Privacy Policy

Who we are

ZaheZone operates Kestrel. Contact support@kestrelpbx.com.

What we collect

• Account data — organisation name, user names, emails, roles, hashed passwords, session tokens.
• PBX connection data — FQDN, port, edition, and API credentials (encrypted at rest).
• Telemetry — status, inventory snapshots, alert events, audit entries.
• Billing — Stripe handles cards and bank details. We store Stripe customer and subscription identifiers, plan, quota, and status.
• Website analytics — Google Analytics on the marketing site (G-WCDVBQJE1B).

Why

To provide the service, secure accounts, bill you, send alerts you configure, and meet tax obligations.

Who we share with

• Stripe — payments, invoices, tax.
• Email delivery — if we send alert or transactional mail.
• Google — analytics on the public website.
• We do not sell personal information. We may disclose information if required by law.

Where

Application hosting is operated by us in Australia. Stripe and Google may process data in other countries, including the United States.

Retention

Account and billing records last for the life of the organisation and as required for tax. Metric points are kept for a configured window (on the order of months).

Your rights

You may request access or correction, or complain to us and then to the OAIC. Email support@kestrelpbx.com.

Cookies

The app uses storage for sign-in. The marketing site uses Google Analytics cookies.

Changes

Updates are posted on this page with a new date.