Privacy Policy
Effective 28 April 2026 · Last updated 28 April 2026
1. Who we are
GrantDocs is a software service operated by Jake Casey (“we”, “us”, “GrantDocs”). For the purposes of the EU General Data Protection Regulation and the Irish Data Protection Act 2018, Jake Casey is the data controller for personal data we collect about installer accounts, and the data processor for personal data uploaded by installers about their customers (homeowners).
Privacy and data-rights enquiries: info@grantdocs.ie.
2. Data we collect
2.1 Installer accounts
When you create an GrantDocs account we collect: name, email, phone, business address, Eircode, company name, VAT number, Safe Electric registration number, optional company logo, and product or datasheet information you choose to upload.
2.2 Homeowner records
When you create a job, you may enter personal data about your customers including: name, address, Eircode, MPRN, phone numbers, email, year of construction, and (where the homeowner uses our e-sign flow) their typed signature on the SEAI Declaration of Works. You are responsible for having a lawful basis to provide this data to us — typically performance of contract or legitimate interest in completing the SEAI grant works.
2.3 Payment data
Stripe processes credit-pack payments. We never see your full card details — only the last four digits, brand and a payment reference. See Stripe’s Privacy Policy.
2.4 Technical data
We log basic request data (IP address, timestamps, error stack traces) for security and debugging. We do not use third-party analytics or advertising trackers.
3. Why we collect it (legal bases)
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Operate your account | Contract |
| Generate SEAI documents from data you enter | Contract |
| Process payments | Contract |
| Send transactional emails | Contract |
| Detect abuse and protect the service | Legitimate interests |
| Comply with tax / legal obligations | Legal obligation |
4. Subprocessors
We use the following providers to deliver GrantDocs. Each is bound by GDPR-compliant terms and, where data leaves the EEA, by Standard Contractual Clauses (SCCs):
- Supabase — database, authentication, file storage (EU region)
- Vercel — application hosting (EU region)
- Stripe Payments Europe Ltd (Ireland) — payments
- Resend — transactional email
- Anthropic, PBC — AI extraction of product datasheets you upload (no homeowner data is sent)
5. Data retention
- Active jobs and generated documents are kept while your account is active.
- Closed-account data is deleted within 30 days of account closure, except where we are required to retain records (e.g. payment records, generally up to 6 years for Irish tax purposes).
- Server logs are kept for 30 days.
You can request earlier deletion at any time — see Section 7.
6. International transfers
Some of our subprocessors (Stripe, Resend, Anthropic, parts of Supabase / Vercel) are headquartered in the United States. Where personal data leaves the European Economic Area, transfers are governed by the European Commission’s Standard Contractual Clauses.
7. Your rights (GDPR)
You have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erase your data (“right to be forgotten”)
- Restrict or object to processing
- Data portability — receive your data in a structured, machine-readable format
- Withdraw consent where processing is based on consent
- Lodge a complaint with the Irish Data Protection Commission — www.dataprotection.ie
To exercise these rights, email info@grantdocs.ie. We will respond within 30 days.
For homeowner data: if a homeowner contacts us directly to exercise their rights, we will forward the request to the installer who created the record (the data controller for that data) and assist in fulfilling the request.
8. Cookies
GrantDocs uses only essential cookies (Supabase authentication session). We do not use analytics, advertising or tracking cookies, so no consent banner is required under ePrivacy.
9. Children
GrantDocs is a B2B service for solar installers. It is not directed at, and is not intended for use by, children under 16. We do not knowingly collect personal data from children.
10. Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top will reflect any change; material changes will be notified to active users by email at least 14 days before they take effect.
11. Contact
Jake Casey — operator of GrantDocs
Email: info@grantdocs.ie