privacy policy

Who we are

Ari is a job matching service operated by TRDSPC Labs Ltd. (registered in England and Wales). Our assistant, Ari, helps you find jobs, write cover letters, and tailor your CV via WhatsApp. This policy explains how we handle your data.

What we collect

• Phone number — provided when you message us on WhatsApp. Used to identify your account.
• WhatsApp display name — used to personalise conversations.
• CV / resume — if you choose to share it. Used for job matching, cover letters, and CV tailoring.
• Conversation history — your messages and Ari's responses. Used to maintain context and improve the service.
• Job search preferences — roles, locations, and criteria you mention. Used to personalise results and alerts.
• Payment information — processed by Stripe. We do not store card details.

How we use your data

• Match you to relevant job listings
• Generate personalised cover letters and CV advice
• Send job alerts based on your preferences
• Maintain conversation context across sessions
• Process purchases
• Improve service quality and fix issues

Who we share data with

We share data with these third-party processors, strictly to provide the service:

• OpenAI — your messages and CV are sent to OpenAI's API for job matching, ranking, and text generation. OpenAI does not use API data for training.
• Twilio — delivers WhatsApp messages between you and Ari. Processes your phone number and message content.
• Supabase — hosts our database where your account, CV, and conversation history are stored.
• Vercel — hosts the application. Processes requests in transit.
• Stripe — processes purchases. We never see or store your card details.

We do not sell your data to anyone. We do not use your data for advertising.

International data transfers

Some of our processors (OpenAI, Twilio, Supabase, Vercel, Stripe) are based in the United States. Data transferred to US-based processors is protected by Standard Contractual Clauses (SCCs) or equivalent safeguards approved by the UK Information Commissioner's Office (ICO). Where processors participate in the EU-US Data Privacy Framework, this provides additional protection.

Legal basis (GDPR)

We process your data based on:

• Consent — you choose to message us and share your CV. You can withdraw at any time.
• Contract — to provide the job matching service you requested.
• Legitimate interest — to maintain service quality and fix issues.

Data retention

• Account data and CV — kept until you request deletion.
• Conversation history — kept for up to 12 months, then automatically deleted.
• Payment records — kept as required by UK tax law (up to 7 years).

Your rights

Under UK GDPR, you have the right to:

• Access — request a copy of all data we hold about you.
• Correction — ask us to update incorrect data.
• Deletion — ask us to delete your data. Email dev@trdspc.com.
• Portability — receive your data in a structured format.
• Restriction — ask us to limit how we process your data in certain circumstances.
• Object — object to processing based on legitimate interest.
• Withdraw consent — stop using the service at any time.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Data security

All data is encrypted when sent between your device and our servers, and when stored in our database. Access to production systems is restricted. We do not store passwords — authentication is via your WhatsApp phone number.

Children

Ari is not intended for anyone under 16. We do not knowingly collect data from children.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated via WhatsApp or on this page.

Contact

For any privacy questions or data requests, email dev@trdspc.com.