Privacy Policy

Last updated: 2 June 2026

This Privacy Policy explains how Deposify ("we", "us") collects, uses, and protects your personal data when you use our deposit management platform, in line with the EU General Data Protection Regulation (GDPR) and Irish data protection law. We provide this information so you understand what happens to your data at the point we collect it.

1. Who we are (data controller)

Deposify is the controller responsible for the personal data described in this policy.

• Legal entity: [REGISTERED COMPANY NAME] (company no. [COMPANY REGISTRATION NUMBER])
• Registered address: [REGISTERED ADDRESS]
• Data protection contact: support@deposify.ie
• Data Protection Officer: [DPO NAME AND CONTACT — or state that a DPO is not required under Article 37 GDPR]

2. Data we collect

• Account data — your name, email address, phone number, and role (tenant, landlord, or administrator).
• Tenancy and deposit data — property details, deposit amount, tenancy dates, and related records needed to administer the deposit.
• Payment data — payments and payouts are processed by our payment provider (Stripe). We do not store full card or bank details; these are held by the payment provider.
• Evidence and communications — photos, documents, invoices, and messages you upload or exchange in connection with a deposit or dispute.
• Verification data — information used to verify identity where required for compliance.
• Technical data — device, usage, and log information, including data used for analytics and error monitoring to keep the service secure and reliable.

3. How we use your data and our legal bases

We use personal data only for the purposes below, each under a specific legal basis under Article 6 GDPR:

Information and evidence are collected only to administer the deposit and any dispute. We do not sell your personal data or use it for unrelated purposes. Where we rely on consent, you can withdraw it at any time without affecting processing carried out before withdrawal.

4. Data you must provide

Account, tenancy, deposit, payment, and identity-verification data are necessary to provide the service — without them we cannot set up or administer a deposit, and you may be unable to use the platform. Other data is optional: for example, participation in AI-assisted resolution is your choice, and providing it (or not) does not affect your access to standard deposit administration or your right to refer a dispute to the RTB.

5. Recipients and processors

We share personal data only as needed to operate the service. The following processors handle data on our behalf, under contractual obligations to protect it and to act only on our instructions:

• Stripe — payment processing and payouts.
• Supabase — authentication and database hosting.
• Vercel — application hosting, plus Vercel Analytics and Speed Insights (usage and performance measurement).
• Sentry — error monitoring and diagnostics.
• Resend — delivery of transactional email.
• Upstash — caching and rate-limiting.
• Anthropic and Google — AI processing, used only for optional AI-assisted resolution (see section 6).

Where a dispute is referred to the Residential Tenancies Board (RTB), relevant information and evidence may be shared to support that process. We may also disclose data where required by law or to protect our legal rights.

6. AI-assisted resolution

If you choose to use AI-assisted resolution, dispute and evidence data is processed by our AI providers (Anthropic and Google) to help organise evidence and suggest a fair allocation based on general RTB guidance. This is optional, and the recommendation is advisory only: there is no solely automated decision that produces legal or similarly significant effects. Both parties must accept before any recommendation takes effect, and either party can decline and refer the matter to the RTB at any time.

7. International transfers

Some of our processors are based outside the European Economic Area or process data there. Where this happens, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, to ensure your data remains protected.

8. Data retention

We keep personal data only for as long as needed for the purposes above. In practice:

• Deposit and tenancy records are kept for the life of the deposit and typically for up to six years after it is closed, reflecting the limitation period for potential legal claims in Ireland.
• Identity-verification and compliance records are kept for the period required by applicable law.
• Technical and log data is kept for a shorter period needed for security and diagnostics.

When data is no longer needed, we delete or anonymise it.

9. Your rights

Under GDPR, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure where applicable;
• restrict or object to certain processing;
• request portability of data you provided to us; and
• withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at support@deposify.ie. You also have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie).

10. Security

We use technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. No system can be guaranteed to be completely secure, but we work to protect your information and to respond appropriately if an issue arises.

11. Cookies and similar technologies

We use cookies and similar technologies in the following categories:

• Strictly necessary — required to sign you in, keep your session secure, and operate the platform. These are used on the basis of our legitimate interest in providing a secure service and cannot be switched off.
• Analytics and performance — Vercel Analytics and Vercel Speed Insights, used to understand usage and improve performance.
• Error monitoring — Sentry, used to detect and diagnose faults.

You can manage non-essential cookies through your browser settings. For more detail about the cookies we use, contact us at support@deposify.ie.

12. Changes to this policy

We may update this Privacy Policy from time to time. Where changes are material, we will take reasonable steps to notify you, and the "last updated" date above will reflect the latest version.

13. Contact

For any questions about this policy or how we handle your data, contact us at support@deposify.ie.