Privacy Policy

MyTrade Genie is a division of Eko UK Limited.

Introduction

MyTrade Genie is operated by Eko UK Limited, a company registered in England and Wales. This Privacy Policy explains how we collect, use, store and protect your personal data when you use our services.

Data Controller

Eko UK Limited is the data controller for personal data processed through MyTrade Genie. For data protection enquiries, please visit our contact page.

Data We Collect

  • Account Data: Name, email address, business name, contact details and login credentials.
  • Content Data: Voice notes, text, photographs and other materials you submit for report generation.
  • Usage Data: Device information, IP addresses, browser type and interaction logs to operate and secure the service.
  • Payment Data: Billing information processed securely through our payment provider (Stripe).

How We Use Your Data

  • To provide the service, including AI processing of your voice notes and text to generate reports. Images are stored and attached to reports but are not processed by AI.
  • To manage your account, process payments and communicate service updates.
  • To improve and develop new features based on aggregated, anonymised usage patterns.
  • To protect the service, detect fraud and comply with legal obligations.

AI Processing & Training

Your voice notes and text are processed by AI to generate reports. Images you upload are stored and attached to reports but are never sent to or processed by AI services.

Your data is never used to train public AI models. We use enterprise AI services from providers including OpenAI and Anthropic under strict data protection agreements. These agreements explicitly prohibit the use of your content for model training. Your submitted content is processed solely to generate your reports and is not retained by AI providers beyond the immediate processing request.

Data Storage & Location

All data, including backups, is stored exclusively within Amazon Web Services (AWS) data centres located in the European Union (Ireland, eu-west-1). Data is encrypted both in transit (TLS 1.3) and at rest (AES-256).

Data Sharing

  • We share data only with trusted sub-processors necessary to operate the service, including cloud hosting (AWS), payment processing (Stripe) and AI providers (OpenAI, Anthropic).
  • All sub-processors are bound by data processing agreements with appropriate safeguards.
  • We never sell your personal data.

Data Security

We implement robust technical and organisational measures to protect your data, including encryption, access controls, regular security audits and staff training. Whilst no system is entirely immune to risk, we are committed to maintaining the highest practical standards of data security.

Data Retention

We retain your data for as long as your account remains active and for a reasonable period thereafter to fulfil legal, accounting and business requirements. You may request deletion of your data at any time, subject to our legal obligations.

Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Request erasure of your data ("right to be forgotten")
  • Restrict or object to certain processing activities
  • Data portability – receive your data in a structured, machine-readable format
  • Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please visit our contact page. We will respond within one month.

Cookies

We use essential cookies to operate the service and optional analytics cookies to understand usage patterns. You can manage cookie preferences through your browser settings.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or through the service. Continued use after changes constitutes acceptance.

Complaints

If you are unsatisfied with our handling of your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Contact

For privacy enquiries or to exercise your data rights, please visit our contact page.