Privacy Policy

17 July 2026

This Privacy Policy explains how KEYFORGE TECH SRL processes personal data when you visit the KeyForge website, purchase a product, create an account, contact us, subscribe to our communications or use KeyForge software.

1. WHO WE ARE

The data controller is KEYFORGE TECH SRL, registered at Str. Livezii 22, Târgu Mureș 540313, Mureș County, Romania.

Unique registration code: 51124658.
Trade Register number: J2025001714006.

You can contact us at info@keyforge.tech.

2. PERSONAL DATA WE PROCESS

The personal data we process depends on how you interact with KeyForge.

2.1 WEBSITE AND DEVICE INFORMATION

When you visit our website, we or our service providers may process information such as your IP address, browser type, operating system, device information, pages visited, referring page, date and time of access, shopping-cart activity, cookie preferences and security information.

2.2 ORDERS AND CUSTOMER ACCOUNTS

When you place an order or create an account, we may process your name, email address, telephone number, billing and delivery addresses, company details where provided, order history, payment status and transaction information.

Payment-card details are processed directly by the payment provider available during checkout. KeyForge normally receives payment confirmation and limited transaction information, not your complete card details.

2.3 CONTACT AND SUPPORT

When you contact us, we may process your contact details, message, attachments, order information and technical information needed to answer your request.

2.4 NEWSLETTER AND MARKETING

When you subscribe to KeyForge communications, we may process your email address, name where provided, consent status, subscription source, email preferences and engagement information.

We use Klaviyo to manage newsletter subscriptions, campaigns and automated email communications.

2.5 REVIEWS AND CUSTOMER CONTENT

If you submit a review, photograph, video or other customer content, we may process the content, your name or chosen display name, your contact details and information connected to the relevant order.

3. HOW WE USE PERSONAL DATA

We process personal data only where we have a valid purpose and legal basis.

3.1 ORDERS AND CONTRACTUAL SERVICES

We use personal data to process payments, confirm and fulfil orders, arrange delivery, provide customer accounts, handle returns or refunds, and provide product or software support.

3.2 COMMUNICATION

We use your contact details to send order information, answer enquiries, provide support and communicate about products or services you requested.

3.3 MARKETING

Where you have provided consent, we use your information to send newsletters, product announcements, offers and other promotional communications.

You can unsubscribe at any time by using the unsubscribe link in an email or contacting info@keyforge.tech.

3.4 SECURITY AND LEGAL COMPLIANCE

We may use personal data to protect the website, prevent spam, fraud or misuse, comply with accounting and tax obligations, respond to lawful requests and establish or defend legal claims.

3.5 IMPROVEMENT AND MEASUREMENT

Where permitted and, when required, after obtaining consent, we may use website and email activity to understand how our services are used and improve their performance.

4. LEGAL BASES

We rely on this legal basis when processing is necessary to accept and fulfil an order, provide a customer account, deliver a product or provide related support.

4.2 LEGAL OBLIGATION

We rely on this legal basis when retaining invoices, accounting records and other information required by Romanian or European law.

4.3 CONSENT

We rely on consent for newsletters, promotional communications and non-essential analytics or marketing technologies.

You may withdraw your consent at any time. Withdrawal does not affect processing carried out before consent was withdrawn.

4.4 LEGITIMATE INTERESTS

We may rely on legitimate interests to protect the website, prevent fraud, respond to general enquiries, maintain our services and defend legal claims, provided that these interests are not overridden by your rights.

5. KEYFORGE MASTER CONFIGURATOR

We rely on this legal basis when processing is necessary to accept and fulfil an order, provide a customer account, deliver a product or provide related support.

5.1 LOCAL CONFIGURATION DATA

KeyForge Master Configurator is designed around local control. Configurations, custom actions, labels and related configuration content are normally stored on your computer and on the connected KeyForge device.

KeyForge does not ordinarily receive the contents of your configurations, and a KeyForge account is not required for normal device configuration.

5.2 UPDATE AND TECHNICAL REQUESTS

The Configurator may connect to KeyForge infrastructure to check application or firmware versions, retrieve release information, download official updates or access documentation.

These requests may process technical information such as your IP address, operating system, Configurator version, firmware version, device model, requested file and the date and time of the request.

5.3 SUPPORT INFORMATION

If you voluntarily send configuration files, screenshots, logs or other technical information to support, we will process that information to investigate and answer your request.

