Privacy policy

Last updated 3 October 2026

AI Register Ireland is operated by Acuity AI Advisory (“we”). We are the controller for personal data on this website and a processor for the data you put into your register. We practise what the product preaches: minimal collection, EU hosting, and an audit trail.

Where your data lives

The application database and file storage run on Supabase infrastructure in the EU (Frankfurt, eu-central-1). The application is deployed on Vercel with serverless functions pinned to the EU (Frankfurt, fra1). Backups remain within the same region. We do not transfer your register data outside the EEA.

What we collect

Account data: your email address and name, used for authentication (magic-link sign-in) and service messages. Register data: what you enter about your organisation and its AI systems — we process it solely to provide the service, and access is isolated per organisation at the database level. Website analytics: Google Analytics 4 with IP anonymisation on the marketing site only — not inside the application. No advertising trackers, no cookie wall; the only cookies are authentication and analytics.

Your analytics choice

Analytics stays off until you accept. You can reject it and use the site, or withdraw consent through Cookie settings at the foot of any public page. We remember your choice in this browser for 180 days. Analytics cookies (_ga and _ga_*) last up to 180 days. Google retains event-level data for two months; aggregated reports may be retained for longer. Authentication cookies remain necessary for signing in.

Google may process analytics data outside the EEA under its data-processing terms. This is separate from the EU hosting of register data described above. See the Google privacy policy.

Processors we rely on

Supabase (database, authentication, storage — EU region), Vercel (hosting — EU functions), Brevo (transactional email), Google Analytics (marketing-site analytics). Stripe will process payments when self-serve billing opens; card details never touch our infrastructure.

Your rights

You have the GDPR rights of access, rectification, erasure, restriction, portability and objection. You can export your full register from the product at any time. For a complete data export or account deletion, contact ger@acuityai.co — we action these within 30 days, and usually much faster. You can lodge a complaint with the Data Protection Commission (dataprotection.ie).

Retention and security

Register data is retained while your subscription is active and deleted on verified request after closure. Access to production systems is restricted and key-based; tenant isolation is enforced by row-level security in the database; material changes are written to an append-only audit log. Point-in-time backup recovery is enabled.

Contact

Privacy questions: ger@acuityai.co. We respond within one business day.