Skip to content
Skip to content

Privacy Policy

Last updated: March 2025

1. Information We Collect

We collect information you provide directly when creating an account or using our services:

  • Account details: email address, name, and password (hashed)
  • Billing information processed securely via our payment provider
  • API usage logs: endpoints accessed, timestamps, response codes
  • Technical data: IP address, user agent, request metadata

2. How We Use Your Information

Your data is used exclusively to operate and improve the Kello platform:

  • Authenticate your account and enforce rate limits
  • Process subscription payments and issue invoices
  • Monitor API health, detect abuse, and ensure fair usage
  • Send transactional emails (receipts, alerts, service updates)
  • Improve data accuracy and API performance

3. Data Sharing

We do not sell your personal data. We share information only in limited circumstances:

  • Payment processors (Stripe) to handle billing securely
  • Infrastructure providers (hosting, CDN) under data processing agreements
  • Legal authorities when required by applicable law
  • Successors in the event of a merger or acquisition (with notice to users)

4. Data Security

All data is encrypted in transit via TLS 1.3. Passwords are hashed using bcrypt. API tokens are stored as hashed values and never logged in plaintext. We conduct periodic security reviews and access is restricted to authorised personnel only.

5. API Data & Watch Market Data

Watch pricing and specification data accessed via the Kello API is sourced from public grey-market listings. This data is normalised and aggregated — it does not contain personally identifiable information. You are responsible for complying with applicable data use regulations when building products on top of the Kello API.

6. Cookies

We use strictly necessary cookies to maintain your authenticated session. We do not use advertising or tracking cookies. Analytics (if any) are privacy-preserving and do not fingerprint individual users.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access a copy of your personal data
  • Correct inaccurate information
  • Request deletion of your account and associated data
  • Object to or restrict certain processing activities
  • Data portability in a machine-readable format

To exercise any of these rights, contact us at [email protected].

8. Contact

For privacy-related questions or data subject requests, contact our team at [email protected]. We aim to respond within 5 business days.