This Privacy Policy explains what information Kentrora collects, how we use it, and your rights regarding that information. By using Kentrora, you agree to the practices described here.
1. What We Collect
Account and profile information
When you register and set up a business profile, we collect: your name, email address, password (hashed, never stored in plain text), business name, category, location, contact details, and any business profile information you provide (opening hours, services, FAQs, etc.).
Platform integration data
When you connect third-party platforms (Google, Meta, Gmail, TikTok, WhatsApp, etc.), we store the access tokens and refresh tokens required to maintain those connections. We use these tokens solely to fetch and send data on your behalf.
Communication data
We store messages, reviews, and conversations synced from your connected platforms. This content is stored to power the unified inbox and review management features. We do not read, monitor, or use this content for any purpose beyond providing the service to you.
Usage data
We collect information about how you use Kentrora, including feature usage, AI credit consumption, and error logs. This is used to improve the platform and diagnose issues.
2. How We Use Your Information
- To provide, maintain, and improve the Kentrora platform
- To sync messages and reviews from your connected platforms
- To generate AI-powered suggestions, replies, and reports on your behalf
- To send transactional emails (account verification, billing, service notices)
- To diagnose technical issues and ensure platform stability
- To enforce our Terms of Service
We do not sell your personal data. We do not use your business data for advertising. We do not share your data with third parties except as described in this policy.
3. AI Processing
Certain features send data to AI providers (Anthropic and/or OpenAI) for processing. This includes:
- Message content, when you request an AI reply suggestion
- Aggregated statistics, when generating an AI business report
- Content briefs, when using the AI content planner
Data sent to AI providers is processed under their respective data processing agreements and is used solely for inference (generating a response). We have configured our AI provider integrations to opt out of data being used for model training wherever this option is available.
We do not send sensitive personal information (passwords, payment details, full contact records) to AI providers.
4. Third-Party Integrations
Kentrora integrates with third-party platforms to provide its services. Each integration involves sharing data with and receiving data from those platforms:
- Google: Business profile data, reviews, location information
- Meta (Facebook, Instagram): Page messages, DMs, and post performance data, accessed via Facebook Login and the Instagram API after you connect your accounts
- Gmail: Email messages from your connected Gmail account
- TikTok: Publishing and account metadata
- WhatsApp Business Platform: Business messages via Meta’s Cloud API
Each of these platforms has its own privacy policy. We encourage you to review them. Kentrora accesses only the data and permissions necessary to provide the features you use.
5. Payment Processing
Subscription payments are processed by Stripe. Kentrora does not store your payment card details. Stripe is PCI-DSS compliant. Your billing information is governed by Stripe’s privacy policy.
6. Data Storage and Security
Your data is stored on servers in the European Union (or equivalent jurisdictions with adequate data protection). We use encryption in transit (HTTPS/TLS) and at rest for sensitive data such as platform access tokens.
We apply reasonable technical and organisational measures to protect your data. No system is completely secure. In the event of a data breach that affects your personal data, we will notify you as required by applicable law.
7. Data Retention
We retain your account data for as long as your account is active. If you cancel your account, we will delete your personal data within 30 days, except where we are legally required to retain it (for example, billing records for accounting purposes, which are typically retained for 7 years).
Synced communication data (messages, reviews) is retained while your account is active and for a short period after account deletion to allow for data exports if requested.
8. Your Rights (GDPR and Equivalent)
If you are located in the European Economic Area, UK, or a jurisdiction with similar rights, you have the right to:
- Access: Request a copy of the personal data we hold about you
- Correction: Ask us to correct inaccurate or incomplete data
- Deletion: Request deletion of your personal data (“right to be forgotten”) — step-by-step instructions are on our Data Deletion page
- Portability: Request your data in a portable, machine-readable format
- Restriction: Ask us to restrict processing of your data in certain circumstances
- Objection: Object to certain types of processing
To exercise any of these rights, contact us at support@kentrora.com. We will respond within 30 days.
9. Cookies
Kentrora uses session cookies required for authentication. We do not use third-party advertising cookies or tracking pixels. We may use anonymised analytics to understand platform usage patterns.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice. Continued use of Kentrora after changes take effect constitutes acceptance of the updated policy.
11. Contact
For privacy-related questions or to exercise your rights, contact us at support@kentrora.com.
© 2026 Kentrora