Privacy notice

Who is responsible

Charlie Dooley, trading as Verdyn (11 Forthill Road, Dromore, County Down, BT25 1RF, Northern Ireland; team@verdyn.org), is the data controller for account, website and direct-contact information it collects. For inspection material that your organisation uploads, Verdyn processes that material to provide the service on your organisation’s instructions. Where applicable, we handle personal data under UK GDPR and the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025. To ask about this notice or your rights, contact Verdyn.

Information we collect and why

• Names, work emails and account credentials to create accounts, provide access, administer subscriptions and communicate service information (contract performance).
• Organisation names, sites, uploaded inspection imagery, findings, review notes and reports to deliver the workspace and maintain inspection records (contract performance).
• Contact requests and support correspondence to answer enquiries and resolve problems (legitimate interests and, when applicable, contract performance).
• Device, IP address, security and usage information to protect accounts, prevent abuse and maintain the service (legitimate interests and legal obligations where relevant).

Paddle separately handles checkout, payment and billing information for purchases as Merchant of Record.

Where your data is stored

Verdyn runs on Lovable Cloud. Account records, the inspection database, uploaded imagery and sign-in are hosted by Supabase on Amazon Web Services in the EU (Ireland, eu-west-1). Imagery is kept in private storage and is only shown to signed-in members of your organisation through short-lived links.

Sub-processors

We share information only as needed to run the service, with these providers:

• Hosting, database and file storage: Lovable (Lovable Labs Incorporated), which runs the Verdyn web application, and Supabase, Inc., which provides the database and private imagery storage on Amazon Web Services in the EU (Ireland).
• Authentication: Supabase, Inc. (as above) for sign-in, and Google or Apple only if you choose to sign in with them.
• Email sending: Lovable's email service, which sends account and notification emails from notify.verdyn.org.
• Payments: Paddle.com Market Limited, Merchant of Record for checkout, subscriptions, tax and invoicing.
• AI image analysis: the Lovable AI gateway, which passes images you choose to analyse to OpenAI, the AI model provider, and returns suggested potential anomalies. Uploaded inspection images are sent only when someone in your organisation starts an analysis. The request is made with storage turned off (store: false); this request setting is not a promise that the provider never retains data or uses it for training.
• Advertising (only after consent): Google Ads on our public marketing pages, only if you click Accept in the cookie banner.

We also share information with professional advisers such as legal and accounting advisers, and with authorities where legally required. Organisation administrators and authorised teammates can access records according to their organisation permissions. We do not make private inspection imagery public. A data processing agreement is available on request from team@verdyn.org.

Retention and security

We keep data while an account or organisation uses Verdyn and as needed for support, legal, security and accounting purposes. When no longer needed, we delete or anonymise it, subject to legal retention requirements. We use proportionate technical and organisational safeguards, including access controls, private imagery storage and encryption in transit. No system can guarantee absolute security.

Your rights

Depending on where you live, you may request access to, correction or deletion of your personal data, restrict or object to processing, obtain portability, withdraw consent where processing depends on consent, or complain to a relevant supervisory authority, including the UK Information Commissioner’s Office (ICO) at ico.org.uk. Where UK or EEA law applies, we aim to respond to rights requests within one month, subject to permitted extensions. Customers can ask for their organisation's inspection imagery to be deleted at any time. To exercise any of these rights, email team@verdyn.org or contact us.

International transfers

Service providers may process data outside the UK or EEA. Where applicable, we use appropriate safeguards such as adequacy decisions or standard contractual clauses.

Cookies

• Essential (always on): sign-in session and security storage, and a record of your cookie choice (verdyn_cookie_consent). Needed for the site and workspace to work.
• Payments (essential when you check out): Paddle may set cookies to process checkout securely and prevent fraud.
• Advertising (optional, off by default): Google Ads (tag AW-18489964162) measures visits and conversions from our ads. It only loads on our public pages — home, pricing, how it works, example and contact — after you click Accept. It never runs in the signed-in workspace or client portals.

You can change your choice any time with “Cookie settings” in the footer. Rejecting has no effect on using Verdyn.

Contact

Questions about this notice or your data: team@verdyn.org.

Changes

We may update this notice when our service or legal requirements change. Material changes will be communicated where appropriate. The date at the top reflects the current version.