Privacy Notice
Kezariq Ltd is the data controller for personal data processed through KEZARIQ.
Last updated: 10 October 2026
How Kezariq Gantt uses your information
The Kezariq Gantt app uses the shared KEZARIQ sign-in system and may show existing projects from your main Kezariq account. Gantt project plans, tasks, site diaries and photos created in its browser workspace are generally stored on that device rather than automatically synchronised between devices. Gantt also uses Paddle for its separate subscription billing. The Kezariq Gantt privacy notice explains the local-storage boundary, shared account, subscription records, backup and deletion options. Please read both notices if you use both applications.
1. Who we are
Kezariq Ltd (company number 17444015), registered in England and Wales, operates KEZARIQ and acts as the data controller for the personal data described below. Our registered office is Dalton House, 60 Windsor Avenue, London, SW19 2RR. Privacy and data requests are handled through the KEZARIQ Help & Support area, where you can submit a formal privacy or data request that is logged and tracked. You can also write to KEZARIQ Support at support@kezariq.com.
2. What we collect and why
- Account data (first name, email address, password hash) — to create and secure your account. Legal basis: performance of our contract with you.
- Project data (property address, project details, client and contractor names and contact details, drawings references, costs, notes) — to generate your documents. Legal basis: performance of our contract.
- Purchase records (which documents you unlocked, order references, amounts) — to give you access to what you bought and for our records. Legal basis: contract and legal obligation.
- Support and feedback messages — to answer you and improve the product. Legal basis: legitimate interests.
- Technical and usage data (IP address, device and browser information, error logs) — for security, fraud prevention and reliability. Legal basis: legitimate interests.
If you enter other people's details (for example your contractor or architect), please only enter what is necessary and make sure you are entitled to share it.
3. AI processing
When you ask KEZARIQ to draft a specification or other document, the relevant project text is sent to our AI model provider to generate the draft. We do not send your password, payment details or purchase history. Please avoid entering sensitive personal data (such as health or financial information) into free-text fields.
4. Who we share data with
- Paddle.com, our Merchant of Record, for the sale of our products, payment processing, tax compliance and invoicing.
- Service providers and subprocessors — hosting, database, email delivery, AI model providers, and error monitoring — acting on our instructions.
- Professional advisers such as our accountants and lawyers.
- Authorities where we are required to do so by law.
We do not sell your personal data.
5. International transfers
Some of our providers process data outside the UK and EEA. Where that happens we rely on UK adequacy regulations or on standard contractual clauses together with the UK International Data Transfer Addendum, plus appropriate technical safeguards.
6. How long we keep it
We keep account and active project data while your account is open and for as long as it is needed to provide the service. If you delete your KEZARIQ account, your sign-in access is removed and the main account, project, specification and tender records covered by the deletion process are removed from the active service.
Some limited operational, support, security, fraud-prevention or transaction-related records may be retained where reasonably necessary to meet a legal obligation, deal with a dispute, prevent fraud or establish, exercise or defend legal claims. We keep those records only for as long as the relevant purpose requires and then delete or anonymise them where appropriate. Paddle, as Merchant of Record, keeps payment, invoice and tax records under its own legal obligations and retention policies.
7. Your rights
Under UK GDPR you may have rights to access your data, correct it, have it erased, restrict or object to its processing, receive it in a portable format, and withdraw consent where we rely on consent. The exact rights available depend on the purpose and legal basis for the processing. You can request account deletion from your account settings or contact us about a privacy request. Local Gantt records or copies previously exported to your own devices may remain until you remove them there; account deletion does not remotely clear those copies. You can also complain to the Information Commissioner's Office at ico.org.uk.
8. Security
We use appropriate technical and organisational measures, including encryption in transit, encrypted storage, row-level access controls so you can only read your own records, and restricted administrative access.
9. Cookies and local storage
We use strictly necessary cookies and browser storage to keep you signed in, remember your current project while you work, and process payments securely. These are essential to the service and cannot be switched off. We do not use advertising or third-party tracking cookies. You can clear this data at any time in your browser settings, though you will be signed out.
