Privacy policy
KeepStone is a backup application that runs on your Windows PC. The publisher of KeepStone does not run any server that receives your files, your account details or information about how you use the app. KeepStone has no analytics, no advertising and no telemetry sent to the publisher.
What KeepStone accesses
- Your files: only the folders an administrator of your PC chose to back up. They are compressed and encrypted on your PC (Argon2id and XChaCha20-Poly1305) before they are written to the backup location. Nobody without your password can read them, including the publisher, Google and Microsoft.
- Google Drive (when you connect an account): the
drive.filepermission, which only reaches files and folders KeepStone itself created in your Drive. KeepStone cannot see or change your other files. It also reads your Google account e-mail address and identifier (openid,email), only to show which account is connected and to recognize it when you sign in again. - OneDrive (when you connect an account): the
Files.ReadWrite.AppFolderpermission, which only reaches theApps/KeepStonefolder, and your account name and identifier (openid,profile).
Where your data is kept
- Encrypted backups are stored only where you chose: another disk, a network share, or your own Google Drive or OneDrive.
- The authorization to your cloud account (a refresh token) and the account e-mail are stored only on your PC, sealed with Windows Data Protection (DPAPI). They are never sent to the publisher or to anyone else.
- Data obtained from Google or Microsoft is used only to store and read your own encrypted backups. It is not sold, shared, used for advertising, or used to train any model.
Management console (optional)
An organization may connect your PC to its own KeepStone management console. The console then receives the status of this PC: backup results, alerts, settings and the audit trail. It never receives your files, keys, passwords or cloud tokens. That console is operated by the organization, not by the publisher, and its privacy terms are the organization's.
Removing access and data
- Removing a cloud account in KeepStone deletes its authorization from your PC and revokes it at Google. You can also revoke it at myaccount.google.com/permissions or account.live.com/consent/Manage.
- Your backups stay in your storage until you delete them, for example by deleting the KeepStone folder in your Drive.
Google API Services User Data Policy
KeepStone's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Changes and contact
Changes to this policy are published on this page with a new effective date. Questions: chowder-woof-mulch@duck.com.