Privacy Policy

This notice describes the public website's contact, demonstration terminal and MD Exchange data flows. KeyGroup is the name used on this website; that name alone does not identify the legal entity responsible for processing your data.

The contact details reproduced below were already published on this website. The responsible legal entity, registration details and the current role of the published address are not confirmed in this notice. Contact Info@key-g.com to request clarification before sending information that depends on those details.

This notice does not certify compliance with the GDPR, Delaware law or any other legal regime. The rights and obligations that apply depend on the relevant law and processing circumstances. It is published in English across locale routes and does not govern the separately operated products linked from portfolio pages.

Contact forms send the information you enter, such as your name, email, phone number and enquiry or selected subject, to the website's lead endpoint. The submission also includes its source, page URL and language. The endpoint stores a lead record with a timestamp and status; the lead reader requires administrator authentication.

These details provide a way to handle your enquiry and identify the context in which it was submitted. Do not include passwords, identity documents, payment details or other sensitive information in enquiry fields or page URL parameters.

The homepage terminal sends the conversation messages you enter to the website's demonstration endpoint. The current implementation returns preset responses rather than contacting an AI model provider. Its browser conversation state and this endpoint do not establish a general zero-retention promise: this notice does not confirm infrastructure logging or backup practices.

Registration collects an email address, username and password. The application stores the email and username, a password hash, display name, account creation time and a session token. Login checks the password against the stored hash and issues a session token.

Uploads store the title, description, Markdown content, category, tags and author relationship. File records also hold creation and update times, publication status and star and download counts. Published files appear in public listings, and file detail responses expose content and author information such as username, display name, bio and avatar when present.

Published files and their public author information are not confidential. Public listings and detail pages show published files; the detail and download APIs permit access to an unpublished draft only for its signed-in author. Material already received by a visitor can remain in their browser or downloaded copy after publication status changes. Do not upload personal information about other people, secrets or material you are not entitled to publish.

Starring records an association between an account and a file. Download requests record the file, time, an account identifier when available and an IP address taken from request headers when supplied. The interface may allow a download even if recording the event fails.

MD Exchange uses an md_session cookie for account authentication. Its configured browser lifetime is 30 days; this cookie lifetime is not a retention period for account data. Logout clears the browser cookie and the matching stored session token. Changing the website language stores the selected code in browser local storage under kg-lang.

When configured with public analytics identifiers, the website loads Google Analytics and Yandex Metrika. The Google configuration sends the current page path; the Yandex configuration enables click mapping, link tracking, bounce tracking and Webvisor session recording. These providers may process visit, device and interaction data under their own policies. Whether these integrations are enabled in the deployed site and their provider-side retention settings are not confirmed here.

The current analytics integration has no consent-choice gate in its loading path. This notice does not claim that analytics starts only after permission or that a cookie banner provides a control which does not exist. You can use browser storage settings or tracking protection, but doing so may affect account functionality and does not delete server records.

External links take you to another provider's site. Loading externally hosted images or scripts also makes a network request to their hosts. Consult the relevant provider's privacy information before using its services; this website's notice does not control those providers.

Lead, account, contribution, star and download records are stored through the website's database layer. Public file content and associated author information can be viewed and copied by other visitors. The website does not provide evidence here of lead-data sharing for advertising, so this notice does not assert such a practice.

A verified schedule for retention, backups, infrastructure logs and deletion has not been published here. Logging out or removing a browser cookie does not remove an account or an enquiry. Deleting a file cannot recall copies already downloaded by other people.

The hosting and database processor identities, storage countries, transfer arrangements and applicable legal bases require confirmation from the responsible operator. This notice does not assert particular cross-border safeguards or that all processing takes place in a specific jurisdiction.

Password hashing is present in the account implementation. That observation is not proof of encryption at rest, regular security audits or complete protection against unauthorised access. Do not submit information whose sensitivity exceeds the purpose of an enquiry or public contribution.

You can email Info@key-g.com to ask what personal information is held about you, request correction or deletion, object to a use, or ask about portability and the legal entity responsible. Describe the account or enquiry concerned and the action requested without sending a password. The operator may need sufficient information to identify the relevant record and verify the requester.

Which rights apply, any lawful retention exceptions and the response deadline depend on applicable law. This page does not promise a fixed four-week response or automatic deletion. If a right to complain applies, you can contact the relevant supervisory authority.

An authenticated MD Exchange user can view their account's file list and request deletion of their own uploaded files through the profile interface. There is no self-service account deletion or full personal-data export control in the inspected public interface; use the email contact for those requests. Logging out ends the current session rather than deleting the account.

For privacy questions, requests and clarification of the responsible legal entity, email Info@key-g.com.

Previously published address: Unit B, 17/F, United Centre, 95 Queensway, Admiralty, Hong Kong. Its current status as a business, correspondence or privacy-request address is not verified here.

Previously published phone: +1 302 608 0669. Use the email address for a written request and do not send sensitive documents until the intended recipient and purpose are confirmed.

Changes to this notice are reflected on this page. The earlier page stated May 20, 2021 as its effective date; that historical statement does not establish an effective date or legal approval for the current wording.