Plain language privacy.

1. What we collect

We collect only information strictly necessary to provide the service:

Your email address. This is how you sign in via a secure passwordless link. There are no passwords to remember, share, or lose.

Operational business records. What you put into the app—business details, suppliers, supplies, count quantities, low points, keep levels, optional backstock answers, stock actions, order status, check and activity history, and team members’ names and email addresses.

Billing records. When you subscribe, our Merchant of Record, Paddle, processes your payment details and applicable taxes. Kellan receives the billing identity and the customer, transaction, product, price, billing-date, and subscription-status information needed to provide and support access. Kellan never sees or stores your full card number.

Essential technical records. Standard server requests, timestamps, error references, synchronization records, and security events used to operate the service, diagnose problems, and protect accounts.

Limited advertising measurement. If you arrive through a Kellan ad in ChatGPT, OpenAI may add an advertising click reference called oppref to the landing-page address. Kellan temporarily keeps that reference in your browser session and with the related checkout request. We may send OpenAI server-side events when checkout begins and when a subscription is created, together with the event time, relevant Kellan page, plan identifier, price, and currency, so we can measure whether the ad led to a result. We do not send OpenAI your name, email address, phone number, IP address, payment details, or operational business records for this measurement.

Messages you send us. If you use the public contact form or the signed-in help and feedback form, we receive the contact details, message, and category you submit. In the app, you may also choose to include limited technical details such as the current screen, app version, connection state, and sync state; this does not include your stock list or counts.

What we do not do. We do not install a browser advertising pixel, use third-party advertising cookies, use automatic advanced matching, or build or buy behavioral profiles about your activity across unrelated websites. We never sell or rent your data.

Do Not Track signals. Because there is currently no uniform industry standard for recognizing or interpreting browser Do Not Track (DNT) signals, Kellan does not alter its behavior in response to DNT headers.

2. Service providers & where data lives

Your data lives on your local device and with our core infrastructure providers:

• Cloudflare (USA) — Hosts the website, application, edge network, database, backups, essential operational logs, and Turnstile bot protection on the public contact form. View Cloudflare’s Privacy Policy.
• Resend (USA) — Delivers transactional sign-in links, essential account notifications, and contact or support form messages to our support inbox. View Resend’s Privacy Policy.
• Proton Mail (Switzerland) — Hosts our support inbox and stores messages delivered through our forms or sent to our @usekellan.com support addresses, including spreadsheet attachments submitted for concierge setup. View Proton’s Privacy Policy.
• Paddle (UK / USA) — Acts as our Merchant of Record, managing subscription billing, order fulfillment, and global/state sales tax compliance. View Paddle’s Privacy Policy.
• OpenAI (USA) — Provides ChatGPT advertising and receives the limited server-side conversion events described above so Kellan can attribute and measure campaign results. View OpenAI’s Privacy Policy.
• Your device — Kellan keeps an operational local copy on your phone or computer so loaded stock lists, counts, and queued changes can work when your kitchen or walk-in has no connection.

This provider list is current as of the date above. If we ever engage new infrastructure sub-processors to deliver the service, we will update this policy.

3. Who can see your data

Your team. Everyone invited and signed into your business sees the shared stock list, counts, actions, assignments, and history appropriate to their role.

Account isolation. We isolate customer accounts at the database level and maintain automated test suites designed to prevent cross-account visibility.

Kellan support. We do not use a general impersonation tool to browse your business. We access the minimum records necessary when you ask us to troubleshoot, fulfill a deletion request, or prepare a request-scoped concierge import for your review.

Legal compulsion. We will only disclose account records if required by a valid subpoena, court order, or binding legal process.

4. Retention, export, and deletion

Your data is yours. You can export your stock list, count history, and activity records from Settings as standard spreadsheets without asking our permission.

Account deletion. If you cancel and want your entire business account and associated data removed, email hello@usekellan.com.

Deletion timeline:

• We verify your request and purge your account data from our active database within 30 days.
• Encrypted database backups, including any long-retention backup copies, are kept for no more than 60 days.

Billing and checkout retention. Unfinished checkout requests expire after 24 hours. We remove the checkout email and advertising referral reference after 30 days. Content-free webhook processing records are kept for up to 90 days to prevent duplicate fulfillment and investigate failures. Active customer and subscription associations remain while needed to provide the service. After account deletion, Kellan removes its user, business, email, and referral links while Paddle may retain transaction records as required for payment, tax, fraud-prevention, and legal purposes.

Support correspondence. Contact and support messages are kept only as long as reasonably needed to respond, maintain necessary service and security records, and meet legal obligations. Kellan does not create a separate database copy of form messages.

5. Security and breach notice

We employ administrative, technical, and physical safeguards designed to protect your data, including HTTPS/TLS encryption in transit, isolated edge storage, and passwordless authentication tokens. In the event of a confirmed security incident affecting your data, we will notify affected account holders in accordance with applicable legal requirements.

6. State privacy rights & minors

Depending on your location, state privacy laws may grant you rights to access, correct, delete, or obtain a copy of personal information we maintain. Because Kellan is a B2B operations tool, customer businesses act as the data controller for their team records. To exercise any privacy rights, reach out to us at hello@usekellan.com.

Minors in commercial operations. Kellan is designed solely for commercial business operations and is not directed to children under 13. If an account owner invites or inputs records for team members of legal working age who are under 18, the account owner is solely responsible for ensuring appropriate workplace authorization and legal compliance under applicable labor and privacy laws.

7. Changes to this policy

If we make material changes to how we handle data, we will notify you by updating the “Last updated” date at the top of this page and, for significant changes, sending notice to your account email address.

8. Questions and contact

If you have questions about your data or how Kellan works, reach out anytime:

Email: hello@usekellan.com
Phone: (267) 375-9997
Postal mail:
Kellan
PO Box 183
Jim Thorpe, PA 18229