Privacy Policy

Last updated: 12 March 2026

Who we are

Ekkly is a job matching service operated by TRDSPC Labs Ltd. ("we", "us", "our"). Our assistant, Ari, helps you find jobs, write cover letters, and tailor your CV via WhatsApp. This policy explains how we handle your data.

What we collect

  • Phone number — provided when you message us on WhatsApp. Used to identify your account.
  • WhatsApp display name — used to personalise conversations.
  • CV / resume — if you choose to share it. Used for job matching, cover letters, and CV tailoring.
  • Conversation history — your messages and Ari's responses. Used to maintain context and improve the service.
  • Job search preferences — roles, locations, and criteria you mention. Used to personalise results and alerts.
  • Payment information — processed by Stripe. We do not store card details.

How we use your data

  • Match you to relevant job listings
  • Generate personalised cover letters and CV advice
  • Send job alerts based on your preferences
  • Maintain conversation context across sessions
  • Process credit purchases
  • Improve service quality and fix issues

Who we share data with

We share data with these third-party processors, strictly to provide the service:

  • OpenAI — your messages and CV are sent to OpenAI's API for job matching, ranking, and text generation. OpenAI does not use API data for training.
  • Twilio — delivers WhatsApp messages between you and Ari. Processes your phone number and message content.
  • Supabase — hosts our database where your account, CV, and conversation history are stored.
  • Vercel — hosts the application. Processes requests in transit.
  • Stripe — processes credit purchases. We never see or store your card details.

We do not sell your data to anyone. We do not use your data for advertising.

Legal basis (GDPR)

We process your data based on:

  • Consent — you choose to message us and share your CV. You can withdraw at any time.
  • Contract — to provide the job matching service you requested.
  • Legitimate interest — to maintain service quality and fix issues.

Data retention

  • Account data and CV — kept until you request deletion.
  • Conversation history — kept for up to 12 months, then automatically deleted.
  • Payment records — kept as required by UK tax law (up to 7 years).

Your rights

Under GDPR and NDPR, you have the right to:

  • Access — request a copy of all data we hold about you.
  • Correction — ask us to update incorrect data.
  • Deletion — ask us to delete your data. Just message Ari "delete my data" or email us.
  • Portability — receive your data in a structured format.
  • Withdraw consent — stop using the service at any time.

Data security

All data is encrypted in transit (TLS) and at rest. Access to production systems is restricted. We do not store passwords — authentication is via your WhatsApp phone number.

Children

Ekkly is not intended for anyone under 16. We do not knowingly collect data from children.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated via WhatsApp or on this page.

Contact

For any privacy questions or data requests, message Ari on WhatsApp and say "delete my data" or "data request".