1. Who we are
Kelo is operated by a sole trader based in England. We provide a revenue operations tool that helps service businesses track and recover outstanding payments. Our contact address for privacy matters is [email protected].
2. What data we collect
We collect only what is necessary to provide the service:
- Account information — your name, business name, email address, and industry, provided when you sign up.
- Accounting data — invoice and customer data fetched read-only from Xero or QuickBooks via OAuth. We store a processed summary; raw invoice data is not retained beyond the session in which it is fetched.
- Usage events — anonymised product events (e.g. dashboard loaded, action approved) used to improve the service. No browsing history or third-party tracking.
- Calculator inputs — figures entered into the public calculator are anonymous and are never linked to your identity or to an account. We retain summary figures only (estimated totals and which category was largest) to understand how the calculator is used.
3. How we use your data
- To provide, operate, and improve Kelo.
- To send weekly digest emails summarising your outstanding amounts (you can opt out at any time).
- To contact you about your account or service updates.
- To comply with legal obligations.
We do not sell your data, use it for advertising, or share it with third parties except where necessary to operate the service (see section 5).
4. Legal basis (UK GDPR)
We process your data on the following bases:
- Contract — to deliver the service you signed up for.
- Legitimate interests — to improve the product and prevent fraud.
- Legal obligation — where required by law.
5. Sub-processors
We use the following third-party services to operate Kelo:
- Supabase — database and authentication (EU region).
- Vercel — hosting and edge functions.
- Resend — transactional email delivery.
- Xero / QuickBooks — accounting data, accessed read-only via OAuth.
- Anthropic — AI-generated draft messages (your data is processed under Anthropic's API terms; no training use).
- Sentry — error monitoring (anonymised stack traces only).
6. Data retention
We retain your account data for as long as your account is active. If you close your account, we delete your personal data within 30 days, except where we are required to retain it for legal or tax purposes (typically up to 7 years for financial records).
7. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion of your data ("right to be forgotten").
- Object to or restrict certain processing.
- Receive your data in a portable format.
To exercise any of these rights, email [email protected]. We will respond within 30 days.
8. Cookies
Kelo uses only a session cookie required for authentication. We do not use advertising cookies or third-party tracking pixels.
9. Changes to this policy
We may update this policy from time to time. Material changes will be communicated by email and the “last updated” date above will be revised. Continued use of Kelo after a change constitutes acceptance.
10. Contact and complaints
For any privacy question, email [email protected]. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.