Privacy Policy

1. Who we are

Kelo is operated by a sole trader based in England. We provide a revenue operations tool that helps service businesses track and recover outstanding payments. Our contact address for privacy matters is [email protected].

2. What data we collect

We collect only what is necessary to provide the service:

Account information, your name, business name, email address, and industry, provided when you sign up.
Waitlist email addresses, if you ask to be notified about a feature that has not launched. We store the address, which form you used, and when. It is used only to tell you about the thing you asked about, and never added to a marketing list.
Accounting data, invoice and customer data fetched read-only from Xero or QuickBooks via OAuth. We store a processed summary; raw invoice data is not retained beyond the session in which it is fetched.
Usage events, anonymised product events (e.g. dashboard loaded, action approved) used to improve the service. These are recorded by Kelo itself and are not shared with anyone.
Analytics, only if you allow it, we ask before loading Google Analytics and it does not run unless you say yes. It tells us which pages people find useful. We do not enable Google's advertising or personalisation features, and Kelo works identically whether you allow it or not.
Calculator inputs, figures entered into the public calculator are anonymous and are never linked to your identity or to an account. We retain summary figures only (estimated totals and which category was largest) to understand how the calculator is used.

3. How we use your data

To provide, operate, and improve Kelo.
To send weekly digest emails summarising your outstanding amounts (you can opt out at any time).
To contact you about your account or service updates.
To comply with legal obligations.

We do not sell your data, use it for advertising, or share it with third parties except where necessary to operate the service (see section 5).

4. Legal basis (UK GDPR)

We process your data on the following bases:

Contract, to deliver the service you signed up for.
Legitimate interests, to improve the product and prevent fraud.
Legal obligation, where required by law.

5. Sub-processors

We use the following third-party services to operate Kelo:

Supabase, database and authentication (EU region).
Vercel, hosting and edge functions.
Resend, transactional email delivery.
Xero / QuickBooks, accounting data, accessed read-only via OAuth.
Anthropic, AI-generated draft messages (your data is processed under Anthropic's API terms; no training use).
Sentry, error monitoring (anonymised stack traces only).
Google Analytics, website analytics, loaded only where you have given consent. IP addresses are anonymised and advertising features are disabled.

6. Data retention

We retain your account data for as long as your account is active. If you close your account, we delete your personal data within 30 days, except where we are required to retain it for legal or tax purposes (typically up to 7 years for financial records).

Waitlist addresses are held until the feature launches and you have been told, or until you ask to be removed, whichever comes first. Email [email protected] to be taken off the list at any time. Since a waitlist entry is not an account, deleting an account does not remove one, so it has to be asked for separately.

7. Your rights

Under UK GDPR you have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Request deletion of your data ("right to be forgotten").
Object to or restrict certain processing.
Receive your data in a portable format.

To exercise any of these rights, email [email protected]. We will respond within 30 days.

8. Cookies

Kelo sets one session cookie, which is required to keep you signed in. That one is essential and cannot be turned off.

If you allow analytics, Google Analytics sets its own cookies. We ask first, nothing is set before you choose, and declining is a single click. We do not use advertising cookies, retargeting pixels, or any third-party tracking beyond this.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email and the “last updated” date above will be revised. Continued use of Kelo after a change constitutes acceptance.

10. Contact and complaints

For any privacy question, email [email protected]. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.