Privacy Policy

1. Who we are

Kestrel is a lead discovery CRM operated by Techzipe ("we", "us"). This policy explains what personal information we handle when you visit this website, use the Kestrel app, or open a pitch page someone sent you, and what choices you have.

For your own workspace content, your company decides what goes into Kestrel and why; we process it on your company's behalf. For account, billing and website information, we decide how it's used, as described here.

2. What we collect

When you use Kestrel

• Account details: your name, email address, role at your company, and your company's name, size, website and logo. If you sign in with Google, we receive your name and email from Google.
• Workspace content: what your team adds: leads, notes, follow-ups, services, tickets, comments and files.
• Activity and audit records: who changed what and when, with the IP address and browser of the request, so admins can see an accurate history.
• Google connections (only if an admin connects them): a Search Console access token, stored encrypted, and your site's search and speed data.

Public business information

• Business listings from public map data: names, categories, addresses, phone numbers and websites.
• Information we read from public business websites: website quality and search scores, and a contact email address when one is published on the site.

When you open a pitch page

• The time you opened it, how long it was on screen, and the type of device (phone, tablet or computer). We don't set cookies on pitch pages and don't record your IP address for these views.

On this website

• Your theme and currency choices, saved in your own browser. Questions you ask Kira here stay in your browser and aren't sent to us.
• If you book a call, the details you give our booking tool, and anything you send us by email.

3. How we use it

• To provide Kestrel: sign-in, your workspace, search, scores, emails, pitch pages, notifications and support.
• To keep it secure: detecting abuse, protecting accounts and keeping the audit log.
• To bill you and to talk to you about your account, including service and security notices.
• To improve Kestrel using aggregated information about how features are used.

We don't sell personal information, and we don't use your workspace content for advertising.

4. AI features

Kestrel's AI email writer and in-app assistant (Kira) run on a trusted AI provider that processes requests under contract and doesn't use them to train its models. To write an email, we send the model only what it needs: the business's name, location, website problems and the service you offer. Kira inside the app receives a short summary of your own workspace. We don't use your content to train AI models.

AI can make mistakes. Read every draft before you send it.

5. Who we share it with

We use trusted providers to run Kestrel. They process data only to provide their service to us.

You can ask us for the current list of providers at info@techzipe.com.

We may also share information if the law requires it, to protect people or our service from harm, or as part of a merger or sale of our business, in which case this policy would continue to apply.

6. Business contacts in Kestrel

Kestrel helps companies find and contact other businesses using publicly available business information. Each company using Kestrel is responsible for contacting businesses lawfully, including following anti-spam and marketing rules where they operate.

If you run a business and want your details removed from Kestrel, or want to know whether we hold them, write to info@techzipe.com.

7. Cookies and local storage

This website uses no advertising or analytics cookies. It saves your theme and currency choices in your browser's local storage. The Kestrel app stores your sign-in session in your browser so you stay signed in. Pitch pages set no cookies.

8. How long we keep it

We keep account and workspace data while your company uses Kestrel. When a workspace is closed, we delete its data within 90 days, except where we must keep records longer by law (for example, invoices). Deleting a pitch page deletes its view records.

9. How we protect it

• Every workspace is isolated, and the database blocks access from outside Kestrel's own API.
• Connections are encrypted in transit. Google tokens and saved credentials are encrypted at rest.
• Files are private, and download links expire within an hour.
• Deactivated people lose access straight away, and changes are recorded in the audit log.

No system is perfectly secure. If we learn of a breach that affects you, we'll tell you without undue delay.

10. Your rights

Depending on where you live (for example under India's Digital Personal Data Protection Act, the EU and UK GDPR, or Californian law), you can ask to access, correct, export or delete your personal information, object to or limit some uses, and withdraw consent. Email info@techzipe.com and we'll reply within 30 days. If your data is part of a company's workspace, we may pass your request to that company.

Your information may be processed in countries other than your own, including India and the United States. Where required, we use appropriate safeguards for these transfers.

Kestrel is for businesses and isn't meant for children under 18.

11. Changes to this policy

If we make important changes, we'll update the date above and tell account admins by email or in the app before the changes take effect.

12. Contact us

Questions, requests or complaints about privacy: info@techzipe.com. This address also reaches our grievance officer.