Why you can trust Kestralia
We do not sell reports; we take responsibility for the outcome. This page states exactly what we do, what we refuse to do, and where your data lives.
One address
To start we ask for the site address only. Brand, language, country, logo and likely competitors are read from the site. No company name, phone number or card.
No fabricated numbers
Every number links to its source: our crawl, Google Search Console, Bing, public DNS, or a real AI answer. If something was not measured, it says "not measured" — never zero or an estimate.
Read-only access
Search Console is connected with your explicit consent and read-only scope. We never ask for your Google password and you can revoke access at any time.
Publishing needs approval
No page is published to your site without your approval. Autopilot drafts; publishing is a separate, permissioned action recorded in the audit log.
Safe crawling
The crawler only reaches public addresses on ports 80/443; private networks, localhost and cloud metadata are blocked, and robots.txt is respected.
Data ownership
Everything is exportable and the account and data can be deleted with one action. Integration tokens are encrypted with AES-256-GCM.
No card to start
The public audit and preview need no signup and no card. You pay only when you decide to.
We state the limits
AI answers are non-deterministic, rankings cannot be guaranteed, and one answer is not a ranking. We show evidence and trends, not promises.
What data do we store?
To start
- Website address (public)
- Public pages that are crawled
- Findings and their evidence
- Email, only if you choose to save the result
Never
- Your Google password or write access to Search Console
- A card to start
- Private network data
- Selling data to third parties