Your Data and Privacy
By John Cleary and David Slitzky Last updated
Who this is for
Anyone who wants to know what keysig keeps, who can see it, and how to take it with them. The Privacy Policy is the full statement; this is the short one.
What keysig stores
- Your account and profile: name, email, and the details you choose to add, such as your and . Setup asks for your legal name and your roles; every other profile field is optional.
- Your agreements and the people on them: the text, your answers, and each 's name and email, plus , roles and identifiers where you entered them. Signed agreements are stored as PDFs in private storage.
- Ownership records keysig derives from your signed agreements, per track.
- Tracks, projects and collaborators you add, and details pulled from public music databases when you look a track up.
- Billing: your plan and a ledger of credit events. Stripe holds your card; keysig never sees the number.
- Consent records if you opt in to hear from us, and referral records if you share your link.
keysig does not sell personal information, does not run advertising trackers inside the app, and does not use your agreements to train AI. Your agreement text is never sent to any AI service.
Who can see what
- You see everything in your account.
- Your signers can read an agreement they are named on, inside keysig, only while it is pending or signed, and only from an account with the same email confirmed. They see the parties, who has signed, and the signed PDF. They never see your other agreements or your drafts.
- View-only CC recipients get the signed agreement by email once everyone has signed, and nothing else.
- A label's staff can read, but not change, the agreements you created under the label, and the tracks and ownership details those agreements document. Personal work is never visible to them. Labels for artists has the detail.
- keysig staff can see account, plan and label details, and an agreement's title, type, status and dates. keysig's own support tools cannot read the contents of your agreements, and the database enforces that. The Privacy Policy says so too.
The companies that run keysig's infrastructure process data on keysig's behalf: Supabase for the database and files, Vercel for hosting, Stripe for payments, DocuSeal for , Resend for email, Deezer and MusicBrainz for catalog lookups, Credits.fm for the credits on audited tracks (it receives only the recordings' ), and Sentry for error reports with emails and long ID numbers blanked out before they leave your browser. Each is named in the Privacy Policy.
Cookies and the preferences link
keysig sets no cookies of its own; it uses your browser's storage to keep you signed in and to hold a demo draft until you save it. Only if you accept, keysig loads two ad-measurement tags. They count visits to the public pages and new signups, never pages inside the app, and they receive no name, email or agreement data. The choice is a notice with Accept all, Reject non-essential and Manage preferences, nothing pre-selected. A Cookie preferences link in every footer reopens it, and if your browser sends the Global Privacy Control signal keysig treats that as a rejection. Privacy Policy, cookies.
The emails keysig sends
Emails that are part of using the product: a welcome, your email confirmation, and reminders from the e-signature service, a heads-up to people you name on an agreement, completed copies, label invitations, and notices when support changes something on your account. These come with the account and are not marketing.
Marketing is opt-in only, and no marketing email has an obligation attached: every one carries an unsubscribe link that works in one click, and unsubscribing never touches the emails above. Privacy Policy, your rights.
Getting your data out
Under Account, Export ownership data gives you a CSV of your splits, and Export my data gives you everything as JSON. Every signed agreement's PDF downloads free from its page. Signed agreements and records explains each.
If something goes wrong: anything you cannot do in the app, including questions about your data, goes to hello@keysig.co from your account email; see Getting help. Other problems: Troubleshooting.
Related guides
About the authors
John Cleary Co-Founder, keysig
A classically trained musician and producer who spent 15 years building A&R, sync, and music strategy for labels and brands like Atlantic Records, Audiomack, and Epidemic Sound.
David Slitzky Co-Founder, keysig
GRAMMY-nominated audio engineer who spent over a decade in the studio with artists like The Roots, Usher, and Travis Scott before spending eight years running music strategy and A&R at Epidemic Sound.
keysig is not a law firm and this is not legal advice. This guide explains how the keysig product works. It does not tell you what your agreement should say. Have agreements reviewed by qualified counsel before signing.