How we look after your records
What we store, where, who else touches it, and how you can take it with you or delete it. Read the full privacy policy too.
Where your data lives
| Topic | What we do | Source |
|---|---|---|
| Who provides Kestly | Cave Sight (ABN 48 587 662 266), a sole trader business. Contact: hello@kestly.com.au. | Our hosting and service configuration, checked 28 Oct 2026 |
| Where data is stored | Account data is stored in Sydney, Australia. Receipt files are stored in Australia (Cloudflare location hint). | Our hosting and service configuration, checked 28 Oct 2026 |
| Who else processes data | A few services outside Australia process some data for us. They are listed in the second table below. | Our hosting and service configuration, checked 28 Oct 2026 |
| How long records are kept | The ATO asks you to keep most business records for 5 years. We do not promise to keep them that long for you. After a paid plan lapses we keep your data for 3 months at most, viewable and exportable, and remind you to export 60, 30, 14, 7 and 1 days before it is removed from your account. | ATO, record keeping overview, checked 28 Oct 2026 |
| Export | Export trips, receipts and invoices as CSV or PDF at any time. | Kestly export feature, checked 28 Oct 2026 |
| Deleting your account | Delete your account in the app under Settings, or on the web. It is scheduled for 30 days, then deleted. | Delete your account, checked 28 Oct 2026 |
Who else processes data
| Service | What it does | Source |
|---|---|---|
| Supabase | Hosts our database and sign-in. Company based in the United States. | Our hosting and service configuration, checked 28 Oct 2026 |
| Resend | Sends emails such as sign-in codes, and the messages you send us through the contact form. Company based in the United States. | Our hosting and service configuration, checked 28 Oct 2026 |
| Anthropic | Reads receipt images and assistant messages, only when you use AI receipt reading or the assistant. Company based in the United States; processing happens outside Australia. | Our hosting and service configuration, checked 28 Oct 2026 |
| Google and Apple sign-in | Planned for launch, not live yet. When you choose to sign in with Google or Apple, that company confirms your identity to us and shares your email address (Apple can hide it behind a private relay address). Companies based in the United States. | Our hosting and service configuration, checked 28 Oct 2026 |
| Stripe | Will take web payments once web checkout launches (not live yet). Company based in the United States. | Our hosting and service configuration, checked 28 Oct 2026 |
| Apple and Google (on your phone) | Show maps and turn the start and end of a trip into a suburb name, using the map and address services of your phone's operating system. Companies based in the United States. | Our hosting and service configuration, checked 28 Oct 2026 |
| Cloudflare | Serves the website and runs our application code. Company based in the United States. | Our hosting and service configuration, checked 28 Oct 2026 |
Questions about your data? Email hello@kestly.com.au.
Try it with your own trips
30-day free trial. No card needed.