Privacy & data handling
Private by default
A personal archive should not become public merely because it lives on the web. Keepsake separates public product information from private journals and invitation-only reading.
Access
Journal, newsroom, archive, and reader content require authentication or a personal invitation. Postal and invitation pages are excluded from search indexing.
AI processing
When an editor invokes transcription or editorial features, Keepsake sends the content required for that operation to the configured service provider. Keepsake does not publish that private content or use it to build public search pages.
Export
Supported plans provide archive and periodical exports so the editor can keep copies outside the application. Export links are time-limited and are not included in the public sitemap.
Deletion
Account deletion removes the publication and its archive through the productโs deletion workflow. A deleted public postal address returns a gone response without retaining the former editor or publication name on the page.
Analytics
Public-site analytics can measure page paths and referral sources. Private journal text, invitation tokens, and access credentials are not analytics dimensions.