PRIVACY POLICY

Last updated May 08, 2026

SUMMARY OF KEY POINTS

This summary provides key points from our Privacy Notice.

TABLE OF CONTENTS

1. WHAT INFORMATION DO WE COLLECT?
2. HOW DO WE PROCESS YOUR INFORMATION?
3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?
4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
6. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?
7. HOW DO WE HANDLE YOUR SOCIAL LOGINS?
8. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?
9. HOW LONG DO WE KEEP YOUR INFORMATION?
10. HOW DO WE KEEP YOUR INFORMATION SAFE?
11. DO WE COLLECT INFORMATION FROM MINORS?
12. WHAT ARE YOUR PRIVACY RIGHTS?
13. CONTROLS FOR DO-NOT-TRACK FEATURES
14. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
15. JOB SEARCH DATA AND UPLOADED DOCUMENTS
16. DO WE MAKE UPDATES TO THIS NOTICE?
17. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
18. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information we collect may include the following:

• Names
• Email addresses
• Usernames
• Passwords
• Contact or authentication data
• Job titles
• Job application data (companies, roles, salaries, deadlines)
• Uploaded documents (CVs and cover letters)
• Calendar connection data (Google/Outlook OAuth tokens)
• Interview notes and preparation data
• Usage analytics data

Sensitive Information. We do not process sensitive information.

Application Data. If you use our application(s), we may also collect: Mobile Device Access — we may request access to your mobile device's calendar and other features for calendar integration purposes.

Information automatically collected

In Short: Some information — such as your IP address and browser characteristics — is collected automatically when you visit our Services.

We automatically collect certain information including device and usage information such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, and other technical information. The information we collect includes:

• Log and Usage Data — IP address, device information, browser type, pages viewed, searches, and other actions.
• Device Data — device and application identification numbers, browser type, hardware model, ISP, operating system, and system configuration information.

Google API

Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

We process your personal information for the following reasons:

• To facilitate account creation and authentication. So you can create and log in to your account.
• To deliver and facilitate delivery of services. To provide you with the requested service.
• To respond to user inquiries/offer support. To respond to your inquiries and solve potential issues.
• To send administrative information. To send details about our products, services, and policy changes.
• To request feedback. To contact you about your use of our Services.
• To protect our Services. Fraud monitoring and prevention.
• To identify usage trends. To understand how our Services are used so we can improve them.
• To save or protect an individual's vital interest. To prevent harm.
• Calendar synchronisation. To sync deadlines, interview dates, and meeting details to connected third-party calendar services on the user's behalf.
• Job application data management. To store, organise, and display job application information including role details, company names, compensation, deadlines, notes, and uploaded documents.
• Crowdsourced hiring insights. To generate anonymised and aggregated statistics about company hiring patterns. Individual user data is never exposed — only aggregated totals are used.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

In Short: We only process your personal information when we have a valid legal reason to do so.

If you are located in the EU or UK, this section applies to you.

We rely on the following legal bases:

• Consent. We may process your information if you have given us permission for a specific purpose. You can withdraw your consent at any time.
• Performance of a Contract. We may process your personal information to fulfil our contractual obligations to you.
• Legitimate Interests. We may process your information when it is reasonably necessary to achieve our legitimate business interests — including analysing how our Services are used, diagnosing problems, preventing fraud, and providing community-driven insights.
• Legal Obligations. We may process your information where necessary for compliance with our legal obligations.
• Vital Interests. We may process your information where necessary to protect your vital interests or the vital interests of a third party.

If you are located in Canada, this section applies to you.

We may process your information if you have given us specific or implied consent. You can withdraw your consent at any time.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share information in specific situations and with specific third parties.

The third parties we may share personal information with are:

• AI Service Providers: Anthropic — for job description analysis and company industry classification.
• Allow Users to Connect to Their Third-Party Accounts: Google account and Microsoft — for calendar integration.
• Cloud Computing Services: Supabase — database and authentication infrastructure.
• Data Backup and Security: Supabase.
• Functionality and Infrastructure Optimisation: Supabase.
• User Account Registration and Authentication: Supabase.
• Website Hosting: Lovable and Supabase.
• Transactional Email Delivery: Resend — for verification and notification emails.

Business Transfers. We may share or transfer your information in connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. These help maintain the security of our Services and your account, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.

For more information, please see our Cookie Notice: http://www.usetrkd.com/cookies.

6. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?

In Short: We offer products, features, or tools powered by artificial intelligence.

We provide AI Products through Anthropic. Our AI Products are designed for text analysis — including job description parsing and company industry classification. Your input, output, and relevant personal information will be shared with and processed by Anthropic to enable these features.

How to Opt Out: You can opt out of AI processing by choosing not to upload job descriptions and not using the company name auto-detection feature.

7. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

In Short: If you choose to register or log in using a social media account, we may have access to certain information about you.

Our Services offer you the ability to register and log in using your third-party social media account details. Where you choose to do this, we will receive certain profile information from your social media provider. We will use the information we receive only for the purposes described in this Privacy Notice.

8. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

In Short: We may transfer, store, and process your information in countries other than your own.

Our servers are located in the United States. If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored by, and processed by us in the United States and other countries.

We have implemented the European Commission's Standard Contractual Clauses for transfers of personal information. Our Standard Contractual Clauses can be provided upon request.

9. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfil the purposes outlined in this Privacy Notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice. No purpose in this notice will require us keeping your personal information for longer than the period of time in which users have an account with us.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise such information.

10. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect your personal information through a system of organisational and technical security measures.

We have implemented appropriate and reasonable technical and organisational security measures designed to protect the security of any personal information we process. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. You should only access the Services within a secure environment.

11. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18 years of age. By using the Services, you represent that you are at least 18. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data. Please contact us at privacy@usetrkd.com if you become aware of any such data.

12. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: Depending on your location, you have rights that allow you greater access to and control over your personal information.

In some regions (like the EEA, UK, Switzerland, and Canada), you have certain rights under applicable data protection laws including:

• The right to request access and obtain a copy of your personal information
• The right to request rectification or erasure
• The right to restrict the processing of your personal information
• The right to data portability
• The right not to be subject to automated decision-making
• The right to object to the processing of your personal information

To exercise these rights, submit a data subject access request or contact us at privacy@usetrkd.com.

Withdrawing your consent: You can withdraw your consent at any time by contacting us using the contact details provided below.

Account Information: You may review or change the information in your account or terminate your account at any time by logging in to your account settings.

13. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers include a Do-Not-Track ('DNT') feature you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognising and implementing DNT signals has been finalised. As such, we do not currently respond to DNT browser signals.

14. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: If you are a US resident, you may have the right to request access to and receive details about the personal information we maintain about you.

US residents have the following rights:

• Right to know whether or not we are processing your personal data
• Right to access your personal data
• Right to correct inaccuracies in your personal data
• Right to request the deletion of your personal data
• Right to obtain a copy of the personal data you previously shared with us
• Right to non-discrimination for exercising your rights
• Right to opt out of targeted advertising, sale of personal data, or profiling

To exercise these rights, visit http://www.usetrkd.com/contact or email privacy@usetrkd.com.

California 'Shine The Light' Law: California residents may request information about personal information disclosed to third parties for direct marketing purposes by contacting us in writing.

15. JOB SEARCH DATA AND UPLOADED DOCUMENTS

TRKD is a job application tracking service. In the course of using our service, you may provide job search related information including company names, role titles, compensation details, application deadlines, and interview notes. You may also upload personal documents including CVs, cover letters, and job descriptions.

This information is stored securely and is used solely to provide you with the TRKD service. It is never sold, shared with potential employers, used for advertising purposes, or disclosed to any third party except as described in this policy. Uploaded documents are stored in encrypted cloud storage and are only accessible by you.

When you delete an application, its associated documents are permanently deleted. When you delete your account, all uploaded documents and job search data are permanently deleted within 30 days.

Data sent to the Anthropic Claude API for job description parsing and company classification is processed solely for that purpose and is not used to train AI models.

16. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated 'Revised' date at the top of this Privacy Notice. If we make material changes, we may notify you either by prominently posting a notice or by directly sending you a notification.

17. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may contact us by post at:

TRKD
Dubai, Dubai 00000
United Arab Emirates
Email: privacy@usetrkd.com

18. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country or state of residence, you may have the right to request access to the personal information we collect from you, correct inaccuracies, or delete your personal information. To request to review, update, or delete your personal information, please fill out and submit a data subject access request at: https://app.termly.io/dsar/13439bfa-e73b-407e-88fa-6c2c3eeb868e.