Privacy, in plain English

The Kestrel waitlist is run by Kestrel, the data controller for what you share with us here. This notice covers what we collect when you join and what we do with it. Questions or requests: hello@kestrelhq.co.

What we collect

• Your email address, role and company size.
• Your answers to any questions you choose to answer, including anything you write in your own words.
• If you agree to a chat, your first name and company, if you give them.
• Who referred you and who you refer, so we can work out your place in the queue.
• Which campaign link brought you here (for example a newsletter issue), stored with your sign-up.
• Which version of this sign-up wording you saw, and whether you asked for updates.

Why, and on what basis

• Essential emails (confirming your address, a link to get back in when you ask for one, and invitations to research calls or the beta that relate to what you signed up for): to run the waitlist you joined. You can unsubscribe at any time.
• Occasional updates, including what we learn from the research: only if you ticked the box when you joined. You can withdraw that at any time.
• Running the waitlist and the beta queue, and understanding what people need from competitive intelligence so we can decide what to build: our legitimate interest in developing the product, which we balance against yours by collecting little, keeping it secure and only publishing aggregated, anonymised results.

Anything we publish from the research uses anonymised, aggregated answers. We never publish a quote with your name or company attached without asking you first. We don't sell your data or use it for advertising.

Who helps us run it

These providers process data for us, under contract, and only to provide their service:

• Vercel (hosting the site).
• Our database host, where your sign-up and answers are stored.
• Resend (sending our emails).
• Cloudflare (the Turnstile spam check on the sign-up form).

Some of them are based in, or use servers in, the United States. Where your data leaves the UK, it's protected by the UK's approved safeguards, such as the UK Extension to the EU–US Data Privacy Framework or the UK International Data Transfer Addendum.

How long we keep it

Until the closed beta ends, or until you ask us to delete it, whichever comes first. We review what we hold at least every six months. Then we delete it, except for anonymised, aggregated results. Emailed sign-in links stop working after 90 days.

Your rights

You can unsubscribe from any email by replying to it, and ask to see, correct, export or delete your data at any time. You can also object to how we use it. Email hello@kestrelhq.co and we'll reply within a month. If you're unhappy with how we've handled your data, you can complain to the UK Information Commissioner's Office (ico.org.uk).

Cookies

We set one essential cookie to keep you signed in on this browser. No advertising or tracking cookies. We count visits and steps through sign-up without cookies or anything that identifies you: your browser just remembers, for that tab only, where you came from so we don't count you twice. To keep bots out, the sign-up form uses Cloudflare Turnstile, which checks your browser for signs of automation; and we look up whether your email's domain can receive mail. Neither involves reading your inbox.