Privacy Policy
Effective Date: March 15, 2025
Global Key Solutions ("GKS," "we," "our," or "us") values your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you access our website and use our software-as-a-service (SaaS) platform and services (collectively, the "Services").
By using our Services, you agree to the practices described in this Privacy Policy.
Who We Are
Global Key Solutions is a B2B SaaS platform providing regulatory intelligence and data solutions for quality and compliance professionals in the pharmaceutical and life sciences industries.
If you have questions about this Privacy Policy, contact us at: [email protected]
Information We Collect
We only collect minimal personal information necessary to provide our Services.
Information You Provide Directly
When you interact with us, you may provide:
- Name
- Email Address
- Company Name
This information is collected when you sign up for an account or subscribe to our newsletter.
Payment Information
We process payments securely through Stripe or ACH transfers. Payment information is handled directly by these third-party services and is not stored on our servers.
Information We Do Not Collect
We do not collect:
- IP addresses or device data
- Usage tracking data
- Sensitive personal data (health data, financial details beyond billing, etc.)
How We Use Your Information
We use your information to:
- Provide access to the GKSC platform
- Communicate important account-related updates
- Send newsletters or marketing communications (you can opt out at any time)
- Process payments via Stripe or ACH
How We Share Your Information
We do not sell or rent your information. We may share your personal information with trusted third parties who perform services on our behalf, including:
- Google Cloud Platform (GCP) for cloud hosting
- Stripe or ACH for payment processing
- Mailchimp for email communication
These third-party providers have access to limited personal data only as necessary to perform their services and are obligated to keep it confidential.
We may also disclose your information to comply with legal obligations or in the event of a business transfer (merger, sale, or acquisition).
Data Retention
We retain your information for as long as your account remains active. If you delete your account, we will delete your personal information unless otherwise required by law.
Your Rights
You have the right to:
- Request Deletion: If you ask us to delete your personal data, your entire account will be deleted.
- Opt Out of Marketing Emails: You may unsubscribe from our marketing communications at any time by clicking the "unsubscribe" link in our emails.
At this time, we do not provide users the ability to download or export their personal data.
Cookies and Tracking Technologies
GKSC does not use cookies, Google Analytics, or any tracking technologies on our website or platform.
California Privacy Rights (CCPA)
While we currently do not target California residents specifically, we remain committed to user privacy. If our practices change, we will update this policy to reflect CCPA/CPRA requirements.
Children's Privacy
Our Services are intended for professionals in regulated industries. We do not knowingly collect personal information from children under 16 years of age.
Changes to This Privacy Policy
We may update this Privacy Policy periodically. When we do, we will update the "Effective Date" and notify users where required by law. Your continued use of the Services after such changes constitutes your acceptance of the updated Privacy Policy.
Contact Us
For any questions or concerns regarding this Privacy Policy or our data practices, please contact: [email protected]
Addendum: KeyPedia Predictive Chrome Extension
Effective Date: April 27, 2026
The KeyPedia Predictive Chrome extension is a thin launcher for the Global Key Solutions web platform. The same Privacy Policy above applies; this addendum describes the data practices specific to the extension.
What the extension stores
Only your GKS access token (15 minutes) and rotating refresh token (30 days), in Chrome's local extension storage (chrome.storage.local) scoped to the extension's origin. Tokens are not synced across devices and are not accessible to web pages. They are removed when you sign out, when your refresh token expires, or when an administrator revokes your KeyPedia Predictive access.
What the extension reads from web pages
The extension reads text from a web page only when you actively invoke it, via one of:
- Right-clicking selected text and choosing Analyze with KeyPedia Predictive;
- Clicking the toolbar icon and using Paste from page selection in the side panel; or
- Pasting text directly into the side panel's textarea.
The extension uses Chrome's activeTab permission, which only grants temporary access to the current tab in response to a user gesture. It does not read pages in the background and does not have access to your browsing history.
Where your text goes
When you click Search Dashboard → or Ask KeyPedia →, the extension opens a new tab in your browser pointed at your existing GKS web session, with the text passed as a URL parameter: /dashboard?ai_search=<text> or /keypedia/<chat-id>?query=<text>. The extension itself does not store, log, or transmit your text to any server. The text is then handled by the GKS web platform under the Privacy Policy above.
What the extension communicates with
The only network destination the extension contacts directly is the Global Key Solutions backend API hosted on Google Cloud Run, used to authenticate the user and rotate refresh tokens. Specifically:
POST /api/v1/extension/auth/loginPOST /api/v1/extension/auth/refreshGET /api/v1/extension/auth/mePOST /api/v1/extension/auth/logout
The extension does not contact any third-party analytics, advertising, error reporting, or telemetry service.
What the extension does not do
- Does not collect IP addresses, device data, browsing history, or any usage analytics.
- Does not use cookies or tracking technologies.
- Does not include third-party SDKs, ad networks, or trackers.
- Does not transmit data to any party other than the GKS backend.
- Does not read web pages without an explicit user gesture.
- Does not transfer or sell user data and does not use it for purposes unrelated to the user-initiated handoff to the GKS web platform.
Account requirement and access control
The extension is only usable by users with an active Global Key Solutions account that has been granted the keypedia.predictive.accesspermission group. Account-level access can be revoked at any time by a GKS administrator and takes effect on the user's next request to the GKS backend.
Document Store & Payment Processing
When you make a one-time purchase through our Document Store, additional data is collected and processed as described below.
Stripe as a Payment Sub-Processor
We use Stripe, Inc. ("Stripe") to process payments. When you purchase a document, Stripe collects and processes your payment information, including your card details, billing address, and email. We never see or store your full card number; we receive only a tokenized reference, the purchase amount, and the masked card metadata Stripe returns. Stripe is an independent controller of your payment data. Their handling is governed by Stripe's Privacy Policy.
Information We Receive From Stripe
- Stripe Checkout Session ID and Payment Intent ID
- Receipt URL
- Payment status (paid, refunded, disputed)
- Masked card details (last four digits, brand, country)
- Billing email entered at checkout
We retain a copy of the Stripe checkout session payload for each order in order to comply with our record-keeping obligations and to defend against payment disputes.
Document Access & Revocation
A successful purchase creates a record in our system tying your account to the purchased document. Access is permanent until revoked. Access may be automatically revoked when a chargeback or dispute is initiated against the purchase, or when the purchase is determined to be fraudulent. See our Terms of Service for additional purchase terms.
Slack Notifications to Operations
Operational events related to Document Store purchases (such as disputes and reconciliation drift) are routed to internal Slack channels for resolution. These notifications include the user's email and the order amount but do not include card details.
Try KeyPedia Today
Explore our real use cases and discover our features in depth.
Subscribe to our newsletter
Get the latest updates and insights delivered to your inbox