Kestrel
01LegalUpdated Oct 1, 2026

Terms & privacy, in plain words.

The agreement between your team and Kestrel, and how we handle the data you trust us with. Short sentences, no surprises.

These terms apply to every workspace on kestrel.example. By creating a workspace or inviting a teammate, you agree to them on behalf of your company. If you have questions, write to legal@kestrel.example.

1. Terms of service

Your account

You are responsible for the people you invite and for keeping sign-in details safe. Each seat belongs to one named person; seats can be reassigned when someone leaves the team.

Plans and billing

Plans are billed per seat, monthly or yearly in advance. You can add seats at any time and we prorate the difference. Removing seats takes effect at the next billing date. Prices are listed on the pricing page and exclude taxes.

Acceptable use

  • Don’t send email through Kestrel to people who haven’t agreed to hear from you where the law requires consent.
  • Don’t attempt to access another workspace or probe the service for weaknesses outside our disclosure program.
  • Don’t resell access to Kestrel without a written partner agreement.

Ending the agreement

You can cancel at any time from workspace settings. After cancellation you keep read-only access for 30 days and can export everything. After that, data is deleted from live systems within 30 days and from backups within 90.

2. Privacy policy

Your workspace data belongs to you. We process it only to run Kestrel for your team. We don’t sell it, rent it or use it to train models for anyone else.

What we collect

  • Account data: names, work emails and roles of the people on your team.
  • Workspace data: the companies, contacts, deals, emails and notes your team adds or syncs.
  • Usage data: which features are used and how fast pages load, so we can improve them.

Where it lives

Data is stored in the region chosen at sign-up (US or EU), encrypted at rest with AES-256 and in transit with TLS 1.3. Backups stay in the same region.

3. Data processing

For customers in the EU and UK, our data processing agreement is part of these terms and includes the standard contractual clauses. We list every subprocessor with its purpose and location, and give 30 days’ notice before adding a new one.

We will tell you within 48 hours of confirming a security incident that affects your data.

4. Cookies

The marketing site uses one first-party analytics cookie, set only after you agree. The app uses strictly necessary cookies to keep you signed in and to remember your theme and accent.

Kestrel B.V., Kade 14, 3011 AB Rotterdam, the Netherlands. Data protection officer: privacy@kestrel.example. For anything else, use the contact page.