Report Illegal Content (DSA)

1. Who we are

Keypra OÜ operates as a hosting service provider within the meaning of Regulation (EU) 2022/2065 (the "Digital Services Act" or "DSA"). User-generated content accessible to the public via Keypra share links — including Research Canvas share links — falls within the scope of the DSA's notice-and-action regime.

This page is the contact point for recipients of the Service in respect of illegal content (DSA Art. 12). Member State authorities, the European Commission, and the European Board for Digital Services may contact Keypra at the same address using the subject tag [DSA-AUTHORITY] (DSA Art. 11). All DSA correspondence is accepted in English.

2. What you can report

Use this procedure to report content accessible via a Keypra share link that you consider to be illegal under EU law or the law of any EU Member State. Examples include (non-exhaustive): content infringing intellectual-property rights, content that violates data-protection law, defamatory content, content that incites violence or hatred, and child sexual abuse material.

For other concerns (terms-of-service violations that are not illegal, factual inaccuracies, account or billing questions), please contact support@keypra.com instead.

3. How to submit a notice (DSA Art. 16)

Send an email to legal@keypra.com with the subject tag [DSA-REPORT] (the tag is preferred but not mandatory — a notice will not be rejected solely for a missing subject tag).

To enable Keypra to obtain actual knowledge of the alleged illegality, your notice should include:

• A sufficiently substantiated explanation of why you consider the content to be illegal, including, where relevant, the legal provision allegedly infringed.
• The exact electronic location of the content — the full share-link URL.
• Your name and email address. Notices may be submitted anonymously where they concern offences referred to in Articles 3 to 7 of Directive 2011/93/EU (child sexual abuse material).
• A good-faith statement confirming that the information and allegations in the notice are accurate and complete to the best of your knowledge.

4. What happens next (DSA Art. 17)

Keypra will process your notice in a timely, diligent, non-arbitrary and objective manner. We will send an acknowledgement of receipt without undue delay and, where feasible, a reasoned decision within 14 business days. Both you and the affected user will be informed of the decision and of the redress options available.

Available moderation measures include:

• Disabling the share link.
• Restricting visibility of the content.
• Terminating the share token.
• In cases of serious or repeated breach, suspending the user's account in accordance with §13 of the Terms of Service.

5. Redress for affected users (DSA Arts. 20 & 21)

A user whose content has been restricted or whose share link has been disabled may:

• Submit an internal complaint to legal@keypra.com with the subject tag [DSA-APPEAL] within six months of the decision.
• Refer the dispute to a certified out-of-court dispute-settlement body in their EU Member State.
• Bring judicial proceedings — all judicial rights are preserved.

6. Misuse safeguard (DSA Art. 23)

Following a prior written warning, Keypra may suspend, for a reasonable period of time, the processing of further notices or complaints submitted by a person, entity or complainant that frequently submits notices or complaints that are manifestly unfounded. A single unfounded notice will not, by itself, result in suspension.

7. Micro-enterprise status (DSA Art. 19)

Keypra OÜ qualifies as a micro-enterprise within the meaning of Commission Recommendation 2003/361/EC (fewer than 10 employees and annual turnover or balance sheet total not exceeding €2 million). Under Article 19 of Regulation (EU) 2022/2065, micro-enterprises are exempt from the obligations of Section 3 of Chapter III of the DSA — namely the internal complaint-handling system formalities of Art. 20, the out-of-court dispute-settlement designation of Art. 21, the trusted-flagger reporting cadence of Art. 22, the misuse reporting under Art. 23(2), and the transparency reporting of Art. 24.

Keypra nonetheless voluntarily provides an internal-complaint channel ([DSA-APPEAL] above), preserves users' right to refer disputes to certified out-of-court bodies and to bring judicial proceedings, and maintains the misuse safeguard at §6. We will publish a full transparency report on the schedule required by Art. 24 if Keypra ceases to qualify for the micro-enterprise exemption — the review trigger is two consecutive financial years above the headcount or turnover threshold.

8. How we handle your data

Personal data you provide in a DSA notice (your name, email address, and any data contained in the notice itself) is processed on the legal basis of Art. 6(1)(c) GDPR — compliance with a legal obligation under Regulation (EU) 2022/2065. Notice metadata is retained for the duration of handling plus 12 months for audit and statistical reporting, after which it is deleted or anonymised. See our Privacy Policy for full details.