Sub-processors
Kept is operated by Lawn Envy Australia (ABN 19 863 392 800). Running the service means using a small number of other companies. This page lists every one of them, what they do, and what they can actually see — published because the Privacy Policy should not have to say "third-party services" and leave you guessing.
Read the "what they can see" column carefully. Your jobs, clients, quotes and invoices are encrypted on your device before they leave it. Where a provider below holds that data, it holds unreadable ciphertext — not a copy of your business. The information that is readable is your account and business contact details, and, if you use the marketplace, the job requests submitted to you.
Core infrastructure
| Provider | What it does | What it can see | Where |
|---|---|---|---|
| Supabase | Database and login/authentication | Your login email, business name, ABN, phone, address, service area, plan and billing state. Marketplace job requests. Your business data, as ciphertext only. | Sydney, Australia |
| Vercel | Hosting for the app, this website and the client portal | Ordinary web-server information — IP address, browser, requested page. Not the contents of your account. | Global edge network; a request is served from the location nearest you |
Payments
| Provider | What it does | What it can see | Where |
|---|---|---|---|
| Stripe (subscription) | Bills your Kept plan | Your name, email and payment card. Card details go to Stripe directly and never reach us. | United States and other countries where Stripe operates |
| Stripe Connect | Lets your own clients pay your invoices by card | The payment amount and description on invoices you choose to make payable online. The money goes to your own Stripe account, never through ours. | United States and other countries where Stripe operates |
Only when you use the feature
Nothing below receives anything unless you turn the relevant feature on or take the action described.
| Provider | What it does | What it can see | Where |
|---|---|---|---|
| Google (Gmail) | Sends invoice and quote emails | The email you are sending, including its PDF attachment and the recipient's address | United States |
| ClickSend | Sends SMS, only where a client has no email on file | The recipient's mobile number and the message text | Australian company, with international message routing |
| Xero | Accounting sync, if you connect it | Invoices you choose to sync — client names, amounts and line items | New Zealand and Australia |
| Google Maps | Route optimisation, on Team and above | The job addresses in the route you are optimising | United States |
| Open-Meteo | Weather forecast on the dashboard and rain warnings | An approximate latitude and longitude. No name, address or account information. | Germany |
Overseas disclosure
Under Australian Privacy Principle 8 we have to tell you when personal information may go overseas, and where. Your primary datastore is in Sydney, so the bulk of what we hold about you — including marketplace job requests — stays in Australia.
The providers marked above as operating outside Australia may store or process information overseas, in the countries listed. We choose providers we consider reputable and rely on the contractual privacy commitments each of them publishes. Where the information involved is your encrypted business data, an overseas provider holds only ciphertext.
Changes
If we add or replace a sub-processor we will update this page and the date at the top. If a change materially affects how your personal information is handled, we will say so in the app rather than relying on you to check.