Legal

Privacy Policy

Last updated: July 11, 2026

We believe privacy policies should be readable. This one is written in plain English. If something is unclear, email us at hello@greenkollar.com.

1. Who We Are

GreenKollar ("we", "us", "our") is a clean energy job platform operated by Diyam AI. Our registered address and data controller contact is: hello@greenkollar.com. We connect job seekers with employers in the clean energy sector. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights over it.

2. What Data We Collect

We collect the following categories of personal data: Account & Profile Data — when you sign up as a candidate or employer: your name, email address, work experience, skills, resume, company details, and profile information. Application Data — when you apply for a job: your application, status, and any notes added by employers. Salary Guide Leads — when you download our Salary Guide: your work email address, timestamp, and IP address. Partner & Recruiter Signups — when you express interest in partnering: your name, organisation, email, and message. Salary Submissions — anonymised salary data you voluntarily submit for our public benchmarks. Usage Data — pages visited, browser type, device type, and referring URL, collected via standard server logs. We do not use third-party analytics trackers. Technical Data — IP address, session tokens (stored in secure HTTP-only cookies via Supabase Auth).

3. Why We Collect It (Legal Basis)

We process your data under the following legal bases: Contract performance — to provide the job platform services you signed up for (account, applications, employer dashboard). Legitimate interests — to improve our platform, prevent fraud, and send you relevant job alerts you requested. Consent — when you voluntarily submit salary data or download our Salary Guide, you consent to us storing that data. Legal obligation — we retain certain records to comply with applicable laws.

4. Where Your Data Lives

All data is stored in Supabase (PostgreSQL), hosted on AWS in the US-East-1 region. Supabase is SOC 2 Type II certified. Data is encrypted at rest (AES-256) and in transit (TLS 1.2+). We do not sell your data to third parties. Third-party services we use: - Supabase — database and authentication (supabase.com/privacy) - Netlify — web hosting (netlify.com/privacy) - Google OAuth — optional sign-in (policies.google.com/privacy) - Cloudflare — bot protection and CDN (cloudflare.com/privacypolicy) - Upstash — rate limiting (upstash.com/trust/privacy.pdf)

5. How Long We Keep It

Candidate & employer accounts — retained for as long as your account is active. You can delete your account at any time by emailing hello@greenkollar.com. Job applications — retained for 12 months after the position closes, then deleted. Salary Guide leads — retained for 24 months for our internal reporting. Salary submissions — retained indefinitely in anonymised, aggregated form. Server logs — retained for 30 days, then automatically purged.

6. Your Rights

Depending on where you are located, you may have the following rights: Access — request a copy of the personal data we hold about you. Correction — ask us to correct inaccurate data. Deletion ("right to be forgotten") — ask us to delete your personal data. We will comply unless we have a legal obligation to retain it. Portability — receive your data in a machine-readable format. Objection — object to processing based on legitimate interests. Withdraw consent — where processing is based on consent, you can withdraw it at any time. To exercise any of these rights, email hello@greenkollar.com. We will respond within 30 days. If you are in the EU/EEA, you also have the right to lodge a complaint with your local data protection authority (DPA).

7. Cookies

We use only essential cookies: - auth-token — a secure, HTTP-only session cookie set by Supabase Auth to keep you logged in. This is strictly necessary and cannot be disabled without logging you out. We do not use advertising, tracking, or analytics cookies. We do not use third-party cookies.

8. Children's Privacy

GreenKollar is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at hello@greenkollar.com and we will delete it promptly.

9. Changes to This Policy

We may update this policy as our platform evolves. We will notify registered users of material changes by email at least 14 days before they take effect. The "Last updated" date at the top of this page always reflects the current version.

10. Contact

For any privacy-related questions or to exercise your rights, contact us at: hello@greenkollar.com Diyam AI, GreenKollar Platform