Privacy policy

Last updated: 23 July 2026

Keystone Systems is run by Mostafa, based in the Netherlands. This page explains what happens with the information you give me through this site. The short version: I use it to answer you and to do the work you ask for, and for nothing else.

What I collect and why

  • The intake form. Your name, email address, and what you write about your app. I use it to reply to your request and to prepare for a possible engagement.
  • The booking link. When you book a call, Google Calendar collects your name, email, and the time you pick, and shares them with me so the call can happen.
  • Email. When you email me, I keep the correspondence for as long as the conversation or engagement needs it.
  • Site analytics. The site runs on Squarespace, which collects basic visit statistics (pages viewed, country, browser). I use these only to see how the site is doing. See the cookie policy for details on cookies.

Who processes the data

I do not sell your data and I do not share it with anyone beyond the services that run this site and my mail:

  • Squarespace hosts the site and stores form submissions.
  • Google runs my email and the call booking.

Both are US companies. Data they process can be stored in the United States. These transfers are covered by the EU Standard Contractual Clauses and the EU-US Data Privacy Framework.

Client code and NDAs

If you give me access to a code repository for an audit, access stays read only, the code is never shared or reused, and I work under your NDA or mine. Findings and reports belong to you.

How long I keep things

Form submissions and correspondence are kept for as long as the request or engagement is active, and afterwards only as long as Dutch law requires for business records. If nothing comes of a request, you can ask me to delete it at any time.

Your rights

Under the GDPR you can ask me to show you the data I hold about you, correct it, delete it, or hand it over in a portable form. Email me and I will do it. If you are not satisfied, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Contact

Questions about this policy or your data: mostafa@keystonesystems.eu