Privacy Policy
Draft for review by an Irish solicitor, together with the Data Protection Impact Assessment, before launch.
The short version
- We publish facts about building works, never about the people who applied for them. Applicant names and contact details are removed before anything is stored, and we have no feature that contacts applicants.
- We keep your account details and the records you create so the service works.
- We don't sell data or show advertising.
Who is responsible
[Legal entity name], [registered address], Ireland, is the controller for account and usage data. Contact: privacy@gaffwork.ie.
What we collect about you
- Account: your email address, name if you give it, trading name, trade, VAT number if you add it, and when you accepted the terms.
- Your records: price book, quotes, pipeline, notes, saved areas, watched applications and enquiries from your public page.
- Usage: which tools were used, when, from which app (ChatGPT, Claude or the website), and how long they took. We store a one-way hash of the request, never the text of your prompts.
- Website visits: we count page views on gaffwork.ie with GoatCounter, run on our own server in the EU. It uses no cookies and nothing runs in your browser. Your IP address and browser type are used briefly to tell visits apart and to work out your country, then discarded; we never store them. We keep only the page, time, country and a random code that changes every day and can't be linked back to you.
- Sign-in: hashed access tokens and session identifiers.
Planning data
Planning applications come from the National Planning Application Database and council registers. We keep the reference, council, description of the works, site address and location, dates and decision. We do not keep applicants' names, addresses or contact details. Architects and agents are shown by their published business contact; a practitioner working alone is shown by practice name only. A practice can ask to be corrected or hidden at hello@gaffwork.ie, and we act on it within 5 working days.
Why we use your data
- To provide the service you signed up for (contract).
- To keep it secure and prevent abuse, such as rate limiting (legitimate interest).
- To see which pages are used, from anonymous visit totals (legitimate interest).
- To send the weekly briefing and alerts you can turn off (contract; you can opt out).
Customer details you enter
When you record details about your own customers, you are the controller of that data and we process it for you only to provide the service.
Who we share data with
Hosting and email providers in the EU who process data on our behalf: [DigitalOcean (Frankfurt/Amsterdam), email provider]. When you use Gaffwork through ChatGPT or Claude, the results you ask for are sent to that app, under OpenAI's or Anthropic's own privacy terms.
How long we keep it
Usage logs: 30 days. Your account and records: while your account is open, then deleted 30 days after you close it. Backups roll over within 7 days.
Your rights
You can access, correct, export or delete your data, and object to processing. Email privacy@gaffwork.ie. You can also complain to the Data Protection Commission at dataprotection.ie.