Privacy Policy

Last updated: February 12, 2026

This policy explains what data Keyword Clustering (keywordclustering.net) collects, how we use it, and how we protect it. The short version: we collect the minimum needed to run the service, we don't track you, and we don't sell your data.

1. What We Collect

When you log in with your Keywords Everywhere API key, we receive the following from the Keywords Everywhere API:

  • User ID - Your Keywords Everywhere user identifier, used to recognize returning users
  • Email address - Provided by Keywords Everywhere (AES-256-GCM encrypted at the source), used for transactional emails only
  • Plan and credit info - Your Keywords Everywhere plan type and credit balance, used to determine your daily keyword limit and which API key to use for metrics

When you use the service, we also store:

  • Clustering job data - The keywords you submit, the clusters generated, metrics fetched, and any AI-generated suggestions (page type, meta title, meta description)
  • Job metadata - Timestamps, keyword count, cluster count, processing status, and country selection

2. What We Do NOT Collect

  • Your API key is never stored in our database. It exists only in your active session memory and is deleted when you log out or your session expires.
  • We do not use analytics tracking (no Google Analytics, no pixel trackers)
  • We do not use advertising cookies or any third-party tracking cookies
  • We do not collect browser fingerprints, IP address logs, or device information beyond what is needed for standard web server operation

3. How We Use Your Data

Your data is used for these purposes only:

  • Authentication - Verifying your identity via the Keywords Everywhere API
  • Clustering - Sending your keywords to OpenAI for semantic grouping
  • Metrics - Fetching search volume and CPC from the Keywords Everywhere API
  • Email notifications - Sending job completion alerts and share link notifications via SendGrid
  • Job history - Storing your results so you can access them later

We do not use your data for marketing, profiling, or any purpose beyond operating the service.

4. Third-Party Services

We share limited data with these third parties to provide the service:

OpenAI

What we send: Your keywords (text only). What we don't send: Your email, API key, user ID, or any personal information. OpenAI processes keywords to generate clusters and page suggestions.

Keywords Everywhere API

What we send: Your keywords (for metrics lookup) and your API key (during your session only, for authentication and paid-user metrics). For free users, metrics are fetched using our own API key - your key is not used for metrics calls.

SendGrid

What we send: Your email address and the content of transactional emails (welcome, job completion, share notifications). We do not send marketing emails or newsletters.

5. Cookies and Sessions

We use a single session cookie (wrc_session) to keep you logged in. This cookie:

  • Is HTTP-only (cannot be accessed by JavaScript)
  • Uses the Secure flag (sent only over HTTPS)
  • Uses SameSite=Lax (provides CSRF protection)
  • Expires after 7 days of inactivity

We do not use any other cookies - no analytics cookies, no advertising cookies, no third-party cookies.

6. Data Retention

  • Clustering jobs: Stored for 1 year, then automatically deleted
  • Shared links: Expire according to the duration you choose (24 hours, 7 days, or 30 days)
  • Sessions: Expire after 7 days of inactivity
  • Email address: Stored as long as your user record exists (tied to job retention)

7. Data Security

We protect your data through:

  • HTTPS encryption on all connections
  • TLS-encrypted API calls to all third-party services
  • Session ID regeneration every 30 minutes
  • Prepared SQL statements to prevent injection attacks
  • CSRF token protection on all state-changing requests
  • API key kept in session memory only - never written to disk or database

8. Your Rights

You can:

  • Access your data - View and export all your clustering results at any time
  • Request deletion - Email support@keywordclustering.net to request deletion of your account and all associated data
  • Stop using the service - Simply stop logging in. Your data will be automatically deleted after 1 year

If you are in the EU, UK, or California, you may have additional rights under GDPR or CCPA. Contact us and we will accommodate your request.

9. Children's Privacy

Keyword Clustering is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us with data, contact us and we will delete it.

10. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact

Questions about your privacy? Email us at support@keywordclustering.net.