Privacy policy
What we collect, why, and what you can ask us to do. Last updated 2026.
Who is responsible
Lumen Labs Limited (trading as Kavel), company number 16386579, is the controller of your personal data. Contact: support@getkavel.com.
What we collect and why
| What | Why | How long |
|---|---|---|
| Website address you scan, and the report (we also fetch your robots.txt, llms.txt and sitemap) | To run the scan and show you the result | 90 days |
| If you subscribe to monitoring: your email address, the website address you ask us to check, and the scan results each month | To run the monthly scans and email you the reports you paid for | While you are subscribed, plus up to 90 days after (reports are deleted after 90 days) |
| If you ask us to email you a scan report: your email address, the website scanned, and whether you also asked for occasional tips | To send the report you asked for and, only if you ticked the box, occasional tips about getting ready for AI agents | Until you unsubscribe or ask us to delete it |
| Email address (notify-me list) | To email you once when a tool is ready, if you asked us to | Until you ask us to delete it, or we no longer need it |
| QuoteDesk list details: email, company, role, request channel, volume, note | To follow up about QuoteDesk and shape the product, if you asked us to | Until you ask us to delete it, or we no longer need it |
| Payment details | To take payment. Stripe handles card details; we never see your full card number. We receive your email, what you bought and the amount. | As the law requires for accounts |
| Technical data, such as IP address | To keep the service secure and working. Handled by our hosting provider, Cloudflare. | Short-term logs |
Cookies and similar storage
We do not use advertising or analytics cookies. Your browser stores your theme and currency choices so the site remembers them. That information stays on your device. If we add analytics later, we will ask first where the law requires it.
Our legal bases
Contract (to provide what you ask for), consent (for emailed reports, tips, and the notify-me and QuoteDesk lists, which you can withdraw at any time), and legitimate interests (to keep the service secure and prevent abuse).
Who we share it with
Only service providers that help us run Kavel: Stripe (payments), Cloudflare (hosting and storage) and Resend (sending report emails). We do not sell your data. Some providers process data outside the UK, using safeguards the law accepts.
Your rights
You can ask to see your data, correct it, delete it, restrict or object to its use, or withdraw consent. Email support@getkavel.com. If you are unhappy, you can complain to the UK Information Commissioner's Office at ico.org.uk.
Changes
If we change this policy in a way that matters, we will update the date above and tell you where we reasonably can.