Keystone Legal
Privacy Policy
How FourthCircle.ai collects, uses, protects, and deletes data for Keystone.
Effective: April 16, 2026Last updated: April 16, 2026
Overview
- FourthCircle.ai operates Keystone, an AI spend visibility and optimization platform for finance teams.
- This policy explains how we collect, use, and protect information when you use our website and services.
Information We Collect
- Account information such as your name, work email address, and company name when you request beta access or create an account.
- Read-only AI provider credentials or usage data exports that you voluntarily provide to connect your providers.
- Usage data, browser details, device metadata, and essential cookies used for authentication and session management.
How We Use Information
- To provide and operate Keystone, including retrieving and displaying AI spend data from connected providers.
- To generate insights, reports, optimization recommendations, and anonymized benchmarking outputs.
- To communicate with you about your account, product updates, and service operations.
How We Protect Data
- Encryption at rest: all API keys and credentials are encrypted using AES-256 before storage.
- Encryption in transit: data transmitted between your browser, our servers, and provider APIs uses TLS 1.2 or higher.
- Read-only access: Keystone does not modify provider configurations or access the content of your AI interactions.
- Access controls: organization-level isolation prevents other customers from viewing your data.
Retention and Sharing
- We retain account data for as long as your account is active and usage data for the duration of your subscription.
- You may request deletion of your data at any time, and stored credentials and usage data are permanently removed within 30 days of account deletion.
- We do not sell, rent, or share your individual AI spend data with third parties.
Third-Party Services and Rights
- Keystone uses Clerk for authentication, Vercel and cloud infrastructure providers for hosting, and privacy-respecting analytics for product improvement.
- You may request access, correction, export, or deletion of the data we hold about you.
- Questions or privacy requests can be sent to legal@fourthcircle.ai.
Contact
Questions about privacy policy can be sent to legal@fourthcircle.ai.