as long as reasonably necessary for those purposes.

Where applicable law requires consent for optional analytics technologies, we will request that consent before using them.

Third parties and sub-processors

Keyremix relies on third-party service providers to operate the Service. The information shared with a provider depends on the service it performs and is limited to what is reasonably necessary for that purpose.

Authentication and database — Supabase: account information, authentication data, workspace metadata and application data needed to operate Keyremix.

Application hosting and delivery — hosting and infrastructure providers such as Vercel: website/application content, request information, technical logs and performance data needed to deliver and protect the Service.

Media storage — Cloudflare R2: uploaded images, videos, generated assets and related storage metadata needed to store and deliver user media.

Payments — Dodo Payments: information required to process subscriptions and purchases, which may include your name, email address, billing details, transaction information and payment details entered directly with the payment provider.

Communications providers: your email address and the contents or metadata of operational emails or support communications where a third-party provider is used to deliver them.

Infrastructure and security providers: technical and request information necessary to deliver, secure and monitor Keyremix.

Diagnostics and performance services: technical error, performance and request information used to investigate failures and improve reliability.

AI processing — OpenRouter and underlying AI model providers: prompts, instructions, text, images, reference media or other information required to complete an AI-assisted request may be transmitted to OpenRouter and to the model provider used to fulfil the request. Those providers may process or retain data in accordance with their own terms and privacy policies.

The providers Keyremix uses may change as the Service evolves. Where required by applicable law, we will update this policy or provide additional notice when a material change affects how personal information is processed.

Data retention

Account and workspace data are generally retained while your Keyremix account is active and for a limited period after account deletion where reasonably necessary to complete deletion, maintain security, resolve disputes or satisfy legal obligations.

Prompts, chats, carousel content, Brand Knowledge and other creative workspace data may be retained while you keep that content in Keyremix or until you delete the relevant content or account, subject to limited backup, security or legal-retention requirements.

Uploaded and generated media may remain stored while referenced by your workspace or account. Deleted media may remain in backup or recovery systems for a limited period before those copies expire.

Billing, tax and transaction records may be retained for the period required by applicable tax, accounting, payment and legal obligations.

Security, technical and server logs are retained for a limited period appropriate to security, troubleshooting and operational needs.

Support communications may be retained for as long as reasonably necessary to resolve requests, maintain support history, protect the Service or comply with legal requirements.

Deleted information may remain temporarily in encrypted or provider-managed backups until those backups rotate or expire. During that period, backup copies are not used for ordinary product activity.

Security

We use reasonable technical and organisational safeguards designed to protect personal information and user content. Data is encrypted in transit using TLS, and our infrastructure providers provide encryption and security controls for stored data. Authentication credentials are handled through our authentication provider and are not stored by Keyremix in readable form.

Keyremix uses database access controls and workspace-level authorisation designed to prevent users from accessing data they are not permitted to access. Access to production systems is limited to authorised personnel and service providers with a legitimate operational need.

Server-side credentials and secrets used for AI providers, storage, payments and other infrastructure are kept in server-side systems and are not intentionally exposed to the client application.

We use infrastructure and backup/recovery mechanisms appropriate to the Service and take reasonable steps to reduce the risk of data loss.

No online service can guarantee absolute security. If a security incident involving personal information occurs, Biner Labs will investigate and provide notifications to users or authorities where and when applicable law requires it.

Your rights

Depending on where you live and the law that applies, you may have rights to request access to personal information we hold about you, correct inaccurate information, request deletion, restrict certain processing, obtain certain information in a portable format or object to particular processing.

Where processing is based on consent, you may withdraw that consent at any time.

To exercise a privacy right, contact us at [email protected]. We will respond within the timeframe required by the applicable privacy law and may ask for information reasonably necessary to verify your identity and request.

Where permitted by law, we may decline or charge a reasonable fee for requests that are manifestly unfounded, excessive or repetitive.

We may ask you to verify your identity before fulfilling a request in order to protect your account and personal information.

If you believe your privacy rights have been violated, you may have the right to contact the relevant privacy or data-protection authority in your country or region. You may also contact us first at [email protected] so we can try to resolve the issue.

International transfers

Biner Labs operates Keyremix from Indonesia, while our service providers may store or process information in Indonesia, the United States, the European Economic Area and other locations depending on their infrastructure and the services used.

In particular, cloud infrastructure, AI model providers, payment processors and other service providers may process information outside your country of residence.

Where applicable privacy law requires safeguards for international transfers, we and our providers may rely on recognised transfer mechanisms such as contractual safeguards, adequacy decisions or other lawful transfer mechanisms available under the relevant law.

We also seek to minimise the information sent to third parties and use security measures such as encrypted transport where appropriate.

You may contact [email protected] if you have questions about international processing or the safeguards applicable to your personal information.

Children

Keyremix is not directed to children. You must be at least 16 years old to create an account, or older where applicable law requires a higher minimum age to use online services.

We do not knowingly collect personal information from children who are not legally permitted to use the Service. If we learn that we have collected such information contrary to applicable law, we will take reasonable steps to delete it.

Changes to this policy

We may update this Privacy Policy as Keyremix, our providers or applicable privacy requirements change. When we do, we will publish the updated version on this page and update the “Last updated” date.

If a change materially affects your rights or how we process personal information, we will provide additional notice where required by applicable law, which may include an in-product notice or email.

Contact us

For questions about this Privacy Policy, privacy requests, account-data requests or security matters, contact Biner Labs at [email protected].

Biner Labs has not appointed a dedicated Data Protection Officer at this time. If applicable law later requires one, or we appoint one voluntarily, this section will be updated with the relevant contact information.