About Keystone

Keystone is a mobile-first, installable web app for managing social media relationships. It brings a lead pipeline (Kanban), campaigns, a content calendar and reusable templates into one workspace, so small teams and agencies can plan content and follow up conversations in the same place.

The CRM screens in this package are UI-only mockups with sample data. The production-grade part is the foundation underneath them: sign-up and sign-in, email verification, password reset, multiple accounts per device, workspaces, teams, invitations, role-based access (owner, admin, member) and enterprise single sign-on.

themeplate.xyz publishes starter templates that are free to clone or branch. You can copy them by hand or let an AI coding assistant fetch the repository, and each one ships with documentation so you can make it your own quickly.

Every template under themeplate shares the same support contact: support@themeplate.xyz. This package is sass-authstarter on GitHub.

Keystone collects only what it needs to run an account. When you sign up, the app stores:

• your name, email address and an optional profile image;
• a securely hashed password (never the password itself), or the identifiers returned by a sign-in provider you choose;
• session records, including IP address and browser user agent, so you can stay signed in and be protected against misuse;
• workspace, team, role and invitation records that you or your teammates create.

Transactional email (verification, password reset, invitations) is sent through Resend. The app does not include advertising trackers, does not sell personal information, and uses only essential cookies for sign-in plus a theme preference.

You can change your email, remove sessions and delete your account from account settings. If you deploy this starter, you become the operator of your own copy and are responsible for publishing a privacy policy that reflects your real data practices, retention periods and hosting regions.

The starter is built to make compliance easier, but it is not certified against any standard and nothing here is legal advice. Operators remain responsible for their own obligations under laws such as the Australian Privacy Act, GDPR/UK GDPR and the CCPA.

• Data minimisation: no analytics profiles or unneeded personal fields are collected.
• User rights: self-service account deletion and email change support access, correction and erasure requests.
• Security: salted password hashing, server-side authorization on every dashboard request, per-organization data scoping, parameterized queries, trusted-origin checks and CSRF protection from the auth library.
• Email safety: HTML escaping in all outgoing messages and idempotency keys to avoid duplicate sends.
• Vulnerability reports are welcome at support@themeplate.xyz; please give us reasonable time to respond before disclosing publicly.

Keystone does not ship with AI features that process your content or personal data. The package was built with the help of AI coding tools and reviewed by a human, and the repository includes an AGENTS.md so AI assistants can work on it safely.

If you add AI features to your copy, we recommend that you:

• tell users clearly when they are interacting with AI or reading AI-generated content;
• keep a person in the loop before anything is published, sent or used to make decisions about someone;
• avoid sending personal, confidential or customer data to a model without a lawful basis and a provider agreement;
• check outputs for accuracy, bias, copyright and platform policy compliance before use;
• keep AI-generated code, templates and copy under the same review and security checks as human work.

Concerned about how AI is used in a themeplate project? Write to support@themeplate.xyz.

We aim to meet WCAG 2.2 level AA: semantic landmarks, keyboard-operable controls, visible focus, sufficient contrast in light and dark themes, and layouts that work from small phones to large desktops. If something is hard to use, tell us and we will look at it.

• Email: support@themeplate.xyz for questions, bug reports, accessibility and security concerns.
• GitHub: open an issue for bugs and feature requests.
• Docs: the README and the docs folder in the repository cover setup, usage, architecture and limits.

Free templates are supported on a best-effort basis with no guaranteed response time or service level. Custom work and priority support are not included.

We acknowledge the Traditional Custodians of the lands on which this work is created and used across Australia, and we pay our respects to Elders past and present. We recognise their continuing connection to land, waters and community, and that sovereignty was never ceded.

If you are in another part of the world, we also acknowledge the Indigenous peoples and first inhabitants of the places where you build and live.

• As-is: the software is provided without warranty of any kind. Test thoroughly before running it in production.
• Licence: use, copy and modify it under the licence in the repository.
• Third-party services: Neon (database), Resend (email) and optional Google or Apple sign-in are governed by their own terms and privacy policies.
• Trademarks: product and channel names shown in the mockups belong to their respective owners and imply no endorsement.
• Sample data: people, brands and figures in the CRM mockups are fictional.

Last updated: 2026.