Privacy Policy

1. Who we are

Wenzo provides online accounting tools, including this website and the Kestro mobile app. We are the data controller for the personal data processed through these services.

2. The website and the Kestro app

This policy covers two things: the Wenzo website (marketing pages and guides) and the Kestro app, our iOS bookkeeping app. Where a point applies to only one of them, we say so.

3. What data we collect

In the Kestro app:

• Mobile phone number — to create and sign in to your account (a one-time code) and to identify you to team members you invite.
• Your name — shown to team members on shared items.
• Receipts, invoices and documents you add, including the image/PDF files, and the supplier, date, total, VAT and description read from them.
• Mileage trips and expense claims you record.
• App settings — your businesses, accounting year-end and preferences.

The app does not use your device location, contacts or health data.

On the website: standard technical information (browser type, device, IP address) for security and to make the site work, and anything you send us via contact forms or email.

4. Where your data is stored

Kestro stores your data using Google Firebase (Authentication, Cloud Firestore and Cloud Storage), hosted in the European Union (London, europe-west2), so it syncs across your devices and with team members you invite. Backups are rotated on a rolling basis.

5. Reading your receipts

To save you typing, when you add a receipt the document is read automatically: the text is extracted using Microsoft Azure Document Intelligence and the key figures are identified using Anthropic Claude. These providers process the document only to return the extracted details to you and do not use your documents to train their models under our agreements.

6. Sub-processors and sharing with your team

When you invite an accountant or colleague to a business in Kestro, they can see that business's documents, mileage and claims according to the permissions you grant. You can remove a member at any time in Settings, which immediately revokes their access.

We use these sub-processors to run the service:

• Google (Firebase / Google Cloud) — authentication, database, file storage, functions.
• Microsoft (Azure Document Intelligence) — optical character recognition.
• Anthropic (Claude) — extracting figures from the recognised text.
• Apple — App Store distribution and push notifications.

We never sell or rent your data, and we do not use advertising or third-party tracking.

7. Retention and deletion

We keep your data while your account is active. In Kestro, Settings → Delete account & data permanently removes your account and all businesses, receipts (and their files), trips and claims from your device and from the cloud. Deleting the app alone removes only the local copy.

8. Your rights

Under UK/EU GDPR you may have the right to access, correct, export or delete your personal data, and to object to or restrict processing. You can do most of this in the app; for anything else email [email protected] and we will respond within 30 days.

9. Cookies

The Kestro app does not use advertising or tracking cookies. The website uses only essential cookies needed for it to function; it does not run third-party advertising trackers.

10. Children

Kestro is a business tool rated 4+ and is not directed at children.

11. Changes to this policy

If we change how data is handled we will update this page and its "last updated" date before the change takes effect.

12. Contact and complaints

Questions or requests about your data: [email protected]. If you are in the UK and unhappy with our response, you can complain to the Information Commissioner's Office (ico.org.uk).