Remove unrelated confidential information before sending files or screenshots.

6. COOKIES AND SIMILAR TECHNOLOGIES

We use cookies and similar technologies for essential website functions, customer sessions, shopping carts, cookie preferences, security, newsletter forms and permitted measurement or marketing activities.

Strictly necessary cookies may operate without consent where permitted by law. Non-essential cookies are activated only after the required consent has been provided.

More information is available in our Cookies Policy.

7. SERVICE PROVIDERS

We use service providers where necessary to operate KeyForge. These may include website hosting and maintenance providers, payment processors, couriers, accounting providers, email providers, software distribution services and security providers.

7.1 KLAVIYO

We use Klaviyo to manage newsletter subscriptions, campaigns, subscriber preferences and automated email flows.

Where the required consent has been provided, Klaviyo may connect website activity to a subscriber profile after the visitor submits a form or follows a tracked link from a KeyForge email.

7.2 GOOGLE RECAPTCHA

We use Google reCAPTCHA on selected forms to protect the website against spam, fraud and automated abuse.

reCAPTCHA may process your IP address, browser and device information, interaction data and other technical information needed to assess security risk.

Google’s privacy information is available at https://policies.google.com/privacy.

7.3 PAYMENTS AND DELIVERY

Payment providers process payment information needed to authorise transactions. Couriers receive the contact and delivery information needed to deliver your order.

Service providers may process personal data only for the services they provide and according to their contractual and legal obligations.

We do not sell personal data.

8. INTERNATIONAL DATA TRANSFERS

Some providers, including Klaviyo and Google, may process information outside the European Economic Area.

Where an international transfer occurs, we rely on a lawful transfer mechanism such as an adequacy decision, the EU–US Data Privacy Framework, Standard Contractual Clauses approved by the European Commission or another appropriate safeguard.

9. DATA RETENTION

We retain personal data only for as long as necessary for the purpose for which it was collected and for applicable legal, accounting, security and dispute-resolution requirements.

9.1 ORDERS AND ACCOUNTING

Order, invoice and accounting information is retained for the periods required by Romanian law.

9.2 CUSTOMER ACCOUNTS

Customer account information is retained while the account remains active and afterwards where required for order records, guarantees, security or legal obligations.

9.3 SUPPORT REQUESTS

Support communications are normally retained for up to 24 months after the request is resolved, unless a longer period is necessary for an ongoing guarantee, dispute or legal obligation.

9.4 NEWSLETTER DATA

Newsletter information is retained until you unsubscribe, withdraw consent or request deletion. We may retain limited suppression information so that your unsubscribe request continues to be respected.

9.5 COOKIE AND SECURITY RECORDS

Cookie consent records and security logs are retained for the period necessary to demonstrate your choice, protect the website and investigate incidents.

10. DATA SECURITY

We use reasonable technical and organisational measures to protect personal data, including encrypted connections, access restrictions, software updates, backups and secure payment processing through specialised providers.

No internet transmission or storage system can be guaranteed to be completely secure.

11. YOUR RIGHTS

Subject to the conditions and exceptions provided by law, you may exercise the following rights:

  • Access: Request a copy of your personal data.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion where the legal conditions are met.
  • Restriction: Request that processing be limited in certain circumstances.
  • Portability: Receive eligible data in a structured and commonly used format.
  • Objection: Object to processing based on legitimate interests.
  • Marketing objection: Object at any time to direct marketing.
  • Withdrawal of consent: Withdraw consent at any time.

To exercise your rights, contact info@keyforge.tech.

We may request information needed to confirm your identity. We normally respond within one month. Where permitted by law, this period may be extended by up to two additional months for complex or numerous requests.

12. COMPLAINTS

You may contact us first so that we can attempt to resolve your concern.

You also have the right to submit a complaint to the Romanian data-protection authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal

13. CHILDREN

Our website and products are not directed at children under 16. We do not knowingly collect personal data from children for marketing purposes.

14. CHANGES TO THIS POLICY

We may update this Privacy Policy when our services, providers, technology or legal obligations change.

The current version will be published on this page with an updated revision date.

15. CONTACT

KEYFORGE TECH SRL
Str. Livezii 22, Târgu Mureș 540313, Mureș County, Romania

Email: info@keyforge.tech

KEYFORGE NEWSLETTER

Make your first
workflow upgrade
for less

Join the Forge and get 10% off your first device, plus product updates and workflow ideas.