Privacy Policy

1. Introduction

Kestral ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our product analytics platform and services.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, company name, and payment information (processed securely through third-party payment processors).

2.2 Usage Data

We automatically collect information about how you interact with our services, including:

• Pages viewed and features used
• Browser type and operating system
• IP address and device identifiers
• Session duration and navigation paths

2.3 Customer Data

When you implement our SDK, we process behavioral data about your users on your behalf. You control what data is collected and can configure PII exclusion rules.

3. How We Use Your Information

• To provide, maintain, and improve our services
• To process transactions and send billing notifications
• To communicate with you about updates, features, and support
• To analyze platform usage and optimize performance
• To detect and prevent fraud or security incidents
• To comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

• Service Providers: With trusted third parties who assist in operating our services (e.g., hosting, payment processing)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• With Your Consent: When you explicitly authorize us to share information

5. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• Regular security audits and penetration testing
• SOC 2 Type 2 certified infrastructure
• Access controls and employee training
• Incident response procedures

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. You can request deletion at any time. Customer data is retained according to your plan (30 days to unlimited) and can be deleted through our platform.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update inaccurate information
• Deletion: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a machine-readable format
• Objection: Object to certain processing activities
• Restriction: Limit how we use your data

To exercise these rights, contact us at privacy@kestral.com

8. Cookies and Tracking

We use cookies and similar technologies to recognize you and personalize your experience. You can control cookies through your browser settings. Our SDK uses local storage and cookies to track user sessions.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) for EU data transfers.

10. Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by email or through our platform. Continued use after changes constitutes acceptance.

12. Contact Us

If you have questions about this Privacy Policy or our data practices: