This Privacy Policy explains how Keenfunnel LLC ("Keenfunnel", "we", "us") uses personal data when you visit our sites, contact us, book a call, use our tools or work with us. It covers keenfunnel.com, keenfunnel.agency and their subdomains, including legal-center.keenfunnel.com and our booking pages (together, the "Sites").
Keenfunnel LLC, 418 Broadway STE 4000, Albany, NY 12207, United States, is the controller of the personal data described in this policy.
Other notices cover specific situations:
Visiting our Sites. We collect device and usage data, such as your IP address, browser, the pages you view and the links you click. Some tools also record your session on the page or identify the company behind your visit. Where the law requires it, analytics, session recording and visitor identification depend on your consent; strictly necessary cookies rely on our legitimate interest in running secure Sites. Our Cookie Policy lists the tools and how long their cookies last.
Forms, chat and bookings. When you write to us, use a chat widget or book a call, we collect your name, email address, company, message and the answers you give. We use them to reply to you and prepare the call. Legal basis: steps you ask us to take before a contract, or our legitimate interest in answering you. We keep these data until your request and any follow-up are complete, unless you become a client.
Clients. We process the contact and billing details of client contacts, contracts, invoices and project communications. Legal basis: the performance of our contract and our legal obligations on invoicing and tax. We keep these data for the term of the contract and then for as long as tax and commercial laws require.
Marketing. We use your name, email address and how you interact with our emails to send you news about our services. Legal basis: your consent or, for existing clients, our legitimate interest in sending news about similar services, with an opt-out in every message. We keep these data until you unsubscribe, and then keep your email address on a suppression list so we do not contact you again. Our Outbound Communications Policy explains our rules.
ISO/IEC 42001 readiness assessment. Our assessment note explains what happens to your answers.
Calls and AI voice agents. If we call you, including with an AI voice agent, we process your phone number, the content of the call and, if we tell you so at the start, a recording. We make these calls only with the consent the law requires.
Security, sanctions and legal compliance. We keep logs, prevent fraud, check clients and their owners against sanctions lists and answer lawful requests from authorities. Legal basis: our legal obligations and our legitimate interest in protecting our business. We keep these data for as long as these purposes or the law require.
We do not sell the personal data described in this policy.
Keenfunnel is based in the United States, and our providers may process data in other countries. For data from the European Economic Area, the United Kingdom and Switzerland, we rely on an adequacy decision where one exists, including the EU-US Data Privacy Framework for certified providers, or on the European Commission's standard contractual clauses, with the UK addendum or the Swiss adaptations. For data from Brazil, we use the standard contractual clauses approved by Brazil's data protection authority. You can ask us for a copy of the safeguards.
You can ask us to:
Where we rely on your consent, you can withdraw it at any time; this does not affect what we did before.
To use your rights, write to legal@keenfunnel.com. We reply within one month. If a request is complex, we may need two more months and will tell you why. We may ask you to confirm your identity. Using your rights is free.
If you are not satisfied, see our Complaints and Dispute Resolution page. You can also complain to a data protection authority, such as the Agencia Española de Protección de Datos (AEPD) in Spain, the Information Commissioner's Office (ICO) in the UK, or the authority where you live or work.
We protect personal data with technical and organizational measures appropriate to the risk. If a personal data breach affects you, we notify the competent authority within 72 hours where the law requires it, and tell you directly if the risk to you is high.
Our Sites and services are not directed at children, and we do not knowingly collect personal data from anyone under 18.
We do not make decisions that have legal or similarly significant effects on you based solely on automated processing.
We show the date of the latest change at the top of this page. If we make material changes that affect how we use data we already hold, we tell the people concerned where we can reach them.