Privacy Policy
Last updated: 25 October 2026
1. Controller. Cuandeoro Limited t/a Veripass, 17 Green Acre Court, Templeogue, Dublin, D16 PF54, Ireland. Contact: support@veripass.ie.
2. Scope. This policy covers personal data we process as controller: website visitors, demo users, prospects and customer account users. Personal data contained in documents customers upload is processed on the customer's behalf under the DPA.
3. Data and purposes.
| Data | Purpose | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Name, business email, company, role | Account, support, contract | Art. 6(1)(b) contract | Contract term + 6 years (Irish limitation period) |
| Billing data | Invoicing, tax | Art. 6(1)(c) legal obligation | 6 years (Irish tax records) |
| Demo uploads and demo email | Run the demo, send the report | Art. 6(1)(b) pre-contract steps | Files 24 h; email 12 months unless you become a customer |
| Business contact data of prospects (source: public company websites, public producer registers, LinkedIn) | B2B outreach about the Service, only by channels allowed in each country (no unsolicited email to named individuals where consent is required) | Art. 6(1)(f) legitimate interest | 24 months or until objection |
| Server logs (IP, user agent) | Security, abuse prevention | Art. 6(1)(f) legitimate interest | 30 days |
4. Recipients. Stripe Payments Europe (payment processing as processor and, for fraud prevention and its legal obligations, as independent controller), our hosting and AI processing providers (see DPA Annex 3), our email provider, and professional advisers. We do not sell personal data.
5. Transfers outside the EEA. Website, server logs, account data, demo email data and email (our own mail server) are hosted in the United States by Cloud Clusters, Inc.; document extraction uses Google (Gemini API, paid tier, no training on customer data). These transfers take place under the EU Standard Contractual Clauses (Commission Decision (EU) 2021/914) and, where the provider is certified, the EU-US Data Privacy Framework.
6. Your rights. Access, rectification, erasure, restriction, portability, objection (including to direct marketing at any time). Write to support@veripass.ie. You may complain to the Data Protection Commission (www.dataprotection.ie).
7. Cookies. The website uses only strictly necessary cookies. If this changes, we will ask for consent first.