Privacy Policy

1. Who we are

Keslle ("we", "us", "our") operates the Keslle platform at keslle.com. We are the data controller for personal data collected through our platform.

If you have any questions about how we handle your data, contact us at logan@keslle.com.

2. What data we collect

Account data

• Your name and email address
• Your business name, phone number, and address
• Your password (stored as a secure hash — we never see your actual password)

Business and transaction data

• Invoice and quote records including amounts, dates, and line items
• Customer names, email addresses, phone numbers, and addresses that you input
• Job and calendar bookings
• Review request records and customer feedback scores

Payment data

We do not store card numbers or full payment details. Payments are processed by Stripe. We receive confirmation of successful payments and store a reference ID.

Usage data

• Log data including your IP address, browser type, and pages visited
• Timestamps of actions taken within the platform

3. Why we collect it and our legal basis

4. Your customers' data

When you input customer details into Keslle (names, emails, phone numbers), you do so as a data controller in your own right. Keslle processes this data as your data processor, following your instructions.

You are responsible for ensuring you have a lawful basis for inputting your customers' data and for informing them that their details are held in a business management system. We recommend including a brief note in your own privacy policy or terms.

Review request emails sent to your customers identify your business and include a way to opt out of future requests.

5. Third parties we share data with

We do not sell your data to third parties or use it for advertising purposes.

6. How long we keep your data

• Account and business data is kept for as long as your account is active.
• Invoice and transaction records are kept for 7 years to comply with HMRC requirements.
• If you delete your account, we will delete or anonymise your personal data within 30 days, except where retention is required by law.
• Backups may retain data for up to 90 days after deletion.

7. Your rights under UK GDPR

You have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data (subject to legal retention requirements).
• Portability — receive your data in a machine-readable format.
• Restriction — ask us to limit how we use your data.
• Objection — object to processing based on legitimate interests.

To exercise any of these rights, email us at logan@keslle.com. We will respond within 30 days.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

8. Cookies

Keslle uses a session cookie to keep you logged in. This cookie is essential for the service to function and does not track you across other websites. We do not use advertising or analytics cookies.

9. Security

We take reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), hashed passwords, and access controls. No system is completely secure, and we cannot guarantee absolute security.

10. Changes to this policy

We may update this privacy policy from time to time. We will notify you by email of any significant changes. The date at the top of this page reflects when it was last updated.

11. Contact

For any privacy-related questions or requests, contact us at logan@keslle.com.