Privacy Policy

Last updated: April 2026

This is a template. Consult a solicitor before relying on these terms.

1. Data Controller

Corelay is the data controller for personal data processed through Endorsd (endorsd.co). Contact: dejiodetayo@gmail.com.

2. What Data We Collect

Account information: name and email address.
Visa application details: chosen track, evidence descriptions, profile information, and uploaded documents.
Payment information: processed by Stripe. We do not store card numbers or payment credentials.
Usage data: session information for service functionality.

3. Legal Basis for Processing

We process your personal data under Article 6(1)(b) GDPR — processing is necessary for the performance of a contract (providing the Endorsd service you signed up for).

4. AI Processing

Your application data is sent to AWS Bedrock (powered by Claude) for AI analysis. This includes evidence descriptions, profile details, and drafted documents. Anonymised patterns may be stored as vector embeddings to improve recommendation quality. No raw personal data is retained by the AI provider beyond the processing request.

5. Data Storage

Your data is stored in Supabase PostgreSQL hosted in the EU region. All data is encrypted at rest.

6. Data Retention

Account data is retained while your account is active.
Upon account deletion request, all associated data is deleted within 30 days.

7. Third Parties

We share data with the following processors, solely to provide the service:

Stripe — payment processing.
AWS Bedrock — AI analysis and document generation.
Supabase — database hosting and authentication.

8. Your Rights (GDPR)

Under UK GDPR, you have the right to:

Access — request a copy of your personal data.
Rectification — correct inaccurate data.
Erasure — request deletion of your data.
Portability — receive your data in a structured, machine-readable format.
Objection — object to processing in certain circumstances.
Complaint — lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, email dejiodetayo@gmail.com.

9. Cookies

Endorsd uses session cookies only, required for authentication and service functionality. We do not use tracking cookies or third-party analytics cookies.

10. Contact

For privacy-related enquiries, contact us at dejiodetayo@gmail.com.