Privacy Policy

CanIBuildHere is a trading name of Roveagh Labs Limited (Company No: 820095), operating from Ireland. Roveagh Labs Limited acts as the Data Controller for this service. For questions about this privacy policy, contact us at hello@canibuildhere.ie

When you use CanIBuildHere, we collect:

• Location data: The coordinates (latitude and longitude) you select on the map. This is required to run the planning data check.
• Project answers: Your selections about project type, size, known issues, and related questions.
• Buyer Lead Details: If you request a FREE Site Report on a partner listing, we collect your Name, Email, and Phone Number to deliver the report and pass your details to the listing agent.
• Report delivery email: For one-off purchases, we collect the email address you provide immediately before payment. We use it to deliver the PDF and secure online-report link, prefill Stripe Checkout, record delivery status, and support accountless report recovery.
• Payment information: Processed by Stripe. We do not store your card details. We pass your report delivery email to Stripe to prefill Checkout and support payment receipts.
• Account data (registered users): Email address, name, team membership, and API key identifiers for Trade account holders. Used to manage your account, credits, and report access.
• Subscription and credit data: Purchase history, credit balance, plan tier, and billing cycle for prepaid credit and monthly subscription users.
• Team workspace data: Team name, member roles, and invite links for multi-user Trade accounts.
• Report notes: Any personal notes you add to a Premium report. These are stored with your report and included in PDFs you generate.
• Report sharing data: Share tokens, sharing status, report views and related security events where you enable a shareable report link.
• Official planning records: Planning files and appeal documents are public records and can contain names, addresses or other personal information submitted to a planning authority. We process relevant extracts to provide planning history and retain source provenance.
• AI follow-up conversations: Questions you ask via the follow-up chat feature are processed by OpenAI to generate answers. Questions and answers are not stored beyond the current session unless they form part of a saved report.
• Usage and diagnostic data: Page views, button clicks, check completions, report identifiers, account or team context where applicable, browser information and service errors.
• IP address: Used for rate limiting, security and abuse prevention. Rate-limit keys may be hashed and retained for a limited period rather than storing the plain IP address.

Under GDPR, our legal bases for processing are:

• Contract performance (Article 6(1)(b)): We need your location and project answers to deliver the service you requested.
• Legitimate interests (Article 6(1)(f)): Usage analytics, document processing, report improvement, security and rate limiting, balanced against your rights.
• Consent (Article 6(1)(a)): Where you choose to submit buyer contact details for sharing with a listing agent, or where consent is otherwise requested.
• Legal obligation (Article 6(1)(c)): Where records must be retained for tax, accounting, consumer or regulatory requirements.

• Stripe — payment processing. See Stripe's privacy policy
• Supabase — database hosting (EU region). See Supabase's privacy policy
• Vercel — application hosting. See Vercel's privacy policy
• OpenAI — used for follow-up answers and AI-assisted report, planning-text and document processing. Inputs can include location, planning text and report context. See OpenAI's privacy policy
• Mapbox and OpenStreetMap-based services — location search, map display and road or building context. Map requests can disclose technical information such as IP address and the area being viewed.
• Google Cloud Document AI and Microsoft Azure document services — used where configured to extract text from official planning PDFs that cannot be read reliably as native text.
• Brevo — transactional report and service email delivery, including report links or PDF attachments.
• Vercel Web Analytics and Speed Insights — aggregate product usage and performance measurement.
• Selling Agents / Agencies — If you request a FREE Site Report, we share the contact details you provide (Name, Email, Phone) with the agent or trade organization listing that property, so they can contact you regarding your interest.

We do not sell your data. We do not share your data with advertisers. We do not use your data for purposes unrelated to delivering the CanIBuildHere service.

Some providers may process data outside the European Economic Area. Where required, we rely on adequacy decisions, Standard Contractual Clauses or another lawful transfer mechanism.

• Site check records and reports: Retained while needed to provide report access, meet legal obligations and operate the service. You may request deletion, subject to records we must retain.
• Report email delivery records: Delivery status, attempt count, provider message identifier, timestamps and a limited error description are retained with the order so we can diagnose failures and provide recovery.
• Planning-document extraction cache: Official source URLs, extracted text, page provenance and structured findings may be cached to avoid repeatedly downloading and processing the same public record.
• Usage events: Retained for up to 12 months, then deleted or anonymised.
• Rate-limit and security records: Short-lived technical data or hashed identifiers are retained only as long as reasonably necessary to prevent abuse and investigate incidents.

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing based on legitimate interests
• Data portability (receive your data in a structured format)
• Lodge a complaint with the Data Protection Commission (Ireland) at dataprotection.ie

To exercise any of these rights, email hello@canibuildhere.ie

CanIBuildHere uses essential cookies for authentication, security and service operation. We also use privacy-focused product and performance analytics. We do not use advertising cookies or sell behavioural profiles to advertisers.

Reports use rules, spatial calculations and AI-assisted processing to classify early-stage planning risk and prioritise matters for investigation. This is not a planning decision and is not used to make a legal or similarly significant decision about you. Verify material findings against the linked source before relying on them.

CanIBuildHere is not directed at anyone under 18. We do not knowingly collect personal data from children.

We may update this policy from time to time. Material changes will be communicated via the website.