Privacy Policy

Kestrel is provided by [Company legal name, to be added], [Registered postal address, to be added], [Country of registration, to be added] (“we”, “us”). For privacy questions or requests, contact [Privacy email, to be added].

This policy covers the website at kestrelleads.com, the Kestrel browser extension and the Kestrel app. When you use Kestrel to collect information about businesses, you decide what to collect and how to use it; see “Data you collect with Kestrel” below.

The extension stores the leads you collect, your settings and your search progress in your own browser. We do not receive this data unless you choose to sync it with a Kestrel team workspace.

The extension sends data to other services only when you use a feature that needs them: for example your AI provider when you score leads with your own key (business details only, never email addresses or phone numbers), or a data service such as Companies House, Listen Notes or Hunter.io when you search it with your own key.

What Kestrel accesses. When you connect a Gmail or Google Workspace account with “Sign in with Google”, Kestrel can send email from that account and read its inbox to find replies to your campaigns. Kestrel also reads the email address of the account so it can show which mailbox is connected.

Why. Only to send the campaign emails you set up and to find, show and sort the replies to them in your Kestrel inbox. Kestrel does not read, keep or use other messages in the account for any other purpose.

What we never do. We do not sell Google user data. We do not use it for advertising, and we do not use it to build, train or improve AI or machine-learning models. People at Kestrel do not read it, except with your permission, when needed for security or to follow the law.

Who else sees it. Only the service providers that host Kestrel, under contract, to run the service for you. When you use AI reply labels, the text of a reply is sent to our AI provider (Anthropic) only to sort it into a label shown to you; its terms do not allow it to train its models on that data.

How it is protected. Sign-in tokens are stored encrypted, and all data is encrypted in transit. You can disconnect the account at any time in Kestrel or in your Google account settings; removing the mailbox in Kestrel deletes its sign-in token. You can delete replies in Kestrel, or ask us to delete all of this data at [Privacy email, to be added].

Kestrel’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Leads may include business contact details and, sometimes, names of people at those businesses. For that information, you are the controller and we act as your processor when it is stored in the Kestrel app. You must have a lawful basis to collect and use it, honour opt-outs and follow the email and privacy laws that apply. Our Data Processing terms and Acceptable Use Policy explain this.

We use trusted service providers to host and run Kestrel, listed on our Sub-processors page. We do not sell personal data and we do not use it for advertising.

Where data is transferred outside the UK or European Economic Area, we use recognised safeguards such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses.

We keep account data while your account is active and for a short period afterwards to meet legal duties. You can delete leads at any time. In team workspaces we recommend removing leads that were never contacted within 12 months.

You can ask to access, correct, delete or export your personal data, object to or restrict our use of it, and withdraw consent at any time. Contact [Privacy email, to be added]. You can also complain to your data protection authority, such as the UK Information Commissioner’s Office.

We protect data with access controls, encryption in transit and careful handling of keys. Read more on our Security page.

See our Cookie Policy. You can change your choice at any time with “Cookie settings” at the bottom of every page.

We will update this page when our practices change and show the date at the top. Important changes will also be shown in the app.