Privacy Policy

    Last Updated: 15/07/2026

    1. Introduction

    Welcome to Suirflow AI ("Company", "we", "us", or "our"). We respect your privacy and are committed to protecting your personal data.

    This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (www.suirflowai.com), use our services, or interact with the custom AI systems, websites, and automated workflows we build. It also informs you about your privacy rights under the General Data Protection Regulation (GDPR) and how Irish and European laws protect you.

    2. The Data We Collect About You

    We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped together as follows:

    • Identity Data: First name, last name, username, or company role.
    • Contact Data: Billing address, email address, and telephone numbers.
    • Technical Data: Internet protocol (IP) address, login data, browser type and version, time zone setting, operating system, and other technology on the devices you use to access this website.
    • Usage Data: Information about how you use our website, products, and services.
    • Client Project & Input Data: Text prompts, custom database schemas, customer leads, or business documents you upload or feed into the AI systems and workflows we construct for you.

    3. How We Use Your Personal Data

    We will only use your personal data when the law allows us to. Most commonly, we use your data in the following circumstances:

    • To Perform a Contract: To deliver the custom AI websites, lead systems, and automations you hire us to build.
    • For Legitimate Interests: To optimize our website experience, troubleshoot technical issues, and keep our services secure.
    • To Comply with Legal Obligations: To manage financial accounts, tax invoicing, and legal requirements in Ireland.
    AI Training Disclaimer: We do not use your proprietary business data, customer lead data, or custom inputs to train our public AI models without your explicit, written opt-in consent.

    4. Data Sharing and Third-Party AI Subprocessors

    To deliver our AI-powered automations and systems, we share certain data with trusted third-party technology providers. Because we are based in Ireland, we ensure these international data transfers (often to the US) are protected by standard contractual clauses (SCCs) or equivalent frameworks.

    We share data with:

    • AI Infrastructure Providers: (e.g., OpenAI, Anthropic) to process natural language queries and power lead-qualification agents.
    • Automation Platforms: (e.g., Make.com, Zapier) to route data between your apps.
    • Cloud Hosting & Storage: (e.g., Amazon Web Services, Google Cloud, Vercel) to host websites and databases.
    • Payment Processors: (e.g., Stripe) to handle subscription billing securely.

    5. Data Security

    We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorized way, altered, or disclosed.

    Furthermore, we limit access to your personal data to those partners (including Aaron and Colin), contractors, and third parties who have a strict business "need to know." They will only process your personal data on our instructions and are subject to strict duties of confidentiality.

    6. Your GDPR Legal Rights

    If you are located in the European Economic Area (EEA), you have the following rights under data protection laws:

    • Request access to your personal data.
    • Request correction of any incomplete or inaccurate data we hold about you.
    • Request erasure of your personal data ("the right to be forgotten").
    • Object to processing of your data where we are relying on a legitimate interest.
    • Request restriction of processing of your personal data.
    • Request the transfer of your personal data to you or a third party (data portability).

    If you wish to exercise any of these rights, please contact us using the details below. You also have the right to make a complaint at any time to the Data Protection Commission (DPC), the Irish supervisory authority for data protection issues (www.dataprotection.ie).

    7. Data Retention

    We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.

    8. Contact Details

    If you have any questions about this privacy policy, our privacy practices, or if you would like to make a data access request, please contact us:

    • Email address: suirflowai@gmail.com
    • Phone (Aaron): +353 89 251 8649
    • Phone (Colin): +353 83 194 4828
    How are things! Have a question? Chat with us here.