Short version. We collect only what we need to respond to your Discovery request, verify engineers, and run Production Contracts. We do not sell personal data, we do not run marketing lists, and your data stays in the EU. You can ask us at any time what we hold and have it deleted.
ProofDeploy is operated by FTBI Ltd, a company registered in Ireland (“we”, “us”). FTBI Ltd is the data controller for the personal data described in this notice. Contact: hello@proofdeploy.com.
| When | Data | Purpose | Legal basis (GDPR Art. 6) | Kept for |
|---|---|---|---|---|
| You submit a Discovery request | Name, work email, company, country, description of the problem, indicative budget | To assess the request, reply, and schedule a Discovery call | Steps prior to a contract (1(b)); legitimate interest in responding to enquiries (1(f)) | 12 months after our last contact, unless a contract follows |
| You request an engineer invite | Name, email, country, LinkedIn/GitHub URL, specialisation, description of production work you have shipped | To verify eligibility for the Engineer Passport and decide whether to invite you | Steps prior to a contract (1(b)); legitimate interest in vetting supply (1(f)) | 12 months if not invited; for the life of the account if invited |
| You use app.proofdeploy.com | Email, legal name, organisation, role, sign-in events, actions taken on projects and milestones (audit log), IP address | To operate the platform, secure accounts, evidence acceptance of milestones and resolve disputes | Contract (1(b)); legal obligation for financial records (1(c)); legitimate interest in security and fraud prevention (1(f)) | Account data: life of the account + 6 years for contract and financial records (Irish tax and company law) |
| Payments | Payment and payout details are collected directly by our licensed payment provider, not by us. We receive confirmation of funding and release only. | To hold and release milestone payments | Contract (1(b)) | 6 years (financial records) |
| You email us | Your email address and the content of the message | To reply | Legitimate interest (1(f)) | 24 months |
We do not collect special-category data and ask you not to include it in free-text fields.
proofdeploy.com sets no tracking or advertising cookies. app.proofdeploy.com sets strictly necessary cookies only: a session cookie to keep you signed in and a preference cookie for your language. Because these are essential, no consent banner is required. We do not use third-party analytics scripts on either site. Web fonts are loaded from Google Fonts; Google receives your IP address for that request.
Each processor acts under a written data-processing agreement. We do not share personal data with anyone else except where the law requires it, or where a client and an engineer are parties to the same Production Contract and need each other's contact and delivery details to perform it.
Our primary systems run in the European Union. Where a processor may access data from outside the EEA, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision.
Under the GDPR you may ask us to: access the personal data we hold about you; correct it; delete it; restrict or object to its processing; and receive it in a portable format. Where processing is based on legitimate interest you may object at any time. Email hello@proofdeploy.com; we respond within one month. You also have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie) or your local supervisory authority.
Note: audit records that evidence milestone acceptance and payments form part of a contract and financial record; we may be legally required to retain those even after a deletion request, in which case we will tell you.
Data is encrypted in transit and at rest. Access inside the platform is restricted by role and enforced at the database level; every change to a project or milestone is written to an append-only audit log. Sign-in uses one-time codes and links; we never store passwords.
We will update this notice as the platform develops (for example when we name the payment provider). The version and effective date at the top will change; material changes to how we use your data will be notified to account holders by email.
Proof