BKKD

Privacy Policy

Last updated: October 9, 2026

1.What We Collect

When you sign up and use BKKD we collect:

  • Account info: name, email, and authentication credentials. Authentication is handled by Clerk; we do not store your password.
  • Beta signups: if you ask to join the beta, your name, email address and the role you choose (freelancer, recruiter or both), with whether we have approved the request and when you first signed in. A pending request is kept until we decide. If we don’t approve it, the record is deleted within a day of that decision. If we approve it, the record is kept while the beta runs and deleted with your account.
  • Booking data you create: client records, holds, confirmed bookings, projects, communications log, lifecycle progress, documents.
  • Usage telemetry: routes visited, error events. Used to maintain the service and identify bugs. Records that identify an individual account are kept for up to 90 days and then deleted or aggregated; aggregated counts, which identify nobody, are kept indefinitely.
  • Diagnostics. If the app hits an error, we record what failed and where in our code, your browser type and the app version, so we can fix it. We don’t record what you were working on. Kept for 30 days.
  • Notification data: if you enable push notifications, the subscription endpoint your browser provides so we can deliver reminders. We store only what is needed to send the notification.
  • Connection data: when you connect with a recruiter, the booking requests you exchange and the contact details you each choose to share.

2.How We Use Your Data

We use the data you give us to:

  • Operate the service you signed up for.
  • Respond to support requests.
  • Improve product features based on aggregate usage patterns.
  • Send transactional email (request confirmations, proposal emails, account deletion notices). We do not send marketing email without explicit opt-in.
  • Deliver push notifications you have enabled, such as upcoming meeting reminders.

We do not sell your data. Ever. We do not share it with advertisers or data brokers. We do not use your booking data to train AI models.

3.Third-Party Services

BKKD relies on a small set of subprocessors to operate the service. Each handles a specific function and processes data only as needed. Vendor names below link to the company; the “Learn more” column links to that vendor’s public privacy policy. Each opens in a new tab.

WhoWhat they doWhereLearn more
ClerkAuthentication, sign-in, and session management.United StatesPrivacy policy
SupabaseDatabase (your booking, client, document, event data) and document file storage.United StatesPrivacy policy
VercelApplication hosting, edge compute, scheduled jobs.United StatesPrivacy policy
ResendTransactional email delivery (beta signup and invite emails, request confirmations, account deletion notices) and the contact list those emails go to.United StatesPrivacy policy
CloudflareTurnstile, the check on the beta signup form that tells a person from a bot. It sees the request to the form, not what you type into it.United StatesPrivacy policy
AnthropicAI-assisted email drafting. What’s sent is what the draft needs: the email type, the dates, the booking type and hold position, the rate, payment structure and kill fee, the booking or project title, for a payment reminder the invoice amount, number and dates, your first name and your contact’s first name, and your tone setting. When you ask BKKD to polish text you wrote, that text is sent as you wrote it. If you fill in an “About your work” profile in Settings, that text is included too. BKKD never adds your clients’ email addresses, phone numbers or full names, your documents, or internal IDs, but a title or text you write can contain them. When you ask for help writing to a client from Orbit, your answers to the questions, the journal notes you choose to include, and the client’s first name are sent as well. When you ask BKKD to find a way in to someone you want to meet, the name, company and role you entered for them and your own notes that mention them are sent, and a web search is run on your behalf. Results come from public pages and are shown to you, not stored, unless you add a note. Anthropic does not train on this data.United StatesPrivacy policy

These providers process data on our behalf under their own privacy policies and applicable data processing agreements. We do not grant them rights to use your data for their own purposes.

Notifications you enable are delivered through your browser’s push service (for example Apple, Google, or Mozilla). That service receives only the encrypted notification payload and the delivery endpoint — never your booking or account data.

4.Links You Share

Some features expose data through a link you generate. Public availability pages and per-client availability pages show your open and blocked dates (and, depending on the visibility mode you choose, booking titles). Proposals you send show the details you include. The optional calendar-subscription feed shows your confirmed booking titles and dates to anyone holding the feed link. These links are the point of the feature, but anyone who has one can see what it exposes — treat them as private, and regenerate or disable a link when it is no longer needed.

5.Data Retention

We keep your data for as long as your account is active. When you delete your account, we begin a 30-day grace period during which the deletion can be cancelled. After 30 days all booking, client, document, event, personal time, and recruiter connection data is permanently removed from our active systems. Encrypted backups may persist for up to 60 additional days before they age out.

6.Your Rights

You can, at any time:

  • Export all your data as a portable archive via Settings → Backup.
  • Delete your account via Settings → Profile, which initiates the 30-day removal described above.
  • Correct your account information via Settings → Profile.
  • Contact us with questions about your data or to exercise rights under applicable privacy laws (GDPR, CCPA, etc.).

7.If someone else put your details into BKKD

This section is for you if you are not a BKKD account holder but your details are in it — because a freelancer you work with added you as a client, or because you sent a booking request through one of their availability links.

Who holds your data. The freelancer decides what to keep about you and why. BKKD stores it for them and acts on their instructions. In data-protection terms the freelancer is the controller and BKKD is the processor. That matters for one practical reason: it is their record, not ours, so we will not change or delete it without them.

What is typically held. Your name and the contact details you or they provided, the dates discussed, project or booking titles, and notes the freelancer wrote. If you submitted a request through an availability link, the dates you asked for and any message you included.

AI drafting. When a freelancer asks BKKD to draft an email about a booking, what’s sent to Anthropic, our AI provider, is what the draft needs: the dates, the booking type, the booking or project title, and first names. When the freelancer asks BKKD to polish text they wrote, that text is sent as they wrote it, and, when the freelancer asks for help writing to you, their answers and the notes they choose to include. BKKD never adds your email address, phone number or full name, but a title or text the freelancer writes can contain them. Anthropic does not train on this data. See Third-Party Services above.

Links can expose booking titles. A freelancer can share an availability page or a calendar-subscription feed, and depending on the settings they choose those can show booking titles — which often contain a client’s name. Anyone holding the link can see what it exposes. See Links You Share above.

How to ask about it, or ask for it to be removed. The fastest route is to ask the freelancer directly, because it is their record and they can act on it immediately. You can also contact us at hello@bkkd.app. Because the data sits inside that freelancer’s account and not ours to delete unilaterally, what we will do is identify the account holders concerned, pass your request to them, and help them action it. We will tell you what we have done. Where the law makes us responsible for answering directly, we will.

8.Cookies and Tracking

We use only the cookies required to keep you signed in and to operate the service. We do not run third-party advertising trackers or behavioural analytics.

9.Security

All data is encrypted in transit (TLS) and at rest. Every data operation runs through our servers, which authenticate your session and scope each query to your account before it touches the database. The privileged service-role key used for server-side operations is never shipped to the browser.

10.Children

BKKD is not directed at users under 16, and we do not knowingly collect data from children. If you believe we have collected information from a child, contact us and we will delete it.

11.Changes to This Policy

We may update this policy from time to time. Material changes will be announced by email or in-app notice prior to taking effect. The “Last updated” date at the top of this page reflects the latest revision.

12.Contact

Privacy questions or requests: hello@bkkd.app
BKKD·Terms of Service