Privacy Notice
Last updated: 7 October 2026
Who we are
Paul Cooke trading as CentSmart ("we", "us"), based in Ireland, is the data controller for personal data processed through this service. You can contact us at paul@centsmart.ie.
Data we collect
- Account data — email address, authentication identifiers
- Profile and finance inputs — salary, age, marital status, BIK, pension %, dependants and similar inputs you enter
- Budget, utility and assistant content — items you save in CentSmart
- Usage data — page views, device type, IP address, referrer (for analytics and security)
- Support correspondence — emails you send us
Why we use it (purposes & legal basis)
- Provide the Service and your account — contract performance
- Process payments via Stripe — contract performance
- Security, fraud prevention, abuse detection — legitimate interests
- Product analytics and improvement — legitimate interests
- Service announcements, transactional emails — contract performance
- Marketing emails (only if you opt in) — consent; you can withdraw at any time via the unsubscribe link
- Legal and tax obligations — legal obligation
Who we share data with
- Stripe Payments Europe, Limited — payment processing, subscription billing, tax calculation and invoicing
- Supabase / Lovable Cloud — managed database, authentication and hosting (EU region)
- Resend (or our email provider) — to deliver transactional and account emails
- AI providers (Google Gemini, OpenAI) — to power the assistant; only the messages you send the assistant are processed
- Professional advisers (legal, accounting) where necessary
- Authorities where required by law
We do not sell your personal data.
International transfers
Some processors are located outside the EEA (e.g. in the United States). Where data leaves the EEA we rely on EU Standard Contractual Clauses or equivalent safeguards published by the EU Commission.
Retention
We retain account and finance data for as long as your account is active and for up to 24 months afterwards, unless a longer period is required by law (e.g. tax records). You can delete your account at any time, which removes your profile and finance data.
Your rights (GDPR)
You have the right to access, rectify, erase, restrict or port your data, to object to processing, and to withdraw consent at any time. We aim to respond within one month. You can also lodge a complaint with the Irish Data Protection Commission.
Security
We use Row-Level Security in our database, encryption in transit (HTTPS), strict access control on admin tools, and signed authentication tokens. No system is perfectly secure; please use a strong, unique password.
Cookies
We use only essential cookies required to keep you signed in. We do not use advertising or cross-site tracking cookies.
Contact
For privacy questions or to exercise your rights, email paul@centsmart.ie.