keeps.so
Log in Sign up
keeps.so

Privacy Policy

1. Introduction

Your privacy is important to us at Lemon Tree Ventures, LLC ("Company", "we", "us"), operating as keeps. This Privacy Policy explains how we collect, use, protect, and share information gathered from visitors, account holders, newsletter subscribers, and makers who interact with our website at https://keeps.so/.

2. Information We Collect

We collect different categories of information depending on how you use keeps:

  • Account holders — name or display name, email address, username, profile photo URL, role, email preferences, and a coarse geographic lookup (city / country / timezone) derived from your IP at signup. We also store engagement records like the products you've upvoted or saved.
  • Newsletter subscribers (no account required) — your email address, the source URL where you signed up, the status of your subscription (pending / verified / unsubscribed), the time of subscription and confirmation, and a one-way hash of your IP address for abuse prevention. Newsletter sign-up requires double opt-in confirmation.
  • Makers (in addition to the account-holder fields above) — the product information you submit: name, tagline, description, screenshots, logo, demo video URL, deal URL, deal terms, categories, and launch schedule.
  • Engagement records — when you upvote or save a product, we record your user ID, the product ID, the time, a one-way hash of your IP, and a device fingerprint. These are used solely to enforce one-vote-per-user rules and to detect coordinated voting.
  • Outreach leads — for our cold outreach pipeline we collect business contact information (founder names, public email addresses, product URLs) from public sources such as Product Hunt, AppSumo, and the maker's own website. See §8 for how we handle this.

3. Log Data and Usage Monitoring

For security and service improvement purposes, we automatically collect and store information about your use of keeps, including IP address, browser type, referring / exit pages, date and time stamps, clickstream data, and the resources you access. We also log click-outs (when you click a "Get the Deal" button) at an aggregate level so makers can see how their listings are performing.

4. How We Use Your Information

We use the information we collect to operate the service, provide customer support, communicate with you about your account or subscription, send the newsletter and digest emails you have opted into, detect and prevent abuse (including vote manipulation, fake accounts, and spam submissions), enforce our Terms of Use, generate per-product analytics for makers, and improve keeps over time. We do not sell personal information.

5. Protection of Information

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. Passwords are handled by Firebase Authentication and never stored by us in plain text. IP addresses used in vote and newsletter records are stored as one-way hashes rather than as raw addresses. While we strive to use commercially acceptable means to protect your personal information, no system is perfectly secure, and we cannot guarantee absolute security.

6. Information Sharing

We do not share personally identifying information publicly or with third parties, except in the following circumstances:

  • When required by law or valid legal process
  • When necessary for the operation of the service (see §7 for the third-party services we use)
  • To protect our rights, safety, or property, or those of our users
  • To investigate, prevent, or take action regarding suspected abuse, illegal activities, or violations of our Terms of Use
  • In connection with a business transfer, such as a merger, acquisition, or asset sale

7. Third-Party Services

keeps relies on the following third-party services to operate. Each one processes a limited slice of your data according to its own privacy policy:

  • Firebase (Google) — authentication, database (Firestore), file storage, and hosting.
  • Resend — sending transactional emails (account verification, password resets, newsletter, digests, maker approval / rejection notices).
  • Instantly.ai or Smartlead — operating our cold-outreach pipeline. Outreach emails are sent from a separate sending domain and do not share infrastructure with our transactional email.
  • Hunter.io — locating publicly available email addresses for makers we want to contact about listing their LTD.
  • Anthropic API (Claude) — generating blog post content and weekly digest editorial. Product-level data and scraped public website content is sent; account-holder personal data is not.
  • Cloudflare — content delivery, caching, and DDoS protection.
  • ipinfo.io — coarse geographic lookup (city / country / timezone) at account creation.

keeps also links out to maker-operated websites whenever you click the "Get the Deal" button or any other outbound link. We have no control over those sites and are not responsible for their privacy practices.

8. Cold Outreach to Makers

We send cold outreach emails to makers we believe would benefit from listing their LTD on keeps. The contact information used for outreach comes from public sources such as launch boards, the maker's website, and email-discovery services. Outreach emails are sent from a separate sending domain so they don't affect the deliverability of our transactional email. Every outreach email includes a clear unsubscribe link, and we honor unsubscribe requests immediately by adding the address to our suppression list — once on the list, an address receives no further outreach. We do not send outreach to recipients in jurisdictions that require opt-in for B2B email (notably Germany and Canada under CASL).

