DKY Technologies Ltd ("Cheku", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share personal data when you use the Cheku platform, website (cheku.ai), and related services (collectively, the "Service").
We are registered in England and Wales. Our registered address is Flat 12, 134 Hatfield Road, St Albans, AL1 4HY, United Kingdom.
This Privacy Policy applies to all users of the Service, regardless of plan.
1. Who We Are
For the purposes of UK data protection law (UK GDPR and the Data Protection Act 2018), DKY Technologies Ltd is the data controller for personal data we collect about you as a user of our Service (your account information, usage data, etc.).
When you use Cheku to store and process data about your own clients, contacts, and other individuals, you are the data controller and we are the data processor. Our Data Processing Addendum governs that relationship.
2. Personal Data We Collect
2.1 Information You Provide
- Account Information: Name, email address, firm name, job title, and password when you register.
- Billing Information: If you subscribe to a paid plan in the future, Stripe (our payment processor) will collect your payment details. We would receive your name, billing address, and the last four digits of your card — we never see or store full card numbers. No billing information is collected during the current beta period.
- Support Communications: When you contact us at support@cheku.ai, we collect your name, email, and the content of your message.
- Feedback and Surveys: Any information you voluntarily provide through feedback forms or surveys.
2.2 Information We Collect Automatically
- Usage Data: Pages visited, features used, actions taken, timestamps, and session duration.
- Device and Browser Data: IP address, browser type and version, operating system, device type, and screen resolution.
- Log Data: Server logs recording requests made to the Service, including IP addresses, timestamps, and referring URLs.
2.3 Customer Data
When you use Cheku, you and your Team Members may upload, enter, or store data relating to your clients, contacts, engagements, documents, timesheets, and other business information ("Customer Data"). This may include personal data about individuals. We process Customer Data solely on your instructions as described in our Data Processing Addendum. This Privacy Policy describes how we handle your personal data as a user — not the personal data within your Customer Data, which is governed by the DPA.
3. How We Use Your Personal Data
We use your personal data for the following purposes:
| Purpose | Lawful Basis (UK GDPR) |
|---|---|
| Provide and maintain the Service | Performance of contract (Art. 6(1)(b)) |
| Process payments and billing | Performance of contract (Art. 6(1)(b)) |
| Send transactional emails (account confirmations, password resets, billing receipts) | Performance of contract (Art. 6(1)(b)) |
| Respond to support requests | Performance of contract (Art. 6(1)(b)) |
| Improve and develop the Service | Legitimate interest (Art. 6(1)(f)) |
| Monitor for security threats and abuse | Legitimate interest (Art. 6(1)(f)) |
| Send product updates and feature announcements | Legitimate interest (Art. 6(1)(f)) |
| Send marketing communications | Consent (Art. 6(1)(a)) |
| Comply with legal obligations | Legal obligation (Art. 6(1)(c)) |
You can opt out of marketing communications at any time using the unsubscribe link in any email or by contacting support@cheku.ai.
4. Who We Share Your Data With
We do not sell your personal data. We share your data only with the following categories of recipients, and only as necessary:
4.1 Service Providers (Sub-processors)
| Provider | Purpose | Data Location |
|---|---|---|
| Supabase (on AWS) | Database hosting, authentication, file storage | EU-WEST-2 (London, UK) |
| Stripe | Payment processing | EU/US (per Stripe's infrastructure) |
| Microsoft Azure | AI feature processing | EU regions |
All service providers are bound by data processing agreements and process data only on our instructions.
4.2 Legal and Regulatory
We may disclose your personal data if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
4.3 Business Transfers
If DKY Technologies Ltd is involved in a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your data.
5. International Data Transfers
Your data is stored in the EU-WEST-2 (London) region on AWS infrastructure managed by Supabase. For users in the United Kingdom, your data remains within the UK.
For users in Australia and other countries: your data is stored in the United Kingdom. The UK has been recognised by the European Commission as providing an adequate level of data protection. Where data is transferred to providers outside the UK (e.g., Stripe's US infrastructure), appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) and International Data Transfer Agreements (IDTAs).
6. Data Retention
- Active Accounts: We retain your personal data for as long as your Account is active.
- After Account Deletion: We delete your personal data within 90 days of account closure, except where we are required by law to retain it (e.g., billing records for tax purposes, which we retain for 7 years).
- Support Communications: Retained for up to 2 years after resolution for quality and training purposes.
- Usage and Log Data: Retained for up to 12 months in aggregated or anonymised form.
7. Your Rights
Under UK GDPR, you have the following rights:
- Right of Access — Request a copy of the personal data we hold about you.
- Right to Rectification — Ask us to correct inaccurate or incomplete personal data.
- Right to Erasure — Ask us to delete your personal data (subject to legal retention requirements).
- Right to Restrict Processing — Ask us to limit how we use your personal data.
- Right to Data Portability — Request your personal data in a structured, machine-readable format.
- Right to Object — Object to processing based on legitimate interests, including direct marketing.
- Right to Withdraw Consent — Where processing is based on consent, withdraw it at any time.
To exercise any of these rights, contact us at support@cheku.ai. We will respond within 30 days (one calendar month) as required by UK GDPR.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Phone: 0303 123 1113
7.1 Rights for Australian Users
If you are located in Australia, you have rights under the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs), including the right to access and correct your personal information. To make a request, contact support@cheku.ai. If you are unsatisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- Encryption in transit (TLS 1.2+) and at rest (AES-256).
- Row-level security ensuring firm-level data isolation.
- Role-based access controls within the Platform.
- Regular security reviews and monitoring.
For more detail, see our Security Overview at cheku.ai/policies/security.
No method of electronic storage or transmission is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.
9. AI Features and Your Data
Cheku includes AI features powered by models hosted on Microsoft Azure. When you use AI features:
- Relevant data is sent to Azure's AI services solely to process your request and return a result.
- Your data is not used to train, improve, or fine-tune any AI models.
- AI processing is covered by Microsoft's enterprise Data Processing Addendum.
- AI features are optional — you can use Cheku without enabling them.
10. Cookies
We use essential cookies to operate the Service (authentication, session management). For details, see our Cookie Policy at cheku.ai/policies/cookies.
11. Children
Cheku is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child, we will take steps to delete it promptly. If you believe a child has provided us with personal data, contact support@cheku.ai.
12. Third-Party Links
The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Platform at least 30 days before the changes take effect. The "Last Updated" date at the top indicates when this policy was last revised.
14. Contact Us
For any questions or requests regarding this Privacy Policy or your personal data, contact us at:
DKY Technologies Ltd
Flat 12, 134 Hatfield Road
St Albans, AL1 4HY
United Kingdom
Email: support@cheku.ai