WukLink

Privacy Policy

Draft · July 2026

Draft for legal review. This policy has not yet been reviewed by an attorney. WukLink is currently a test environment.

1. Who we are

WukLink connects people abroad with vetted workers in Jamaica. Because our users are in Jamaica, the UK, the US, Canada, and Europe, we aim to meet the Jamaica Data Protection Act, UK/EU GDPR, and applicable US state privacy laws. Contact: alerts@wuklink.com. [Registered entity and data-protection contact to be added.]

2. What we collect

Account: name, email, password (stored hashed), country, roles, and two-factor settings.

Verification (workers): government ID, a face photo, references, parish, and skills, used for vetting and safety.

Jobs: property details and access notes, details of a person an errand is for if you choose to give them (name, address, delivery notes), job descriptions, quotes, and schedules.

Work evidence: check-in timestamps (with location if the worker allows it) and before/after photos and video.

Messages: in-app text, photos, and voice notes on each job, retained for dispute evidence and safety.

Payments: handled by Stripe, we never see or store full card numbers; we keep references, amounts, and payout records.

3. How we use it

To run the service you asked for: matching jobs, holding payment protection, verifying work, paying workers, sending notifications (in-app and email), and resolving disputes. To keep people safe: vetting, fraud screening, message screening for off-platform payment attempts, incident handling, and audit logs. To meet legal obligations: payment, tax, and dispute records.

AI processing:job descriptions and work photos are processed by an AI service (Anthropic’s Claude) to scope jobs and check proof photos against the agreed work. AI assists; people decide disputes. We do not use your data to train AI models.

We do not sell your personal data or use it for third-party advertising.

4. Who sees what

Privacy between users is built in: workers see a buyer’s first name and last initial only; a property’s address is revealed to a worker only after a job is confirmed and funded; worker profiles show first name and last initial with no contact details. Contact details are never shared between users.

Service providers process data for us under contract: Supabase (database and file storage), Vercel (hosting), Stripe (payments), Resend (email), and Anthropic (AI). We share data with authorities only where legally required, and in a business transfer your data moves with the service under the same protections.

5. Errands for someone else

Some jobs involve details about a person who may not use WukLink , a relative an errand or delivery is for. The buyer who books the job confirms they are entitled to share those details. We use them only to deliver and document that job, hold them to our strictest access rules, and delete them when they are no longer needed.

6. Where your data lives

Our infrastructure is hosted in the United States. Transfers from the UK/EU rely on standard contractual protections built into our providers’ terms. [Transfer mechanism to be confirmed with counsel.]

7. How long we keep it

Account data: while your account is open. Job records, payment records, messages, and work photos: retained after job completion as dispute and financial evidence, then deleted or anonymised. Vetting documents: while the worker is active. Audit and incident logs: retained for trust and safety. [Specific retention periods to be finalised with counsel before launch.]

8. Your rights

Depending on where you live, you can ask for a copy of your data, correction, deletion, restriction of processing, or portability, and you may complain to your data-protection authority (in Jamaica, the Office of the Information Commissioner; in the UK, the ICO). Email us and we will respond within the legally required time. We never discriminate for exercising your rights.

9. Security

Encryption in transit and at rest; row-level security in the database so each user can only reach their own records; ID and proof media in private storage with short-lived access links; two-factor authentication; least-privilege keys; audit logging. No system is perfect, if a breach affects you, we will notify you and regulators as the law requires.

10. Children

WukLink is for adults 18+. We do not knowingly collect children’s data; beneficiary records are for adults receiving care.

11. Changes

We will notify you in the app of material changes before they take effect. Using WukLink after that means you accept the updated policy.

← WukLink · Terms of Service