Privacy Policy

Last updated: August 8, 2026

Northkey ("Northkey", "we", "us") provides a white-label marketing platform for independent professionals — a branded page, social media publishing, and newsletter tools. This policy explains what information we collect, how we use it, and the choices you have, both if you're a Northkey subscriber ("Agent") and if you're a visitor to an Agent's page or a recipient of their communications ("Client").

1. Information we collect

From Agents, when you create and use a Northkey account:

• Account details: name, email, phone, professional title, license number, and brokerage/firm.
• Billing information, processed directly by Stripe — Northkey never stores your card number.
• Content you upload or create: photos, logos, branding choices, and posts.
• Data about your own clients that you choose to import or enter (name, email, phone, and notes you add), which you control and can delete at any time.
• Access tokens from third-party services you choose to connect — Meta (Facebook/Instagram) and Telegram — stored encrypted, used only to publish content on your behalf.

From Clients, only what's needed for the specific feature you use:

• Email address, if you subscribe to an Agent's newsletter through their page.
• Any information an Agent adds about you directly, as part of their own client records.

2. How we use information

• To operate the platform: hosting your branded page, publishing approved posts, sending newsletters.
• To process payments and manage subscriptions, via Stripe.
• To communicate with you about your account, including by email or Telegram if you've connected it.
• To improve the product and fix problems, using aggregated, non-identifying usage information.

We do not sell personal information, ever.

3. Third-party services we rely on

Northkey is built on top of a small number of trusted infrastructure providers, each of which processes data on our behalf under their own privacy and security terms:

• Supabase — database and file storage.
• Vercel — application hosting.
• Stripe — payment processing.
• Meta (Facebook/Instagram) — publishing posts you approve, when you connect an account.
• Telegram — sending you draft posts for approval, if you connect it.
• Resend — transactional and newsletter email delivery.
• AI providers (Anthropic, Google) — used to draft post and newsletter copy from content you provide.

4. Data retention

We keep account and client data for as long as your account is active. If you close your account, we delete your data within 30 days, except where we're required to keep billing records for longer to comply with the law.

5. Your rights

You can access, correct, export, or delete your data at any time from your dashboard, or by emailing us. If you're in Canada, this is provided under PIPEDA; if you're in the EU/UK, under the GDPR — either way, the rights and the process are the same for everyone.

6. Cookies

We use only the cookies necessary to keep you signed in and to remember basic preferences (like your chosen language). We don't use third-party advertising or tracking cookies.

7. Children's privacy

Northkey is a business tool and isn't directed at, or knowingly used by, anyone under 18.

8. Changes to this policy

If we make material changes, we'll update the date at the top of this page and, for significant changes, notify Agents by email.

9. Contact

Questions about this policy or your data? Email us at privacy@northkey.app.