Privacy Notice

1. The information we handle

Kestrano handles information needed to provide its business discovery, sales and related services.

Kestrano business records

Kestrano builds records about businesses from published, open and other permitted sources. These may include business and mapping datasets, public registries, business websites and information businesses make publicly available.

A business record may include:

• business name and type;
• location;
• website and public business profiles;
• business email addresses and phone numbers;
• business identifiers;
• source and verification information; and
• professional contact information relevant to a genuine business conversation.

Kestrano keeps information about where business data came from and may update a record when better evidence becomes available.

Information in your workspace

A customer’s Kestrano workspace may contain information such as:

• contacts your team adds or imports;
• notes and tasks;
• target profiles;
• conversations and messages;
• campaigns and sequences;
• meetings;
• opportunities;
• invoices and payment records; and
• team and account information.

2. How we use information

We use information to:

• provide and secure Kestrano;
• create and maintain business records;
• operate search, discovery and CRM features;
• send communications you ask Kestrano to send;
• process replies and maintain conversation history;
• operate campaigns, meetings, invoices and payments;
• provide AI-assisted product features;
• administer accounts, subscriptions and billing;
• detect abuse and investigate security problems;
• correct inaccurate information; and
• comply with legal obligations.

We do not sell customer workspace data to advertisers.

3. Business contact information

Kestrano is designed for legitimate business-to-business activity.

Some business contact information is shown only after a Kestrano customer uses a reveal credit.

A reveal makes information available to that customer. It does not make the information publicly available on the internet.

If information about you or your business is inaccurate, you can ask us to correct it.

You may also ask us to stop or restrict applicable processing where you have that right.

Where necessary to honour an opt-out, deletion request or similar restriction, we may retain the minimum information required to remember that restriction. This helps prevent removed information from simply being imported again.

4. Messages, connected accounts and permissions

Kestrano may help customers communicate through connected email and other supported channels.

Kestrano keeps contact history, permission evidence and suppressions separate.

A previous conversation does not automatically mean every future message is allowed, and an explicit opt-out is not treated as permission.

Messages sent through Kestrano remain subject to applicable permission, suppression and channel rules.

When you connect an email account, Kestrano uses the access required for that connection.

For Google’s send-only connection, Kestrano does not use that permission to browse your entire Gmail mailbox.

Other mailbox connections may use the access necessary to send messages and identify replies to Kestrano conversations.

5. AI-assisted features

Some Kestrano features use artificial intelligence to help with tasks such as understanding targeting descriptions, matching business types, interpreting information or preparing drafts.

When an AI-assisted feature is used, Kestrano may provide the AI service provider with the information reasonably necessary to perform that task.

AI output is treated as assistance, not as authority to bypass Kestrano’s access, permission, suppression, payment or other product controls.

We may change AI providers or models as Kestrano develops.

6. Who we share information with

We share information where reasonably necessary to operate Kestrano or comply with the law.

This may include:

• members of your own organisation who are authorised to use your workspace;
• hosting, database, storage and security providers;
• email and communications providers;
• payment providers;
• AI service providers;
• professional advisers; and
• regulators, courts or authorities where disclosure is legally required.

Some providers may process information outside Nigeria or Ghana. Where applicable law requires safeguards for an international transfer, we will use an appropriate legal mechanism.

We do not sell personal data to advertisers.

7. Payments

Where card or online payments are available, payment details are processed by the relevant payment provider.

Kestrano may store transaction information such as the amount, currency, status, invoice or charge reference and provider transaction reference.

Kestrano does not need to store your full payment-card number to maintain a record of a payment.

8. How long we keep information

We keep information only for as long as reasonably necessary for the purpose for which it is held.

How long that is depends on the information.

For example:

• account and workspace information may be retained while an account is active and for an appropriate period afterwards;
• transaction and accounting records may be retained where required by law;
• business records may remain while they are relevant to Kestrano’s business-data service;
• security and audit records may be kept for an appropriate investigation and compliance period; and
• minimal suppression information may be retained to remember an opt-out or restriction.

Information may remain in backups for a limited period until those backups are replaced through the normal backup cycle.

9. Your rights

Depending on the law that applies, you may have rights to:

• access personal data we hold about you;
• correct inaccurate information;
• request deletion;
• restrict certain processing;
• object to certain processing, including direct marketing; and
• withdraw consent where processing is based on consent.

You do not need to buy a Kestrano subscription to make a privacy request.

To make a request, contact privacy@kestrano.com.

We may need to verify that the request relates to you before disclosing or changing personal information.

10. Security

Kestrano uses technical and organisational safeguards designed to protect information and separate customer workspaces.

These include access controls, database-level workspace separation, protected credentials and audit records.

No internet service can guarantee absolute security.

If you believe you have found a security issue, contact security@kestrano.com.

11. Changes to this notice

We may update this notice as Kestrano, our providers or applicable laws change.

If we make a material change to how personal data is used, we will provide appropriate notice.

The effective date above shows when this version took effect.

Contact

Data Foundry Limited
RC 9795135
Lagos, Nigeria

Privacy: privacy@kestrano.com

General enquiries: hello@kestrano.com

Security: security@kestrano.com