9. Email Communications

If you have an account, we send you transactional email related to your activity (verification, password resets, product approval / rejection, etc.). If you opt into the newsletter or weekly digest, we send those at the frequency you have selected. When an email hard-bounces or a recipient flags an email as spam, that address is added to an internal suppression list to protect our sending reputation, and we will not send further marketing email to it.

10. Public Information

Some of the information you provide is intentionally public on keeps:

  • Submitted products that are approved appear publicly at /p/{slug} and may appear in our blog, newsletter, leaderboards, and category pages.
  • Approved listings remain indexed on keeps and in search engines after the deal expires, with a "deal ended" notice. This is intentional — it preserves the SEO footprint and historical record. If you want a listing removed entirely, contact us.
  • Profile information you publish (display name, username, photo, bio, links) is visible at /u/{username}.
  • Aggregate engagement counts (total upvotes, total saves) are shown on product and profile pages. Who specifically voted or saved is not exposed.

11. Cookies and Local Storage

We use cookies and browser local storage to keep you signed in, remember your preferences, and detect repeated abuse from the same browser. We do not currently run third-party advertising trackers. We may use a privacy-respecting analytics provider (such as Plausible) that does not track individuals across sites.

12. Your Data Rights

Under GDPR, CCPA, and other data protection laws, you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data.
  • Object to or limit the processing of your data.
  • Request data portability (to receive your data in a common, machine-readable format).
  • Withdraw consent at any time, where processing is based on consent (for example, unsubscribing from marketing email).

You can exercise many of these rights directly through your account settings — including unsubscribing from email, editing your profile, and closing your account. For anything else, email hello@keeps.so and we will respond within a reasonable timeframe.

13. Data Retention

We retain your personal information only for as long as necessary to provide the service and fulfill the purposes outlined in this policy. Account information is kept while your account is active; if you close your account, we delete or anonymize your personal information within 90 days, except where a longer retention period is required by law, security, or abuse-prevention purposes. Newsletter subscriber records are kept while your subscription is active and for a limited period after unsubscription to honor the unsubscribe state. Approved product listings, once published, remain on keeps even after a maker's account is closed (see §10) — if you want the listing taken down entirely, contact us. Suppression-list entries (bounced or complained addresses) are retained indefinitely to protect against repeated harm.

14. GDPR Roles

For the personal data we process about users — account holders, newsletter subscribers, and makers — keeps acts as the data controller. The legal bases on which we rely include:

  • Consent: For newsletter signups and any non-essential marketing communications.
  • Performance of a contract: To provide you with the services you have signed up for.
  • Compliance with legal obligations: When we are required to do so by law.
  • Legitimate interests: To improve the service, prevent fraud and abuse, ensure platform security, and conduct B2B cold outreach where local law permits.

keeps does not process personal data on behalf of customers (the way an analytics or email-sending tool would), so we are not a data processor for the data of your end users — there is no DPA to sign.

15. California Privacy Rights

California residents may have additional rights regarding their personal information under the California Consumer Privacy Act (CCPA) and other state laws — including the right to know what categories of personal information we collect, the right to delete it, and the right to opt out of any sale. We do not sell personal information. For any other California-specific requests, contact us at hello@keeps.so.

16. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ. Lemon Tree Ventures, LLC is incorporated in the State of Delaware, United States, and most of our infrastructure runs on Google Cloud Platform in the United States. For transfers of personal data from the European Economic Area, the UK, and Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) where required.

17. Children's Privacy

keeps is not directed to children under 16, and account creation requires you to be at least 16 years old (see our Terms of Use). We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page, updating the effective date, and — when changes affect how we handle existing data — by email to account holders. You are advised to review this Privacy Policy periodically for any changes.

19. Your Choices

You are free to refuse our request for your personal information, understanding that we may be unable to provide you with some of the service in that case. Your continued use of keeps will be regarded as acceptance of our practices around privacy and personal information.

This policy is effective as of 21/05/2026.