Privacy Policy
Last updated: July 2026
1. Who we are
Keslle is operated by Logan Lee, trading as Keslle (a sole trader based in the United Kingdom). The Keslle platform is available at keslle.com.
For the purposes of UK GDPR, Logan Lee is the data controller for personal data collected through this platform.
If you have any questions about how we handle your data, contact us at hello@keslle.com.
2. What data we collect
Account data
- Your name and email address
- Your business name, phone number, and address
- Your password (stored as a secure hash — we never see your actual password)
Business and transaction data
- Invoice and quote records including amounts, dates, and line items
- Customer names, email addresses, phone numbers, and addresses that you input
- Job and calendar bookings
- Review request records and customer feedback scores
Payment data
We do not store card numbers or full payment details. Payments are processed by Stripe. We receive confirmation of successful payments and store a reference ID.
Usage data
- Log data including your IP address, browser type, and pages visited
- Timestamps of actions taken within the platform
3. Why we collect it and our legal basis
| Purpose | Legal basis |
|---|---|
| Providing the Keslle service | Contract performance |
| Processing subscription payments | Contract performance |
| Sending invoices and chasers on your behalf | Contract performance |
| Sending review requests on your behalf | Legitimate interests |
| Sending service notifications and account emails | Contract performance |
| Improving the platform | Legitimate interests |
| Complying with legal obligations | Legal obligation |
4. Your customers' data
When you input customer details into Keslle (names, emails, phone numbers), you do so as a data controller in your own right. Keslle processes this data as your data processor, following your instructions.
You are responsible for ensuring you have a lawful basis for inputting your customers' data and for informing them that their details are held in a business management system. We recommend including a brief note in your own privacy policy or terms.
Review request emails sent to your customers identify your business and include a way to opt out of future requests.
5. Third parties we share data with
Stripe
Used for payment processing and Stripe Connect onboarding. Stripe receives your business details and processes all card transactions. Stripe Privacy Policy
Brevo (formerly Sendinblue)
Used to deliver transactional emails including invoices, payment reminders, and review requests. Brevo receives recipient email addresses and email content. Brevo Privacy Policy
Google Places API
Used to search for your business on Google when setting up review automation. Search queries are sent to Google. Google Privacy Policy
Twilio
Used to deliver SMS reminders and (on Get Smart plan) AI SMS assistant messages. Twilio receives phone numbers and message content. Twilio Privacy Policy
Anthropic (Claude API — SMS assistant)
The SMS assistant feature (available on the Smart plan) processes inbound SMS messages using Anthropic's Claude API. Message content — including any personal information contained in those messages — is sent to Anthropic's servers to generate a response. If you use the SMS assistant, you accept that message content is processed by Anthropic as a sub-processor. Anthropic Privacy Policy
Railway (hosting)
Keslle is hosted on Railway's infrastructure. Your data is stored on servers located in US West (California, United States). This constitutes a transfer of personal data outside the UK. We rely on the UK International Data Transfer Agreement (IDTA) as the transfer mechanism for this processing. Railway Privacy Policy
We do not sell your data to third parties or use it for advertising purposes.
6. How long we keep your data
- Account and business data is kept for as long as your account is active.
- Invoice and transaction records are kept for 7 years to comply with HMRC requirements.
- If you delete your account, we will delete or anonymise your personal data within 30 days, except where retention is required by law.
- Backups may retain data for up to 90 days after deletion.
7. Your rights under UK GDPR
You have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — ask us to delete your data (subject to legal retention requirements).
- Portability — receive your data in a machine-readable format.
- Restriction — ask us to limit how we use your data.
- Objection — object to processing based on legitimate interests.
To exercise any of these rights, email us at hello@keslle.com. We will respond within 30 days.
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).
8. Cookies
Keslle uses a session cookie to keep you logged in. This cookie is essential for the service to function and does not track you across other websites. We do not use advertising or analytics cookies.
9. Security
We take reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), hashed passwords, and access controls. No system is completely secure, and we cannot guarantee absolute security.
10. Changes to this policy
We may update this privacy policy from time to time. We will notify you by email of any significant changes. The date at the top of this page reflects when it was last updated.
11. Contact
For any privacy-related questions or requests, contact us at hello@keslle.com.