The legal bit, in plain English
Privacy
The short version: we collect as little as we can, we never sell it, and if you ask us to delete your details we will. The longer version is below.
Who we are
Kendal.io is a UK business that measures and improves how AI answer engines name companies. For anything on this page, we are the data controller. You can reach us any time at hello@kendal.io.
What we collect, and why
1. When you ask for a free scan
Our scan form asks for your website, your email address and, optionally, a line about what your business does. You give us these so we can run your scan and send it back. That is the only reason we hold them. We do not add you to a marketing list without your say-so.
2. When you click through from a leaderboard
When someone clicks a link on one of our leaderboards to visit a listed business's website, our redirect records that a click happened: which link, and when. This is first-party and counts clicks, not people. It is how we can later tell a business how much interest their listing drew. It is not tied to your name or email.
3. Standard server records
Like any website, our host records basic technical information (such as IP address and browser type) to keep the site secure and working. We use this for security and to understand rough traffic levels, not to build a profile of you.
Cookies and tracking
The public site sets no advertising or cross-site tracking cookies. We do not run third-party ad trackers. Our fonts are currently served by Google Fonts, which means your browser contacts Google to fetch them and Google sees your IP address in doing so; we plan to serve fonts ourselves to remove even that. A private, staff-only dashboard is password-protected and is not part of the public site.
Our lawful basis
When you submit the scan form, our basis is your consent (and our legitimate interest in replying to you). For security logging, our basis is legitimate interest in protecting the site. You can withdraw consent at any time by emailing us.
Who we share it with
We do not sell your data, ever. We use a small number of trusted providers to run the service, and only share what they need to do their job:
- Cloudflare hosts the site, stores the click counts, and routes our email.
- The AI engines we measure (Claude, Perplexity, ChatGPT, Gemini, Google) receive only generic, public market questions. We never send them your personal data.
How long we keep it
We keep scan enquiries for as long as they are useful for helping you, and no longer. Click counts are aggregate and kept to track trends over time. Ask us to delete your details and we will remove them promptly.
Your rights
Under UK GDPR you can ask us to show you the data we hold about you, correct it, delete it, or stop using it. Email hello@kendal.io and we will sort it. If you are not happy with how we have handled things, you can complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk.
Changes to this page
If we change how we handle data, we will update this page and the date at the top. This is our current, honest description of what we do.