Privacy Policy
We keep exactly two identifiers — your Telegram account and the machine the plugin runs on. Nothing else is needed to issue and check a license. This is a short English summary; the full Russian policy at keyostore.ru/privacy/ is the canonical text.
Summary of the policy dated August 13, 2026
What we collect
The dataset is minimal and dictated entirely by issuing a key and checking that it's used by the rules:
| Telegram identifier | the numeric account ID, plus the display name and username if they're public in your profile — the messenger itself passes them to the bot |
|---|---|
| Bot conversation | messages you send to the bot: orders, support requests, attached screenshots |
| Device identifier | a hash of the hardware configuration of the computer where the plugin is activated |
| License records | the issued key, issue and activation dates, plugin and OS version, trial status, and the computer's name — set by its owner, it helps tell activations apart |
| Technical logs | IP address and request time on the license server — kept in service logs |
| Payment facts | the fact of payment, amount, date and order number — reported by the payment provider |
What we never collect
- your email address — purchase and support run entirely through Telegram;
- your full name, passport data, address or phone number — not needed for the purchase or the plugin;
- card details — they're entered on the payment provider's side and never reach us;
- the contents of your projects: video, audio, files, sequence and clip names;
- anything happening on your computer outside the plugin panel.
No special categories of personal data and no biometrics are processed.
What the plugin sends
On activation the plugin sends the license server three things: the license key, the device identifier and the plugin version. The server replies with confirmation that the license is valid.
After that, while the panel is open and the network is up, a short heartbeat with the same device identifier goes out once a minute — that's how the one-session limit works: it says the panel is open here, right now. It carries nothing else.
The plugin never reads project contents and never sends out anything you're working on. It changes standard Premiere Pro keyframes and writes nothing of its own into the project. Curve editing and applying to keys run on your machine with no network involved.
Offline, an activated plugin keeps working for up to 14 days in a row — a constant connection isn't required.
Why we need it
- issue the license key and link it to the buyer;
- check the key is used within the license terms: no more than two devices, one session at a time;
- grant the trial once per device;
- restore access and reset bindings when you change computers;
- answer support requests and handle refund claims;
- meet tax obligations — receipts are issued through the payment provider;
- protect the plugin from illegal copying and key sharing.
Where and how long
Data of users from Russia is stored in databases located in Russia, as local law requires. In plain terms, the clocks run like this:
| License and device records | for as long as the license is active — the license is perpetual, so until you ask for deletion |
|---|---|
| Bot conversation | up to 1 year after your last message |
| Server logs | up to 6 months |
| Payment records | 3 years — the term needed for confirming settlements and handling claims |
When a term expires, the data is deleted or anonymized.
Who else sees it
We don't sell data and don't share it for advertising. Passing it on happens only where a purchase is impossible without it:
- Telegram — the messenger the bot runs on; data on their side follows Telegram's own policy;
- the payment provider — takes the payment and issues the receipt; gets the amount and order number, and processes card details on its side without sharing them with us;
- the hosting provider — runs the servers the license server lives on.
Data may be disclosed to state bodies upon a lawful, motivated request. Because the conversation happens in Telegram, part of the data (account ID, chat contents) is processed on Telegram's servers outside Russia — that transfer happens by the very fact of using the messenger.
Site and cookies
keyostore.ru is static pages with no forms and no user accounts. For visit analytics the site uses Yandex Metrica: it collects anonymous visit data (pages, referrer, device, rough region) and loads only after your consent, given via a banner on first visit. Until then the tracker isn't loaded and nothing is sent. The consent is stored in your browser as keyo_consent_accepted; you can withdraw it any time by clearing the site's cookies. A language choice made via the EN/RU switcher is stored as the keyo_lang cookie for one year.
Your rights
You can ask what data of yours is processed and get a copy, demand corrections, demand deletion, or withdraw consent. Requests go to the Telegram bot; deletion is completed within 30 days.
Deleting your data erases the link between the key and your account, your settings and the support conversation. The key itself keeps working on the license server — if you come back, you can bind it to your account again. Payment records are kept until the tax-law term expires.
Write to the bot — we'll process the request and confirm the deletion.